Portal philosophy
The portal is your private side of the relationship
A customer portal in a luxury house should do three things and refuse the fourth. It should let you verify everything you have received, manage how the next jar reaches you, and keep your records private. The thing it should refuse is to become a marketplace, a status board, or a leaderboard. The Releone portal refuses all three.
Authentication is passwordless by design. You enter your email and we send a single-use link; you click it and you are inside. There is no password to remember, no two-factor app to install, no recovery question that someone with your inbox could answer. The model is the same one Apple uses for sign-in with Apple and the same Cloudflare uses for Access — simple, hard to phish, robust against credential reuse.
Inside, every jar you have received is listed by its Algorand Standard Asset identifier, with the vessel name, harvest date, cure protocol, and the cure-master's signature visible inline. You can download a PDF of the certificate for any jar at any time. The certificate is also stored on chain, so even if Releone disappeared tomorrow, your jar's provenance would survive in a database the house does not control. That is the point.
Shipping is managed from the portal as well — multiple addresses for gift orders, scheduled delivery windows for refrigerated jars, signature requirements for high-value cases. The portal speaks to Releone's logistics provider directly. There is no separate order-tracking website to visit.
For Society members, the portal also surfaces allocation rights — how many jars in the next release, which reserves are available, and the calendar of in-person events. None of this is visible to non-Society members, and the portal does not show member names or counts across accounts. Each member sees their own relationship and nothing else.
The data Releone holds about you is minimal by design: name, email, shipping addresses, wallet address (only if you provided one for ASA transfer), order history. We do not buy ad-tech profiles. We do not sell or share customer data with any third party for marketing purposes. The privacy policy at the foot of every page is short on purpose; the only third parties who see your data are our payment processor, our shipping provider, and the U.S. government insofar as the law requires.
Account deletion is available from the portal settings at any time. Once deleted, only the legal-minimum record of past transactions is retained, kept for the regulatory period and then purged. We do not pretend to forget; we do forget, in the way the law allows.