Privacy policy
Last updated 6 November 2026
Wheel of Taste (Smakshjulet) is a cider tasting service, on your own or together with others. We collect as little as possible, and only what the service needs to work.
Data controller
Sandalen gård is responsible for the processing of personal data in Wheel of Taste. Privacy questions: sandalentools@sandalengard.no.
What we store
- Tastings: your answers (appearance, aromas, palate, finish, rating and notes), and optionally the cider's name, producer and vintage.
- Live tastings: the name you enter when you join. It is shown to the host and the other participants of that tasting.
- Profile (optional): e-mail address, display name, and which tastings belong to the profile.
- Sign-in: one-time codes are stored only as a cryptographic hash and expire after 15 minutes. Access tokens are also stored only as hashes.
- Sign in with Google or Facebook: we only receive the name and e-mail address of your account. We never get your password and never post anything on your behalf.
We do not use analytics or advertising tools, and we do not sell or share data with others for marketing.
Why we store it
- To provide the service: run tastings, show results and create tasting reports.
- To show your history when you are signed in.
- To keep the service secure, for example by limiting sign-in abuse.
The legal basis is that processing is necessary to provide the service you request (GDPR Art. 6(1)(b)), and our legitimate interest in keeping the service secure (Art. 6(1)(f)).
Cookies and local storage
Wheel of Taste does not use cookies for tracking. Your browser stores an access token and your language choice locally so you can continue a tasting or stay signed in. If you choose to sign in with Google or Facebook, their sign-in component is loaded on the sign-in page and may set its own cookies under their terms.
Who processes the data
- Microsoft Azure – hosting of the service and database.
- Webhuset – web hosting and sending e-mails with sign-in codes.
- Google and Meta (Facebook) – only if you choose to sign in with them.
How long we keep it
Your profile and tastings are kept until you ask us to delete them. Access tokens expire automatically (tastings without a profile after 30 days, profile sign-in after 90 days). We may delete old tastings that are not linked to a profile.
How to delete your data
Send an e-mail to sandalentools@sandalengard.no with the subject "Data deletion" from the e-mail address you used in Wheel of Taste (also if you signed in with Google or Facebook). We delete the profile and its tastings within 30 days and confirm when it is done.
If you signed in with Facebook, you can also remove the app under Settings → Apps and websites on Facebook.
Your rights
You have the right to access, correct and delete your data, and to object to or restrict processing. Contact us at the address above. If you believe we process your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet.