What we log. What we don’t.

// what we never store

• Your raw query. The free text you typed (or the photo you uploaded) is sent to the Anthropic API for parsing, then discarded. It never touches our database.
• Your IP address.
• A session identifier. There are no cookies that let us connect two of your queries to each other.
• A user account.There are no accounts.
• Photos. Photo uploads are sent only to Anthropic for identification, then dropped. The Demand Map only includes text searches.

// what we do store

For every text search, we record one row containing only the parsed structured intent — categorical labels and small numbers:

• · date (day, not minute)
• · country (from edge geolocation, 2 letters or null)
• · food categories (e.g. [“salmon”, “shellfish”])
• · occasion (e.g. “casual”)
• · target body / sweetness / acidity / tannin (0–1)
• · color preference (e.g. “red” or null)
• · price bracket bucketed to nearest €5
• · top-matched wine id + match score

That’s the entire schema. See docs/insights-schema.sql for the actual SQL — the table has no other columns by construction.

// k-anonymity

Every chart on the Demand Map gates on K-anonymity ≥ 10. That means no slice of the data is shown to the public until at least 10 different searches share that exact combination of attributes. Unusual or low-frequency queries are excluded from the dashboard by design.

// retention

Individual rows are kept for 90 days. After that, they’re deleted. Aggregated rollups (daily counts of each category, etc.) are kept indefinitely — those are already anonymous by construction.

// why we do this

The Demand Map is the back end of the OOMF Vibe Search proposition. Every search is anonymous data about what people actually want — useful for catalog owners deciding what to stock, price, and feature. Fuzzy Sommelier’s public Demand Map is a live reference implementation of what an OOMF pilot delivers.

The privacy design is deliberate: the data is useful in aggregate, useless individually. Done right, you get business insight without surveillance.

// other tracking

We use Vercel Web Analytics (cookieless, no consent banner needed under GDPR) and Google Analytics 4 (cookies, opt-in via the consent banner). Both are standard product analytics for the site itself — independent of the Demand Map.