In short
This website (wewine.app) uses one cookie to remember your choice and, only if you accept, Google Analytics cookies to count visits. We use no advertising cookies, no social-media embeds and no other third-party scripts; even the fonts are served from our own server. Nothing from Google loads until you say yes.
Your choice
When you first visit, a banner asks whether you accept analytics cookies. Accept and Reject are equally easy, and Settings lets you switch analytics on or off — it is off until you switch it on. If you close the page without choosing, nothing is set.
You can change your mind at any time: choose Cookie settings at the foot of any page. If you withdraw your consent, we stop analytics straight away and delete the Google Analytics cookies from your browser. Withdrawing does not affect what was collected before.
Your choice applies to this website and to the web app at app.wewine.app, which share it. We ask again after 13 months, or sooner if what we ask you to accept changes.
Cookies on this website
| Cookie | Provider | Purpose | Type | Lasts |
|---|---|---|---|---|
wewine_consent | WeWine (first party, on wewine.app and app.wewine.app) | Remembers whether you accepted or rejected analytics, and when | Strictly necessary — no consent needed | 13 months |
_ga | Google Analytics, set on wewine.app | Tells visits from the same browser apart with a random number, so we can count visitors | Analytics — only with your consent | 13 months from your last visit |
_ga_<ID> (for example _ga_ABC123) | Google Analytics, set on wewine.app | Keeps track of the current visit (session) | Analytics — only with your consent | 13 months from your last visit |
What analytics tells us, and what it does not
With your consent, Google Analytics 4 records which pages are viewed, which buttons into the quiz and the web app are used, which Winepedia articles are read, and general information about the device and browser, the language and the approximate area (country or city, derived from the IP address). We use it only to see which pages help and to improve the site.
We have set it up to collect as little as possible:
- No advertising. Google signals, ad personalisation and every advertising feature are switched off; the advertising consent options are always set to “denied”.
- No identity. We do not send your name, email, account ID or anything else that identifies you, and we do not link analytics to a WeWine account.
- No codes. Addresses are cleaned before they are sent: share and invitation codes (in
/r/and/i/links) and any other parameters are removed; only our own campaign tags (utm_…) remain. - Visit to app. If you go from this site to app.wewine.app after accepting, the random analytics identifier can travel with the link (a
_glparameter) so the two visits count as one. Without your consent, nothing is passed. - Google states that Google Analytics 4 does not log or store IP addresses.
Google keeps the detailed analytics data for 14 months; after that, only aggregated reports remain.
Who provides it
Google Analytics is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), which processes the data on our behalf under Google’s data processing terms. Google may process it in the United States through Google LLC, which is certified under the EU–US Data Privacy Framework; Google’s terms also include the European Commission’s Standard Contractual Clauses. See how Google uses information from sites that use its services and the Google privacy policy.
Other ways to control cookies
You can also delete or block cookies in your browser settings, or install Google’s opt-out add-on for Google Analytics. Blocking the wewine_consent cookie means we cannot remember your choice, so the banner will ask again.
The WeWine web app
The web app at app.wewine.app needs to store some information in your browser to work:
| Type | Purpose | Consent |
|---|---|---|
| Strictly necessary | Keeping you signed in (Firebase Authentication); remembering your language; protecting sign-in from abuse (Firebase App Check); remembering your cookie choice (wewine_consent, shared with this website) | Not required — the app cannot work without them |
| Preferences | Remembering choices such as the theme | Not required when they only serve what you asked for |
| Analytics | Understanding how the app is used (Google Analytics, set up as described above), without advertising | Only with your consent, which you can withdraw at any time |
What the web app stores in your browser:
| Name | Where | Purpose | Type | Duration |
|---|---|---|---|---|
wewine_consent | Cookie, WeWine (shared with this website) | Remembers whether you accepted or rejected analytics, and when | Strictly necessary | 13 months |
wewine_adult | Cookie, WeWine | Remembers that you confirmed you are 18 or older | Strictly necessary | 1 year |
wewine_locale | Cookie, WeWine | Remembers the language you chose | Strictly necessary (preference you asked for) | 1 year |
| Firebase Authentication session | Browser storage, Google Firebase | Keeps you signed in | Strictly necessary | Until you sign out |
wewine.emailForSignIn | Browser storage, WeWine | Holds your email address while you finish an email-link sign-in | Strictly necessary | Until the sign-in completes |
wewine.adultRefused | Browser storage, WeWine | Remembers that you said you are under 18 | Strictly necessary | Until you clear it |
_ga, _ga_<ID> | Cookies, Google Analytics | As on this website (above) | Analytics: only with your consent | 13 months from your last visit |
You make and change your choice in the app’s cookie banner and in Settings → Privacy.
Questions
Review notes for counsel: confirm the cookie table against the production build (GA4 cookie names and the 13-month
cookie_expiressetting;_gais renewed on each visit, so “13 months from your last visit”); whether Google acts as processor (Google Ads Data Processing Terms / GA data-sharing settings off) and the DPF/SCC wording; the 14-month GA data-retention setting; thatwewine_consentis strictly necessary and may be shared across wewine.app and app.wewine.app; the 13-month re-consent period (AEPD guide 2023 allows up to 24 months); the cross-domain linker disclosure; banner wording (equal Accept/Reject, no pre-ticked boxes); complete the web-app inventory from its final build; confirm that the App Check provider is strictly necessary under the AEPD cookie guide (2023 update).