Last updated: 11 July 2026
This Privacy Policy explains how Blind Tasting (“we”, “us”) collects, uses, and protects your personal data when you use blindtasting.fun (the “Service”). We designed Blind Tasting to work with minimal data collection: you can play the daily game without creating an account and without any personal data leaving your browser, unless you consent to analytics.
The data controller responsible for your personal data is the operator of blindtasting.fun. For all privacy-related matters, you can reach us at hello@blindtasting.fun.
If you choose to create a Food Passport, we collect your email address. It is used exclusively for authentication via magic link login. We do not send marketing emails.
Legal basis:performance of a contract (Art. 6(1)(b) GDPR) — providing the account you requested.
If you are logged in, we store your guesses, scores, and game verdicts so that your play history is available on your Passport page. If you play without an account, game results are stored only locally in your browser and are not transmitted to us.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
With your consent, we send anonymous gameplay events (e.g., game started, guess submitted, game won/lost) to PostHog to understand how the game is played. No personal identifiers are attached to these events unless you are logged in. If you reject analytics cookies, PostHog is never loaded and no tracking data leaves your browser.
Legal basis: consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time (see Section 6).
If you contact us via the contact form, we collect your name, email address, and message text in order to respond to your inquiry.
Legal basis:legitimate interest (Art. 6(1)(f) GDPR) — responding to your request.
| Name / Key | Purpose | Category |
|---|---|---|
| Supabase auth cookies | Keep you logged in (session token) | Strictly necessary |
| PostHog cookies | Anonymous analytics (device ID, session replay) | Analytics — set only with your consent |
bt_session | Saves today’s completed game state | localStorage (not a cookie) |
bt_stats | Your streak and win rate | localStorage |
bt_cookie_consent | Remembers your cookie preference | localStorage |
Strictly necessary cookies and local storage entries do not require consent, as they are essential for the Service to function. Analytics cookies are set only after you have given consent via the cookie banner.
We use the following service providers, who process data on our behalf under data processing agreements:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database & authentication | EU region |
| PostHog | Product analytics | EU Cloud |
| Vercel | Hosting & cookieless web analytics | Global infrastructure |
| Resend | Transactional email (magic links) | United States |
International transfers:Where a provider processes data outside the EU/EEA (e.g., Vercel, Resend), transfers are safeguarded by the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
bt_session, bt_stats, bt_cookie_consent): stored only on your device and under your control; you can clear it at any time via your browser settings.If you are located in the EU/EEA, you have the following rights under the GDPR:
bt_cookie_consent entryTo exercise any of these rights, email us at hello@blindtasting.fun. We will respond within one month.
We use industry-standard measures to protect your data, including encrypted connections (TLS), authentication via magic links (no passwords stored), and access controls at our infrastructure providers.
Blind Tasting is a general-audience game and does not knowingly collect personal data from children. Playing does not require an account or any personal information.
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be announced on the Service.
Questions about this policy? Email hello@blindtasting.fun or use the contact form.