Privacy policy
Learn freely. Know what is saved.
Willie’s Wine Lessons is available without an account. This policy explains the limited information used when you sign in, save progress, or visit the site.
Information we collect
If you create an account, we receive your account identifier, email address, optional display name, and sign-in provider from Firebase Authentication. We save lesson completion, quiz scores, and quiz-attempt dates so your progress works across devices.
If you use Host Mode, we save the party name, date, guest count, optional budget and food notes, teaching mode and output choices, responsible-host acknowledgement, class or custom wine-role selection, shopping-plan status, bottle-label information you deliberately enter, whether you already own the bottle, and the resulting identity and teaching-role review. This information is used to provide and recover your party; it is not used for advertising.
If you continue without an account, lesson progress is stored only in your browser unless you later choose to add it to an account.
If you send lesson feedback, we save the lesson, category, 1–5 content rating, written feedback, and submission date. Signed-in feedback includes your verified account name and email. If you are not signed in, you may provide an email address only if you would like a reply.
Analytics
Google Analytics measures page visits, general engagement, sign-in method, aggregate quiz events such as lesson, score, question count, and completion, and a feedback-submitted event containing only lesson and category. Analytics begins automatically when supported. Advertising storage, advertising user data, and ad personalization are disabled. We do not send feedback text, email addresses, content ratings, quiz answers, tasting notes, or payment information to Analytics.
How information is used
We use this information to authenticate learners, restore course progress, show the next class, improve lessons, prevent abuse, and operate the site. We do not sell personal information or use learner data for advertising.
Maps in the mobile apps
Regional maps use Apple Maps on iOS and Google Maps on Android. Viewing a region does not request your device location. Map providers receive network requests for the areas you view and process technical information under their own terms. Google's Maps SDK collects information including device metadata, crash metrics, IP addresses and an SDK identifier. These map-service requests are separate from our app Analytics setting. We do not add region names or map coordinates to our Analytics events. See Apple Maps privacy information and Google Maps SDK data disclosures.
Services and storage
Authentication is provided by Firebase. Site delivery and account progress use the site’s hosting and database services. Google Analytics provides audience and product-usage measurement. These providers process information under their own security and privacy terms.
Your choices
You may use every public lesson without signing in and can sign out at any time. Feedback and a guest reply email are optional. Signed-in learners can download a JSON copy of the learner data currently covered by account export, including signed-in feedback, or permanently delete their account from the account page. Deletion removes the Firebase sign-in identity and application profile, roles, quiz history, progress, certificates, signed-in feedback, Host parties and shopping-plan foundations, and related administrator records. Host data will be added to export before Host Mode is made publicly available. Device-only guest progress and feedback sent while not signed in are separate.
Retention
Account data is kept while the account is active and removed through self-service deletion. Host parties have an application expiry 90 days after the event date; provider deletion automation and account-export inclusion remain release gates before Host Mode is made publicly available. Anonymous feedback is kept for lesson improvement unless removed by an administrator. A one-way hash of the deleted Firebase identifier is retained for two hours to prevent an already-issued token from recreating the account. One-way rate-limit keys and counts are retained for no more than 24 hours. No email, display name, feedback text, quiz answer, or bearer token is stored in those controls.
Updates
This policy may change as account and class features develop. Material changes will be reflected on this page. Last updated September 5, 2026.
