TableSet · Beta
Privacy Policy
Last updated October 8, 2026
TableSet is a tool for writing wine lists and keeping a cellar inventory. We collect as little as we can, we never sell it, and you can take all of it with you or have it deleted at any time.
Without an account, nothing you make in TableSet reaches us at all. It stays in your browser on your device.
Who we are
TableSet is run by Nicolas Cooper, in Texas, United States (“we” and “us” on this page). Questions about this policy, and every request below, go to help@tableset.wine.
Using TableSet without an account
Your lists, your inventory, your logos and your settings are saved in your own browser’s storage, on the device you are using. They are not sent to us or to anyone else, and we cannot see them. Clearing your browser’s data for this site erases them, which is why TableSet offers a backup file under My Lists.
The site itself is delivered by Cloudflare, which, like any web host, records technical details of each request (your IP address, browser type and the time). We do not use those records to identify you.
Using TableSet with a beta account
What we collect
| What | Why |
|---|---|
| Your email address | To sign you in, confirm your address and reset your password. |
| Your password | To sign you in. It is stored only as a one-way hash by our database provider; nobody, including us, can read it. |
| Your organization’s name, and who belongs to it | So the right people see the right lists. |
| Your lists, your inventory records, your logos and signatures | To store them and show them to you and your team on every device you sign in on. |
| The version of the Terms you accepted, and when | To show what you agreed to. |
| Feedback you send | To improve TableSet. |
| Technical logs: IP address, browser, times of sign-in and requests, and errors | To keep the service secure, stop abuse and fix what breaks. |
We do not collect payment details during the beta, because the beta is free. We do not collect the people your lists are written for: a guest reading a printed or exported list is never tracked by TableSet.
What we never do
- We do not sell your information or share it for advertising.
- We do not use advertising cookies, tracking pixels or third-party analytics.
- We do not read your lists or your inventory except when you ask us to help with a problem, or when the law requires it.
- We do not use your lists or your inventory to train artificial-intelligence models.
Who processes it for us
Three companies run parts of the service for us, under contracts that limit them to doing so:
- Supabase: the database and the sign-in system. Your data is stored in the United States.
- Resend: sends the sign-up confirmation and password-reset emails.
- Cloudflare: delivers the website and protects the sign-in forms from automated abuse.
If we add a provider that handles your information, we will name it here before it starts.
Cookies and storage
TableSet uses your browser’s storage for two things only: keeping you signed in, and keeping your work on your device. There are no advertising or analytics cookies, so there is no cookie banner.
How long we keep it
- Your lists and inventory are kept while your account is open. A list or an establishment you delete can be recovered on request for 30 days, and is then removed for good.
- Your account is deleted within 30 days of your request, or within 30 days of the beta ending for you. Our provider’s daily backups roll over within 7 days after that.
- Technical logs are kept for no more than 90 days, unless we need them to investigate a security problem.
Your choices
- Take a copy. “Download a backup” in Settings gives you every list and the whole inventory in one file, at any time.
- Correct it. You can change your lists, your inventory and your organization’s name yourself. Write to us to change your email address.
- Delete it. Write to us and we will delete your account and everything in it.
- Ask what we hold. Write to us and we will tell you.
We answer every request within 30 days. We will not treat you differently for making one.
Security
Every list and inventory record belongs to an organization, and the database itself refuses any request from someone who is not a member of it. Connections are encrypted. Passwords are checked against known breaches. Our security page says more. No system is perfectly secure; if a breach ever affects your information, we will tell you without unreasonable delay and report it wherever the law requires.
Who TableSet is for
TableSet is a professional tool for restaurants, bars and wine shops, and is not meant for anyone under 18. The beta is offered in the United States only.
Changes
If we change this policy in a way that matters, we will email account holders before the change takes effect, and the date at the top of this page will change.