Last updated: 13 September 2026
This is a translation for convenience; the German version is legally binding.
SHOOTA GmbH, Sollner Str. 3, 81479 München, email: info@shoota.de. See the legal notice.
Your account consists of your email address and name. On top of that comes the content you create yourself: wines, tastings with ratings and notes, cellar stock and purchases, wishlist, photos of labels and invoices, as well as your credit and its transactions. The legal basis is the performance of the user agreement, Art. 6(1)(b) GDPR.
The app and all data are stored on a server of Hetzner Online GmbH in Germany. The server writes technical access logs (IP address, time, requested address) for operation and security.
You sign in with a link that we send you by email. Emails are sent via Resend, Inc. (USA) as a data processor. Signing in sets a cookie with a signed session identifier that is valid for one year. There are no other cookies, tracking or analytics tools.
Photos of labels and invoices, dictated tasting notes and wine data are transmitted to Anthropic PBC (USA) for analysis and processed there by Claude, for example to read a label, generate a taste profile or estimate an online price via web search. Only what the respective operation needs is transmitted; according to its own terms, Anthropic does not use API data for training. These requests cost credit and only happen when you trigger them or when a wine receives a profile for the first time. The transfer of data to the USA is based on the EU Standard Contractual Clauses.
Purchases on the website are processed by Mollie B.V. (Netherlands). Payment details such as card numbers do not reach us; we receive the payment status and a transaction number. In-app purchases from the App Store or Google Play are handled by the respective store; the purchase notification reaches us via RevenueCat, Inc. (USA) with the product, transaction number and your user ID.
Anyone who invites you or whom you invite sees your name and your tastings in the shared feed. Your cellar is only visible to those you explicitly share it with. Only you see prices.
Your data remains until you delete your account. You can do this at any time in the app under “You”. This removes wines, tastings, photos, purchases and credit. Logs of AI requests are kept as cost records without any link to you personally. Expired sign-in links are deleted on an ongoing basis.
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Under “You” you can download your cellar and tastings as CSV, change your name and delete your account. For anything else, write to info@shoota.de. Complaints can be lodged with the competent data protection supervisory authority, which for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht).