Privacy policy

Kapnagora app + websiteLast updated 12 October 2026

This policy describes the data practices implemented in the current Kapnagora iOS app, its API and this website. Kapnagora is a cigar reference and personal collection service.

1 · Controller and contact

Full provider information is available in the legal notice.

2 · Data we process

Accounts and profile

When you create an account, the service processes your email address, password verifier, optional display name, email-confirmation state, a device installation identifier, session records and expiring confirmation or password-reset tokens. The current app offers email sign-in.

You may also provide experience level and cigar interests as profile preferences.

Collection and journal

Data you choose to save can include cigars and boxes, quantities, purchase information, box codes, storage placement, drinking windows and private notes. Journal entries can include smoking sessions, pairings, checkpoints, flavour impressions and ratings. Watchlist and notification choices are also stored when you use them.

Photos

Camera recognition runs on the device. A photo is uploaded only when you choose a workflow that submits it as evidence to the service. Uploaded media is then stored with the associated record. Do not include people or other unnecessary personal information in those images.

Notifications

If you grant notification permission, the app can register a push token together with its environment and app version. The current server records registrations; automated sending of push notifications is not implemented.

Website and support

Search terms and box codes entered on the website are sent to Kapnagora’s own API to return results. If you contact us, we process the name, email address, topic and message you submit. Confirmation and password-reset pages process the token in the link and, for a reset, the new password. Our web server records every request in an access log: IP address, request time, requested path, status code, data volume and browser information (user agent).

3 · Purposes and legal bases

Account, collection and journal data is processed to provide the service you request (Art. 6(1)(b) GDPR). Support messages are processed to answer your request and operate the service (Art. 6(1)(b) or (f) GDPR, depending on the request). Security logs and session data protect accounts and service integrity (Art. 6(1)(f) GDPR). The server access log serves the security and stable operation of the service, our legitimate interest under Art. 6(1)(f) GDPR. Butler questions are processed to answer them (Art. 6(1)(b) GDPR). Reading and writing the browser-storage items described in section 6 is strictly necessary to provide the function you request (§ 25 (2) no. 2 TDDDG), so no consent banner is shown. Where device permissions or consent are legally required, processing depends on your choice.

4 · Storage, retention and security

Service data and submitted media are stored by the Kapnagora backend. Passwords are not kept as reusable plain text; the server stores password verifiers and hashed session tokens. Email-confirmation links expire after 48 hours. Password-reset links expire after one hour, are single-use, and a successful reset invalidates existing sessions.

Contact messages pass through the server’s mail subsystem. Depending on the configured delivery mode, a message may be retained in a local mail outbox or transferred through the configured email provider.

Retention criteria by data type (there is no automatic deletion schedule except where stated):

• Server access log (IP address, time, path, status, user agent): kept in rotating files, the five most recent files of up to 20 MB each; older entries are overwritten. The limit is file size, not time, so with little traffic entries stay longer than with heavy traffic. Log entries are not deleted individually.
• Account data (email, display name, profile, collection, journal, photos, push registration): kept while the account exists. On your erasure request, sessions are revoked and the personal fields (email, name, sign-in and device identifiers, password verifier) are emptied, your collection and journal entries are marked deleted, and uploaded photo files are removed. A record without personal data stays to show that and when an erasure happened.
• Sign-in sessions and tokens: confirmation links expire after 48 hours, reset links after one hour; sessions end when you sign out or reset your password.
• Butler questions and watch requests: stored with your account, or with the anonymous account of your browser, and kept until you ask for erasure or the account is erased.
• Device identifier: in your browser until you clear this site’s data; on the server it stays with the anonymous account until you ask for erasure.
• Support messages: kept until your request is handled and any follow-up question is settled, and longer only where a legal retention duty applies; erased on request before then.

We answer erasure and access requests sent to the contact address above within one month. Data we must keep for a legal obligation is restricted instead of erased.

5 · Recipients and transfers

The website, API, database and media are hosted on a virtual server rented from Hostinger (hosting provider, acting as our processor). The server is located in Frankfurt am Main, Germany (based on the provider’s IP allocation); Hostinger offers a data processing addendum that includes EU Standard Contractual Clauses for transfers. Data may also be processed by the configured email provider when a message is delivered. Apple processes push notification delivery if that feature is enabled. Kapnagora does not sell personal data, and the current app and website contain no advertising or third-party analytics SDK.

Facts can link to external source websites. Those sites receive data only after you follow the link and operate under their own privacy terms. Butler questions are sent to Anthropic (directly or through OpenRouter), which may process them in the United States. Anthropic states that it transfers data outside the EEA on the basis of European Commission adequacy decisions or EU Standard Contractual Clauses (Art. 46 GDPR), which are part of its Data Processing Addendum under its Commercial Terms; OpenRouter states the same two mechanisms in its privacy policy. We do not rely on a certification under the EU-U.S. Data Privacy Framework. Do not put personal data of third parties into Butler questions. Retention is described in section 4. We take no automated decisions that produce legal effects about you. Providing data is voluntary; without it some functions (account, Butler) cannot be offered.

6 · Data kept on your device

The iOS app stores its session credential in the device-only Keychain. App preferences such as onboarding, tutorial, notification and server-address settings are stored locally. The website stores a selected API address in local storage and uses session storage for a temporary catalogue cache and your comparison selection. When you sign in to your private web humidor, it also stores your session credential locally; signing out removes it. When you use the Butler without signing in, the website creates a random device identifier and keeps it in your browser’s local storage. It is sent to our server only with your Butler questions, and it creates an anonymous account on the server for that browser. It contains no name or contact details. Clearing this site’s data in your browser removes the identifier from your browser, and a new one is created the next time you ask the Butler. It does not delete the anonymous account on the server or what is stored with it (your Butler questions and any watch requests the Butler created); to have those erased, write to info@kapnagora.com. Butler questions, signed in or not, are sent to an external AI model provider (Anthropic’s Claude models, directly or through OpenRouter) to produce the answer. The website sets no advertising or analytics cookies and loads no external scripts, fonts, maps, video embeds or social plugins.

7 · Your choices

You decide whether to create an account, add collection or journal data, submit a photo, contact support or allow notifications. Device permissions can be changed in iOS Settings. You can sign out in the app. The current app does not provide a self-service account-deletion control; deletion or access requests can be sent to info@kapnagora.com.

8 · Your rights

Subject to applicable law, you may request access, rectification, erasure, restriction, portability or object to processing. You may withdraw consent for future processing where consent is the legal basis. You may also lodge a complaint with a competent data protection supervisory authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information (datenschutz-hamburg.de). Contact info@kapnagora.com to exercise these rights.