Legal
Privacy Policy
This policy covers the myshelfhub.com website only. It is an index of our apps and a mailing list; there is no account here and no app data. The personal data we hold is the email address you choose to give us, the record of your consent, and the short technical record of the sign-up set out below, which includes a one-way hash of your IP address used to stop the form being flooded. Each app has its own privacy policy covering what that app stores — links are in section 2.
1. Who we are
Shelf Hub and the “my X shelf” apps are products of Nisshagen Advisory AB (Org.nr 559526-6742), a company registered in Stockholm, Sweden. We are the data controller for personal data collected through myshelfhub.com.
Contact hello@myshelfhub.com for any privacy question, including data subject requests under the GDPR.
2. The apps have their own policies
This site does not hold anything you put into an app. What each app stores about your shelf, and how to have it deleted, is set out in that app’s own policy:
The apps share one sign-in and, between My Bar Shelf and My Whiskey Shelf, one bottle inventory. That sharing happens between apps under your own account. Nothing is shared with anyone outside it.
3. What this site collects
Only what the sign-up form sends, and nothing more. There is no account on this site, no login, no profile and no advertising identifier.
| Data | Why we collect it | Where it is stored |
|---|---|---|
| Email address | So we can tell you when a shelf app is ready to install | Supabase (EU) |
| Which site you registered on | Measuring which apps in the family people actually want, so we know what to build | Supabase (EU) |
| Consent: that you ticked the box, stored as a yes or no | Proving we had a lawful basis to email you, as the GDPR requires | Supabase (EU) |
| Consent wording: the exact sentence you agreed to | Showing precisely what you consented to, not merely that you consented | Supabase (EU) |
| The date and time you signed up and gave consent | Proof that consent was given, and when. Required under GDPR Article 7(1). | Supabase (EU) |
| The page address you signed up from | Knowing which page produced the sign-up | Supabase (EU) |
| The referring site, if your browser sent one | Understanding where interest came from, in aggregate | Supabase (EU) |
| Your browser’s language setting | Judging which languages an app would need. It is the language preference itself and nothing else. | Supabase (EU) |
| A one-way hash of your IP address: the address is salted and put through SHA-256, and the first 32 characters of the result are kept | Limiting sign-ups to five per hour from the same network, so the form cannot be flooded. Your actual IP address is never written to the database, and the stored hash cannot be turned back into an address. It is still information derived from you, so we treat it as personal data and it is deleted with the rest of your entry. | Supabase (EU), stored on your sign-up row |
The site uses Vercel Web Analytics for aggregate, anonymous traffic measurement (page views, referrers, country-level location). It is cookieless, does not track individuals across sessions or sites, and does not build user profiles. There are no other tracking pixels and no non-essential cookies. If we add any, we will update this policy before they take effect.
4. Legal basis for processing
- Consent: we store and use your email address only because you ticked the consent box. The box is never pre-ticked, and you may withdraw consent at any time.
- Legitimate interests: basic security measures such as rate-limiting and spam prevention, so the form is not abused.
5. Third parties we use
- Supabase — database hosting for the mailing list, hosted in the EU
- Vercel — website hosting and cookieless aggregate analytics
Fonts are served by Google Fonts, which means your browser requests the font files from Google’s servers and Google receives your IP address as part of that request. No font-related cookies are set.
We do not sell your data to any third party, and none of our providers use your data for advertising.
6. How long we keep your data
We keep your email address until one of the following happens, whichever comes first:
- You ask us to remove it
- You unsubscribe from a message we send
- We stop building shelf apps, at which point the list is deleted
- Two years pass with no release and no contact from you
Consent records are kept for as long as we hold the email address, because they are the evidence that we were allowed to hold it. Everything else listed in the table above, including the IP hash, sits on the same row as your address and is deleted with it.
7. Your rights under the GDPR
As a user in the European Economic Area, you have the right to:
- Access: request a copy of the data we hold about you
- Rectification: ask us to correct an inaccurate address
- Erasure: ask us to delete your entry entirely
- Portability: request your data in a portable format
- Withdraw consent: tell us to stop at any time, without giving a reason; withdrawal does not affect processing carried out before then
- Object and restrict: object to processing based on legitimate interests, or ask us to restrict it
To exercise any of these rights, write to hello@myshelfhub.com. We will respond within 30 days. You also have the right to lodge a complaint with your national supervisory authority; in Sweden that is Integritetsskyddsmyndigheten (IMY).
8. Leaving, and leaving completely
Email hello@myshelfhub.com from the address you signed up with, or reply to any message we send, and your entry is deleted. No form, no account, no reason needed.
If you also have an account in one of the apps and want everything gone — the mailing list and every shelf across every app — say so in the same message and we will do it in one go. You should not have to write to four addresses to leave.
9. Age
Several of the apps described on this site concern alcohol or tobacco and are intended solely for adults of legal age in their country of residence. We do not knowingly collect data from anyone below that age. If you believe a minor has given us an email address, write to us and we will delete it.
10. Changes to this policy
If we make material changes we will publish the updated version here and update the version number and effective date at the top of this page. If a change materially affects how we use an address already on the list, we will tell the people on that list before it takes effect.
11. Contact
Questions or concerns about your privacy? Write to hello@myshelfhub.com.
Nisshagen Advisory AB, Stockholm, Sweden.