Humidor Club

Privacy policy

Effective August 6, 2026 · replaces all earlier versions

1. The journal — no account, nothing uploaded

You can use Humidor Club and never create an account. In that mode nothing changes from before: your tasting sessions, your custom rubric, your humidor, your lots and resting times, your palate analytics and everything you paid for your cigars are stored on your device and are not uploaded anywhere. We cannot see them, we cannot recover them, and we do not have a copy.

Clubs are the only part of the product that needs an account. If you never open that part, this section is the whole policy for you — apart from analytics and purchases below.

2. Your account

Joining or creating a club requires an account. The only way to sign in is Sign in with Apple. There is no password anywhere in the system, because we never create one.

What Apple gives us: a stable identifier for you that is unique to this app, and an email address — which is a private relay address if you chose “Hide My Email”, and we are fine with that. Apple passes your name exactly once, at your first sign-in, and only if you allow it.

What you enter yourself: first name, last name, a profile photo, and your region — the country and, if you like, the city. Never coordinates, never precise location, never anything read from your device’s GPS. Optionally: a short bio and how long you have been smoking.

Name, photo and region are required to be in a club. A club is a small circle of people who often meet in person, and faceless accounts are exactly how such places rot. Your region is there because cigar culture is regional and “who is nearby” is a real reason to join.

3. What gets published, and when

Nothing is published automatically. Not once, not ever. A tasting leaves your device only after you tap share, pick which of your clubs it goes to, and confirm.

When you do, the following goes to the server and becomes visible to the members of exactly those clubs:

• the cigar — brand, line, vitola, origin, wrapper;
• your score, both as a normalised 0–1 value and as it looks in your own rubric (“92/100”, “4.5★”);
• the flavour descriptors you tapped;
• your verdict in your own words, and whether you would smoke it again;
• a photo, if you attached one;
• the date you smoked it.

Your humidor is visible in a club only if you switched on the humidor toggle for that club; then members of that club see which cigars are on the shelf and how long they have been resting. Both toggles — humidor and tastings — are stored per club and set independently. Turning something on for one club never turns it on for another, and you can be a member of a club with both switched off for as long as you like.

The cigar page (“who else has smoked this”) is built only from the clubs you and the other person share. There is no global feed, no public profile page, and nothing on this website is generated from members’ tastings.

4. What never leaves your device

Regardless of any setting, in any club, at any time:

• prices — what you paid for a cigar or a box;
• the value of your collection, and any figure derived from it;
• your private tasting entries that you have not explicitly published;
• anything in the journal from before you created an account.

These are not hidden behind a default setting — there is no request that carries them and no field for them on the server. A humidor can be worth several thousand, which makes it both private and, in the wrong hands, a safety matter.

5. What the server stores

• Account: the Apple identifier, your email address, first and last name, profile photo, region, bio, years smoking, and the date you signed up.
• Sessions: a login token for your device, so that you stay signed in.
• Clubs and membership: the clubs you founded or joined, your role in each, who invited you, when you joined, and your two sharing toggles for that club.
• Applications and invitations: the text of an application you sent, its outcome, and the invitation codes you created.
• Published tastings: exactly the fields listed in section 3, and which clubs each one went to.
• Shelf: the cigars and resting times from your humidor — but only while at least one club has your humidor toggle switched on.
• Moderation: the people you have blocked, and any report you have filed or that names you.

Photos — your profile picture and any photo attached to a published tasting — are stored as files on the server, not in the database. Profile pictures are resized to at most 800×800. They are served only to people entitled to see them under the rules above.

Servers are rented from Hetzner and located in Germany. Data is not transferred outside the EU except where a service listed in section 8 operates internationally.

6. AI sommelier

The AI features are optional and the journal works fully without them. When you use one, only what that feature needs is sent to OpenRouter, which routes the request to an AI model provider:

• Band scan: the photo you take of the cigar band.
• What to smoke tonight: your answers to the short prompt (new or familiar, how much time, a drink, strength), the cigars currently in your humidor, and how you rated the ones you have already smoked.
• Similar cigars: the cigar you ask about and the cigars in your humidor.

These requests carry no name, no email and no account identifier — not even when you are signed in for clubs. Prices are never included. Photos are sent for that single request and are not stored by us. See OpenRouter’s privacy policy.

7. Analytics

To see which features are used and which are dead weight, the app reports anonymous usage events through Amplitude — for example, which screen was opened or whether a purchase completed. These events carry a random identifier and are not linked to your name, your email or your account. They never contain the content of a tasting, a cigar, a price, or anything about a club. No advertising identifiers, no tracking across other companies’ apps or websites, and no sale or sharing of data for advertising. See Amplitude’s privacy policy.

8. Purchases

Purchases and subscriptions are processed entirely by Apple through the App Store; we never see your payment details. For receipt validation the app uses RevenueCat, which receives an anonymous receipt token and nothing else. See RevenueCat’s privacy policy.

9. Everyone who touches your data

• Apple — sign-in and payments. Policy.
• Hetzner (Germany) — the server this site and the club platform run on.
• OpenRouter — only for the AI features described in section 6.
• Amplitude — anonymous usage events.
• RevenueCat — anonymous receipt validation.

That is the entire list. We do not sell data, we do not share it for advertising, and we do not run advertising in this app.

10. Deleting your account

You can delete your account from inside the app. Deletion is immediate and physical, not a hidden flag: your profile, your photo, every tasting you published, your club memberships, the invitations you created, your shelf entries and your block list are removed from the database and the files are removed from disk. A club you founded does not outlive your account — it goes with you.

What deletion does not touch is the journal on your device: it was never ours, and it stays exactly where it is. Delete the app to remove that too.

If you cannot reach the app, write to efsh49@gmail.com from the address linked to your account and we will delete it for you.

11. Your rights

If you are in the EU or the UK, the GDPR gives you the right to access the data we hold about you, to correct it, to have it erased, to receive a copy in a portable form, and to object to processing. Everywhere else we apply the same rules anyway, because maintaining two standards is not worth the trouble. Write to efsh49@gmail.com and you will get an answer within 30 days, usually much sooner.

Our legal basis for processing your account data is the contract between us — without it there is no club platform to speak of. For analytics it is our legitimate interest in knowing which parts of the app are worth keeping.

12. Children

Humidor Club is rated 17+ and is not directed at children. We do not knowingly create accounts for anyone under that age; if we learn of one, we delete it and everything on it.

13. Changes to this policy

If this policy changes, the new version is published at this address with a new effective date. Material changes — anything that widens what we collect or who sees it — will also be shown in the app before they take effect.

14. Contact

Humidor Club is developed and published by Gennadiy Demchenko, who is also the data controller. Questions, requests or complaints: efsh49@gmail.com.