This policy covers the Coffee Dash web app at app.coffeedash.com and this website, coffeedash.com. Coffee Dash is run by Rappel Studio S.L., headquartered in Barcelona, Spain, which is responsible for the personal data described here. For any privacy question or request, write to support@coffeedash.com.

This website

coffeedash.com sets no cookies and runs no analytics. Pages with a map load map tiles from OpenStreetMap, which receives your IP address to send them. Our hosting provider, Cloudflare, processes your IP address to deliver pages and protect the site.

What the app stores

Your account. Your email address, used to sign you in and to send you account emails. If you connect Google, we store your Google account ID and the Google email address it uses. We never receive your Google password.

Your profile. Username, and anything you choose to add: name, photo, city and country, bio, social links, favourite brew method, coffees and shops. Profiles are private until you make them public. Your email never appears on your profile.

Your journal. Saved coffees, the cups you log (coffee, place, tasting notes, rating) and your recipes. These are private unless you publish a recipe.

What you publish. Public recipes, coffee ratings and reviews appear with your username. Coffees you submit, with their photos, become part of the public catalogue.

Business requests. If you claim or list a coffee shop or roastery, we keep the details and evidence you send so we can review it.

Emails we send you. Sign-in codes and links, account notices and replies about your requests.

Security records. Your IP address, kept for up to 48 hours to limit repeated requests, and a spam check by Cloudflare Turnstile when you send a form.

Cookies and browser storage

The app uses these cookies to keep you signed in:

  • __Host-coffee_session: your signed-in session, for 30 days or until you sign out.
  • __Host-coffee_login: ties an emailed sign-in code or link to the browser that asked for it, for 10 minutes.
  • __Host-coffee_google: protects a Google sign-in while it is in progress, for 10 minutes.

The app also keeps a few items in your browser's own storage: your analytics choice, and for 10 minutes during sign-in, the page to return to and any profile details you typed at registration. None of these are sent to anyone.

Analytics

The app asks before using Google Analytics, and nothing loads until you agree. If you do, Google Analytics sets cookies and records which kinds of screens are visited. We do not send your name, email, username, journal content or account ID, and advertising features are off. You can change your choice at any time under Analytics preferences at the foot of the app.

Services that process your data

  • Cloudflare hosts the app and this website, stores app data, and runs the Turnstile spam check.
  • Resend delivers our emails.
  • Google handles sign-in when you choose Continue with Google, and analytics if you agree to it.
  • OpenAI reads the photos when you ask the app to fill in a coffee's details from its bag. The request asks OpenAI not to store it.
  • OpenStreetMap serves map tiles on this website.

Some of these providers process data outside the European Union, including in the United States, under the safeguards EU law provides for such transfers, such as standard contractual clauses or the EU-US Data Privacy Framework.

Why we use it

We use your account, profile and journal to provide the app you signed up for. We use analytics only with your consent. We keep security records, check for spam and send account notices because we have a legitimate interest in keeping accounts and the service safe.

How long we keep it

  • Account, profile and journal: until you delete your account.
  • Sign-in codes and links: they expire after 10 minutes and are deleted within a day.
  • Sessions: 30 days.
  • IP-based security records: up to 48 hours.
  • Shop and roaster statistics: 90 days, as counts with no visitor identity.

When you delete your account, we remove your account, profile, journal, recipes, ratings, reviews, sessions, ownership claims and the copies of emails we sent you. Coffees you submitted stay in the public catalogue without your name. Emails already delivered stay in your inbox.

Your rights

You can download your profile, journal, saved coffees and recipes from Account, correct your details in Account and Profile, and delete your account from Account at any time. You can also ask us for access to your data, its correction or deletion, or to restrict or object to how we use it, by writing to support@coffeedash.com. You have the right to complain to the Spanish data protection authority, the Agencia Española de Protección de Datos.

Children

Coffee Dash is not meant for anyone under 14, the age at which Spanish law lets people consent to the use of their own data, and we do not knowingly hold their data. If you think a child has created an account, write to us and we will delete it.

Changes

When this policy changes, we update the date at the top. If a change affects how we use data you have already given us, we tell you by email first.