Privacy Notice

Data controller: JóSzaké / [cégnév]. Contact: hello@joszake.hu. You can reach us at this address for any data-protection question.

When you register: name, email address, the optional free-text description (“why do you want sake”), your chosen language, the time you accepted the terms and the accepted EULA version, plus a one-way, irreversible hash of your IP address.

For your account: an irreversible hash of your password (bcrypt – we never store the password itself), whether and when you confirmed your email address, and the security tokens used for email confirmation and password reset. Tokens are stored only as a hash (SHA-256), expire within 24 hours (confirmation) or 1 hour (password reset), and can be used only once.

When you pre-order: name, email address, the packages and quantities in your cart (the items of one checkout share a common reference), the optional note, language and the time of consent. Until you check out, your cart is kept only in a cookie in your browser.

When you send us a message (Contact page): name, email address, the chosen topic, the message text, language, the time of consent and, if you are logged in, the link to your account.

We do not collect or process any payment data.

Purpose: running your membership account (login, email confirmation, password reset), handling pre-orders, answering your messages and contacting you about product availability. The session cookie (joszake_session) keeps you logged in; the cart cookie (joszake_cart) remembers your cart.

We send transactional emails: email confirmation, password reset and pre-order confirmation. Our team receives a notification about new pre-orders and messages. We do not send newsletters.

Legal basis: your voluntary consent (GDPR Art. 6(1)(a)), which you can withdraw at any time. Withdrawal does not affect the lawfulness of prior processing.

We keep your data until you withdraw consent, or at most 24 months after your last activity, after which it is deleted.

Data is stored in a Neon Postgres database in the European Union (Frankfurt region), via Vercel hosting. Transactional emails are sent through the email provider Resend (EU region), which receives the recipient's email address, name and the email content for that purpose. We never sell your data or share it with third parties for marketing.

You have the right to access your data, request rectification or erasure, and withdraw your consent at any time by emailing hello@joszake.hu. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

We only use strictly necessary cookies: the session cookie (joszake_session, valid for 30 days) and the cart cookie (joszake_cart: the packages and quantities in your cart, valid for 30 days). The joszake_age_ok cookie stores your age confirmation for 1 year (functional cookie, no personal data). No analytics or advertising cookies.