CRU GOLD
Privacy notice
Applies to this provenance demonstration site. Last updated 27 October 2026.
What this site does not do
- No account, registration or personal details are needed to view a bottle passport.
- The CRU GOLD app sets no cookies and runs no advertising or third-party tracking scripts.
- Opening a bottle page is not recorded against you by the CRU GOLD app: it does not store which bottle you scanned or link it to a person.
What is collected
- Hosting analytics. The hosting platform (Lollipop / TellWang) adds a first-party analytics script to every page. It sends anonymous events to
/collecton this site: page path, referring site and campaign tags, coarse click position on a 20×30 grid with the type of element clicked, how far the page was scrolled, and JavaScript error messages. It uses no cookies or local storage. - Server logs. Like any web host, the platform and its CDN (Cloudflare) process technical request data such as IP address, browser type and the requested URL to deliver and protect the site.
- On your device only. Your display choices (reduced motion, contrast) and chosen language are kept in your browser's local storage and never sent to us; the language is sent only as a
langparameter so the server returns text in that language. Admin sign-in sessions for CRU staff are held in session storage. - Staff sign-in protection. To stop password guessing, failed staff sign-in attempts are counted under a one-way hash of the network address and email (never stored in readable form) and expire after 15 minutes.
Records shown on bottle pages
Passports show production and shipment records for the bottle, not personal data about buyers. Producer personal data, exact grove locations, consignees and raw documents are withheld from public pages.
Contact
Questions about this notice can be sent to CRU GOLD. A controller contact address will be added before commercial release.