Privacy Policy
Last updated: 27 September 2026 · Version 0.1
Toast Atlas is a fun experiment from Ravolution AB, a Stockholm venture studio building platforms that aim to make life a little better for people. This one celebrates how the world raises a glass.
1. Who is responsible for your data
The data controller for Toast Atlas is Ravolution AB, corporate identity number 556709-7547, [ADDRESS PLACEHOLDER], Stockholm, Sweden. Contact: [EMAIL PLACEHOLDER].
The competent supervisory authority is Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm, Sweden, www.imy.se.
2. What we collect
- Account data: email address and display name.
- Age confirmation: the time you confirmed you are of legal drinking age. We do not collect your date of birth.
- Country ties: your home country and countries you have visited or lived in.
- Content: stories, drinks entered in stories, votes, proposals, proposal votes and reports.
- Technical logs: IP address, browser type, timestamps and error information.
- Consent records: what you consented to, the version of the text and the time.
3. Why we use it, and on what legal basis
| Purpose | Data | Legal basis (GDPR art. 6) |
|---|---|---|
| Running your account and community features (posting, voting, proposals) | Account data, country ties, content | Contract, art. 6(1)(b) |
| Security, abuse prevention and moderation | Technical logs, reports, content | Legitimate interest, art. 6(1)(f) |
| Aggregated statistics and rankings | Content, country ties | Legitimate interest, art. 6(1)(f) |
| Non-essential cookies, analytics, personalised ads, newsletters | Cookie identifiers, email, usage data | Consent, art. 6(1)(a) |
| Records we are required to keep (e.g. accounting, responses to authorities) | As required | Legal obligation, art. 6(1)(c) |
Where we rely on legitimate interest, we have balanced our interest against your rights. You may object at any time (see section 8).
4. Health information (special categories)
Stories must describe traditions and typical participants, not your personal health or drinking habits. Information about an identifiable person's alcohol use may be data concerning health under GDPR art. 9.
If you nevertheless choose to share information about your own alcohol use, we process it only with your explicit consent under art. 9(2)(a). This consent is requested through a separate, optional checkbox when you post, and is recorded. You can withdraw it at any time by deleting the story; withdrawal does not affect processing before withdrawal.
Moderators may edit or remove content containing personal health information about you or others without such consent.
5. What is public and what is private
Public: stories, aggregated vote counts, proposals, proposal replies and display names.
Never shown publicly: your email address, your country ties, your individual votes and your consent records.
6. Who helps us, and where your data is stored
- Hosting and database: Lovable Cloud (built on Supabase). [CONFIRM REGION — EU preferred]
- Email delivery: [PLACEHOLDER]
- Analytics: [PLACEHOLDER — only with consent]
Processors act only on our documented instructions under data processing agreements. Personal data is transferred outside the EU/EEA only where appropriate safeguards are in place, such as an adequacy decision or the European Commission's Standard Contractual Clauses (SCCs).
7. How long we keep it
- Account data: until you delete your account. Deleted accounts are purged within 30 days.
- Published stories: anonymised on account deletion (the link to your account is removed), unless you choose full removal.
- Technical logs: 90 days.
- Consent records: as long as needed to demonstrate that consent was given.
- Data we must keep by law: for the period the law requires.
8. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw consent at any time.
You can export your data (JSON) and delete your account yourself on the "Your data" page in your account settings. For other requests, contact us at the address above. We respond within one month.
You have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY).
9. Advertising
The service is free and may display advertising in the future. Personalised advertising will only be shown with your consent. We do not sell personal data.
10. Age
Toast Atlas is only for people who are of legal drinking age in their country, and at least 18 years old. Accounts found to belong to minors are deleted.
11. Changes to this policy
We will notify you of material changes by email or by a notice on the site before they take effect.
12. Celebration calendar and alerts
If you use the celebration calendar we process: what you follow (countries, events or everything), your alert preferences (channels, reminder types, digest day, time zone, language), a private calendar-feed token, and, if you enable browser push, your push subscription (endpoint and keys).
Alerts are based on your consent (GDPR art. 6(1)(a)). Everything is off by default, following alone never turns alerts on, and you can switch alerts off at any time on the Alerts page or with the one-click unsubscribe link in every email. Unsubscribing does not delete your follows. We store when you consented and which text version you agreed to.
To send email alerts we use an email delivery provider acting as our processor. We keep a log of each alert sent (type, channel, time and status) to avoid sending the same alert twice; this log is kept for 12 months and then deleted.
Your calendar-feed link is secret: anyone who has it can see what you follow. You can revoke it and create a new one at any time. Suggestions and votes on calendar dates follow the same rules as stories and votes.