01You sign in on Cellared's own website, and ChatGPT never receives your Cellared password.
Takeaway 2
02You choose what the connection can read and what it can change, and changes need your explicit request.
Takeaway 3
03Disconnecting stops future access. It does not delete what already appears in a ChatGPT conversation.
Takeaway 4
04Information returned to ChatGPT is processed by OpenAI under its own terms.
ChatGPT wine cellar privacy comes down to four controls you hold: you sign in on Cellared's own website instead of handing a password to ChatGPT, you choose what the connection can read and change, changes require your explicit request, and you can revoke access at any time. Disconnecting stops future access. It does not delete what already appears in a ChatGPT conversation, and it does not undo changes you asked Cellared to save. This guide explains each control in plain terms so you can decide how much of your cellar to share.
A wine collection is personal data. It shows what you own, what you paid, where you store it and what you like to drink. That is reason enough to read the terms of any tool you connect to it. Everything below is drawn from Cellared's published privacy policy, OpenAI's help center and the Model Context Protocol specification, and the sources are listed at the end.
Control one: you sign in on Cellared, not in ChatGPT
When you connect, ChatGPT sends you to Cellared's website to sign in. Cellared's privacy policy states that it uses OAuth and that you do not give your Cellared password to ChatGPT. The Model Context Protocol specification, which ChatGPT's connected tools build on, explains the pattern. The client opens a browser to the authorization server, the user authorizes there, and the client receives an access token to use with the server. The specification also requires that access tokens be validated for the specific server they were issued for, and that tokens never travel in a URL query string.
In plain terms, ChatGPT holds a permission slip and never holds your password. If you revoke the slip, it stops working.
Control two: you choose what it can read and change
On the Cellared connection page you pick the access you want to grant. Cellared's policy describes what a connection can carry, depending on your choices: bottle identities, vintages, quantities, regions, saved drinking windows, serving and pairing information, tasting dates, ratings, tasting notes and your saved palate profile. The connection can also return your account name, plan and current permissions. Bottle-change confirmations may include other saved details, such as purchase price or storage location.
Two details are worth noticing. Access to the palate profile follows your plan, so a plan without that feature does not expose it. And purchase price can appear in a confirmation when you change a bottle, which matters if you consider cost private. If that concerns you, leave write access off and keep the connection to questions that cannot change anything.
Here is what each level allows.
Read. Search the bottles you own. Compare vintages and the drinking windows Cellared calculates. Explore pairings from your own cellar and saved tastings. Show recent tastings and ratings.
Write, with your permission. Record an opening or undo one. Save a 5-point rating and notes. Add bottles. Edit a bottle's quantity or region. Remove bottles from active inventory.
Cellared does not buy or sell wine through the connection, so there is no checkout and no payment step to protect.
Free on the App Store
Keep your cellar and timing guidance together
Save unlimited bottles with a free Cellared account. Drinking-window guidance is available when sufficient bottle and vintage information exists.
Having write permission does not mean ChatGPT will rearrange your cellar on its own. Cellared's policy says changes happen with the relevant permission and your explicit request. It also says casual remarks are not automatically saved as palate preferences, and that optional conversation context passed to the connector is used for that request and is not saved as a preference or tasting.
That distinction protects your palate profile. If you grumble in a conversation that you dislike a particular style, that remark stays in the conversation. A rating you ask Cellared to save becomes part of your account. You decide which things become data.
Cellared also uses write-operation identifiers and result receipts to help prevent a retried request from changing inventory twice.
OpenAI's help center describes a similar safeguard on its side: ChatGPT may ask for your approval before reading information or completing an action, and app permission settings control when it must ask. Between the two layers, a change to your cellar passes through your request, your granted permission and, depending on your ChatGPT settings, an approval step.
Control four: you can revoke access
You can review or revoke permissions on the Cellared connection page whenever you like. You can also disconnect from ChatGPT's settings: OpenAI's help center says to open Settings, select Apps or Plugins, choose the app and use the disconnect option. The labels vary with the ChatGPT version, since OpenAI has moved its directory toward the plugin name.
Be clear about what disconnecting does. OpenAI states that it stops future access through that account and does not automatically delete existing conversations, saved files or memories. Cellared's policy says the same from its side: disconnecting prevents future connector access and does not remove information already present in a ChatGPT conversation or undo changes you asked Cellared to save.
If you want information removed from ChatGPT, manage that in ChatGPT's own data controls. If you want your Cellared data deleted, use the delete account page. Cellared's policy states that permission records and write receipts are removed when your account is deleted, and the privacy policy sets out the retention terms.
Where your data goes after it leaves Cellared
Once Cellared returns information to ChatGPT, OpenAI processes it under OpenAI's own terms and privacy policy. That is true of every connected tool, so it is worth a minute of reading. Cellared's policy says your ChatGPT conversations and data controls are managed separately by OpenAI. If you use ChatGPT for work or share an account, think about who can see the conversation, because a bottle list with prices is as visible there as anywhere else you paste it.
A sensible habit: ask questions that need the information you are comfortable sharing. If you would rather not surface purchase prices in a conversation, avoid asking for them, and review a bottle-change confirmation before you leave it in a shared chat.
A reasonable starting setup
Collectors tend to fall into three groups, and each can choose a setup that fits.
The cautious collector. Grant read access and nothing more. Ask what to open, compare vintages and review tastings. Add bottles in the Cellared app, where you control every field. This setup keeps ChatGPT from changing anything.
The builder. Grant write access while you fill the cellar, then consider removing it once the inventory is stable. A prompt such as "Add these 3 bottles to my cellar" shows how fast it works, and the guide to adding bottles with ChatGPT walks through it.
The record keeper. Grant write access permanently so you can record openings and ratings at the table. This is the most convenient setup and the one that most improves future answers, because your tasting history grows with every bottle. Check your connection page now and then to confirm the permissions still match your intent.
Questions to ask before you connect any wine tool
Whatever you use, a few questions are worth answering. What can it read? What can it change, and does that require your request? How do you revoke access? What happens to the data afterward? Where does the information go once it leaves the app? A tool that can answer each of these in plain language earns more trust than one that cannot.
A last note on scope. The drinking windows the connection returns are estimates, and nothing about privacy changes that. Treat the results as guidance from your own data, then check the bottle, the cork and your palate before you pour.
Keep your saved bottles and available drinking-window guidance together. Free Cellared accounts support unlimited saved bottles; estimates require sufficient bottle and vintage information.