Legal
Privacy Policy
This is a pre-launch site. There is no My Cigar Shelf app yet, no accounts, and no product data. The personal data we hold is the email address you choose to give us, the record of your consent, and the short technical record of the sign-up set out below, which includes a one-way hash of your IP address, used to stop the form being flooded. We never sell any of it, and you can have all of it deleted at any time by asking.
1. Who We Are
My Cigar Shelf is a project of Nisshagen Advisory AB (Org.nr 559526-6742), a company registered in Stockholm, Sweden. We are the data controller for personal data collected through the mycigarshelf.com website.
Contact us at hello@mycigarshelf.com for any privacy-related question, including data subject requests under the GDPR.
This policy covers the mycigarshelf.com website only. If and when an app is released, this policy will be replaced by one that covers it, and anyone on the interest list will be told before that happens.
2. What Data We Collect
Only what the sign-up form sends, and nothing more. There is no account, no login, no profile and no advertising identifier on this site.
| Data | Why we collect it | Where it is stored |
|---|---|---|
| Email address | So we can tell you once, if and when My Cigar Shelf is ready to test | Supabase (EU) |
| Which app you registered for | Measuring which apps in the "shelf" family people actually want, so we know what to build | Supabase (EU) |
| Consent: that you ticked the box, stored as a yes or no | Proving we had a lawful basis to email you, as the GDPR requires | Supabase (EU) |
| Consent wording: the exact sentence you agreed to | Showing precisely what you consented to, not merely that you consented | Supabase (EU) |
| The date and time you signed up and gave consent | Proof that consent was given, and when. Required under GDPR Article 7(1). | Supabase (EU) |
| The page address you signed up from | Knowing which page produced the sign-up | Supabase (EU) |
| The referring site, if your browser sent one | Understanding where interest came from, in aggregate | Supabase (EU) |
| Your browser's language setting | Judging which languages an app would need. It is the language preference itself and nothing else. | Supabase (EU) |
| A one-way hash of your IP address: the address is salted and put through SHA-256, and the first 32 characters of the result are kept | Limiting sign-ups to five per hour from the same network, so the form cannot be flooded. Your actual IP address is never written to the database, and the stored hash cannot be turned back into an address. It is still information derived from you, so we treat it as personal data and it is deleted with the rest of your entry. | Supabase (EU), stored on your sign-up row |
The site uses Vercel Web Analytics for aggregate, anonymous traffic measurement (page views, referrers, country-level location). It is cookieless, does not track individuals across sessions or sites, and does not build user profiles. There are no other tracking pixels and no non-essential cookies. If we add any, we will update this policy before they take effect.
The age confirmation stores a single entry in your browser's local storage recording that you confirmed, and when. It contains no personal data, never leaves your device, and is not readable by us.
3. Legal Basis for Processing
We process your personal data under the following legal bases as defined by the GDPR:
- Consent: we store and use your email address only because you ticked the consent box on the form. The box is never pre-ticked, and you may withdraw consent at any time.
- Legitimate interests: basic security measures such as rate-limiting and spam prevention, so the form is not abused.
4. Third-Party Services
We use two services to operate this site:
- Supabase: database hosting for the interest list, hosted in the EU
- Vercel: website hosting and cookieless aggregate analytics
Fonts are served by Google Fonts, which means your browser requests the font files from Google's servers and Google receives your IP address as part of that request. No font-related cookies are set.
We do not sell your data to any third party, and none of our providers use your data for advertising purposes.
5. How Long We Keep Your Data
We keep your email address until one of the following happens, whichever comes first:
- You ask us to remove it
- You unsubscribe from the message we send
- We decide not to build My Cigar Shelf, at which point the list is deleted
- Two years pass with no launch and no contact from you
Consent records are kept for as long as we hold the email address, because they are the evidence that we were allowed to hold it. Everything else listed in the table above, including the IP hash, sits on the same row as your address and is deleted with it.
6. Your Rights Under GDPR
As a user in the European Economic Area, you have the right to:
- Access: request a copy of the data we hold about you
- Rectification: ask us to correct an inaccurate address
- Erasure: ask us to delete your entry entirely
- Portability: request your data in a portable format
- Withdraw consent: tell us to stop at any time, without giving a reason; withdrawal does not affect processing carried out before then
- Object and restrict: object to processing based on legitimate interests, or ask us to restrict it
To exercise any of these rights, contact us at hello@mycigarshelf.com. We will respond within 30 days. You also have the right to lodge a complaint with your national supervisory authority. In Sweden this is Integritetsskyddsmyndigheten (IMY).
7. Removing Yourself From the List
Email hello@mycigarshelf.com from the address you signed up with, or reply to any message we send, and your entry is deleted. No form, no account, no reason needed.
8. Age
My Cigar Shelf concerns cigar collections and is intended solely for adults who are 21 or over, or of legal age to purchase tobacco products in their country of residence. The site asks you to confirm this before use. We do not knowingly collect data from anyone below that age. If you believe a minor has given us an email address, write to us and we will delete it.
9. Changes to This Policy
If we make material changes to this privacy policy, we will publish the updated version here and update the version number and effective date at the top of this page. If the change materially affects how we use an address already on the list, we will tell the people on that list before it takes effect.
10. Contact
Questions or concerns about your privacy? Contact us at hello@mycigarshelf.com.
Nisshagen Advisory AB, Stockholm, Sweden.