Legal

Account and Data Deletion

My Cigar Shelf  ·  Last updated: 1 September 2026

1. How to ask a person instead

The buttons in section 2 are faster and need nobody’s help. If you would rather ask us, or you cannot get into the account you want gone, write to hello@mycigarshelf.com from the email address the account uses. Sending from that address is how we know the request is yours; if you cannot, say so and we will find another way to check before we erase anything.

We answer within 30 days, which is the GDPR limit rather than our target. In practice it is a person reading the mail, not a queue.

2. The two buttons

On this site, the account panel has a Delete account button and it works. It tells the shared deletion function which shelf it is calling from, the function has a My Cigar Shelf branch, and that branch removes cigar data and touches no other shelf app.

In the app, Profile has a Delete account button behind two confirmations. It sends the same request to the same function, so the result is the same.

An earlier version of this page pointed you at section 8 of the privacy policy to find out whether the button was safe to use, and that section said it was not and told you not to press it. It was wrong. Section 11 of the privacy policy now records that, and section 8 there describes what actually happens.

3. What is deleted

• Every photograph the app uploaded for you, of your cigars, your boxes and your sessions. These go first, and if they cannot be removed the deletion stops before any record is touched.
• Your humidors: each box you named, its humidity and temperature targets, its capacity and when you created it.
• The cigars recorded in them: which cigar it is or the name you typed, how many, the format, the date you put it away, any aging target, and your notes.
• Your smoke sessions: the cigar, when you smoked it, your burn, draw, construction, aroma and overall scores, the flavour notes, the drink you paired, where you were, how long it took and anything you wrote, along with the first, second and final third recorded within each one.
• Every humidity and temperature reading logged against your boxes, and the humidor maintenance you logged.
• Your wishlist, the lounges you saved and the gear you recorded.
• The account itself: your email address, the name you gave if you gave one, and the account identifier. See section 4, which is where this gets conditional.

It is permanent. There is no recovery window and no copy we can restore from afterwards. Deleted rows can sit in our database provider’s routine backups until those age out, and we are not going to quote a number for that, because it is our provider’s schedule rather than ours.

The public registry is not touched, because it is not about you. We checked the columns on that table: a registry row says a cigar exists, and it carries no column for a user at all.

4. The login is shared, and that changes what deletion means

Your sign-in is the ShelfHub account, one login across My Bar Shelf, My Whiskey Shelf, My Wine Shelf, My Beer Shelf, My Cigar Shelf, My Coffee Shelf and My Supply Shelf. Deleting your cigar records always erases everything in section 3. The login itself is a separate question: if you also use another shelf app, removing the login would destroy your account there too, so we leave it in place and erase the cigar data only.

If you want the login gone as well, say so in the same email and we will remove it. If My Cigar Shelf is the only shelf app you use, tell us and we will take the login with it.

5. Ask for a copy first, if you want one

There is no export button on this site. If you want what we hold before it goes, ask in the same email and we will assemble the file by hand and send it to you. Deletion is permanent, so ask before rather than after.

6. What is left afterwards

Saying “nothing” would be easier and it would not be true.

• Crash reports. The app sends crashes and errors to Sentry, on its German service, and the deletion does not touch Sentry. We never attach an account to a report, but the library keeps a trail of the network requests leading up to a fault and some of those carry your account identifier, so we will not claim a report holds nothing about you. Tell us roughly when a crash happened and we will look for it.
• Usage events, if you turned analytics on in the app. They sit with Mixpanel on its EU service, keyed to your account identifier, and the deletion does not touch Mixpanel. Ask and we will have them removed.
• Your subscriber record at RevenueCat. The app asks RevenueCat on launch whether your account holds a subscription, and our own server asks it again with your account identifier every time you run a band scan, so a record exists there even if you never bought anything. The deletion does not touch it. Ask and we will remove it.
• What Google holds from a band scan. The app’s band scan photographs a cigar band and sends the picture to Google to be read. We keep no copy, but what Google keeps after reading it is governed by Google’s own terms for that API, and no deletion of ours reaches it. Section 5 of the privacy policy sets out the whole path.
• Barcode contributions. A barcode you scanned and confirmed stays in the pooled table. The row holds the barcode, the cigar and the account identifier of whoever contributed it. That identifier comes off only when your sign-in is deleted. If the sign-in is kept because another shelf app still holds your data, your identifier stays on the row. An earlier version of this page said deletion always strips it.
• Four shared records, but only if the login is kept because another shelf app still holds your data: your analytics choice, which is the one row My Cigar Shelf, My Bar Shelf, My Whiskey Shelf, My Wine Shelf and My Beer Shelf all read; your AI scan tally, which is the ledger My Cigar Shelf, My Whiskey Shelf and My Coffee Shelf count against; the log of notifications sent to you; and your identifier on any pooled barcode row you contributed. If the login goes, all four go with it. An earlier version of this page counted three and left out the barcode identifier.
• Server request logs. Our host keeps the ordinary request logs any web server keeps, on its own operational retention schedule. We do not read them to reconstruct a reader, and there is no tool on this site that would let us.
• The email you sent us, and our reply, kept as the record that we acted on a request. That is the only thing on this list we keep on purpose.

Write to hello@mycigarshelf.com and we will remove by hand whatever the button cannot reach.

Nothing on this website is for sale: no subscription, no in-app purchase, no paywall, and no purchase record from us. The app is a different matter, which is why RevenueCat is on the list above. Anything you bought through the App Store or Google Play is billed by them, and the receipt is theirs to keep. Deleting your account does not cancel a subscription; cancel that in your store account settings.

7. What changed on this page

Updated 1 September 2026, alongside version 2.3 of the privacy policy. Section 3 said “your sessions, including how you split each one” and nothing about what a session actually holds, and it left out the humidor maintenance log entirely, while presenting itself as the full list. Both are now written out. Section 4 named three Shelf apps and trailed off with “and the rest”; it now names all seven. Section 6 called two of the four surviving shared records “your analytics choice” and “your AI scan tally” without saying which apps read them, and those are two different sets of apps rather than one; both are now named.

8. If it does not happen

If you have asked and nothing has come back, write again to hello@mycigarshelf.com. You can also complain to your national supervisory authority; in Sweden that is Integritetsskyddsmyndigheten (IMY).

Nisshagen Advisory AB, Stockholm, Sweden.