Blind Tasting

Privacy Policy

Last updated: 11 July 2026

This Privacy Policy explains how Blind Tasting (“we”, “us”) collects, uses, and protects your personal data when you use blindtasting.fun (the “Service”). We designed Blind Tasting to work with minimal data collection: you can play the daily game without creating an account and without any personal data leaving your browser, unless you consent to analytics.

1. Data Controller

The data controller responsible for your personal data is the operator of blindtasting.fun. For all privacy-related matters, you can reach us at hello@blindtasting.fun.

2. What Data We Collect and Why

2.1 Account data (Food Passport)

If you choose to create a Food Passport, we collect your email address. It is used exclusively for authentication via magic link login. We do not send marketing emails.

Legal basis:performance of a contract (Art. 6(1)(b) GDPR) — providing the account you requested.

2.2 Game results

If you are logged in, we store your guesses, scores, and game verdicts so that your play history is available on your Passport page. If you play without an account, game results are stored only locally in your browser and are not transmitted to us.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

2.3 Analytics data

With your consent, we send anonymous gameplay events (e.g., game started, guess submitted, game won/lost) to PostHog to understand how the game is played. No personal identifiers are attached to these events unless you are logged in. If you reject analytics cookies, PostHog is never loaded and no tracking data leaves your browser.

Legal basis: consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time (see Section 6).

2.4 Contact form submissions

If you contact us via the contact form, we collect your name, email address, and message text in order to respond to your inquiry.

Legal basis:legitimate interest (Art. 6(1)(f) GDPR) — responding to your request.

3. Cookies and Local Storage

Name / KeyPurposeCategory
Supabase auth cookiesKeep you logged in (session token)Strictly necessary
PostHog cookiesAnonymous analytics (device ID, session replay)Analytics — set only with your consent
bt_sessionSaves today’s completed game statelocalStorage (not a cookie)
bt_statsYour streak and win ratelocalStorage
bt_cookie_consentRemembers your cookie preferencelocalStorage

Strictly necessary cookies and local storage entries do not require consent, as they are essential for the Service to function. Analytics cookies are set only after you have given consent via the cookie banner.

4. Third-Party Processors

We use the following service providers, who process data on our behalf under data processing agreements:

ProviderPurposeLocation
SupabaseDatabase & authenticationEU region
PostHogProduct analyticsEU Cloud
VercelHosting & cookieless web analyticsGlobal infrastructure
ResendTransactional email (magic links)United States

International transfers:Where a provider processes data outside the EU/EEA (e.g., Vercel, Resend), transfers are safeguarded by the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

5. Data Retention

  • Account and game data: retained for as long as your Food Passport account exists. If you delete your account, all associated data is permanently removed.
  • Analytics data: retained for 12 months, then automatically deleted by PostHog.
  • Contact form submissions: retained only as long as necessary to handle your inquiry.
  • Local storage data (bt_session, bt_stats, bt_cookie_consent): stored only on your device and under your control; you can clear it at any time via your browser settings.

6. Your Rights

If you are located in the EU/EEA, you have the following rights under the GDPR:

  • Access (Art. 15) — request a copy of the personal data we hold about you
  • Rectification (Art. 16) — request correction of inaccurate data
  • Erasure (Art. 17) — request deletion of your data
  • Data portability (Art. 20) — receive your data in a structured, machine-readable format
  • Withdrawal of consent (Art. 7(3)) — withdraw analytics consent at any time by rejecting cookies in the banner or clearing the bt_cookie_consent entry
  • Objection (Art. 21) — object to processing based on legitimate interest
  • Complaint — lodge a complaint with your local supervisory authority (in Germany, the competent Landesdatenschutzbehörde)

To exercise any of these rights, email us at hello@blindtasting.fun. We will respond within one month.

7. Data Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), authentication via magic links (no passwords stored), and access controls at our infrastructure providers.

8. Children

Blind Tasting is a general-audience game and does not knowingly collect personal data from children. Playing does not require an account or any personal information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be announced on the Service.

10. Contact

Questions about this policy? Email hello@blindtasting.fun or use the contact form.

© 2026 Blind Tasting

A daily ritual for the curious palate

PrivacyTermsContact