Review this page and add your real contact details before deploying it. This page describes coffeenerd's current technical structure, but it is not legal advice.
[First name Last name]
[Street and house number]
[Postal code and city]
Email: hello@coffeenerd.io
coffeenerd stores the data users enter themselves: account data, bean details, roastery website and origin information, brew details, ratings, public reviews, and private notes.
We process this data so users can save, view, and edit their coffee collection, ratings, reviews, and personal notes.
Signed-in users may optionally upload coffee package photos to receive field suggestions. The photos are processed on the coffeenerd server by local text-recognition software. Metadata is removed and resized JPEG copies are stored with the user's package so they can be displayed again. Package photos are not sent to an external recognition provider and are available only to their owner. Users can remove saved package photos while editing the bean.
coffeenerd uses only technically necessary cookies. These cookies are needed to keep users logged in, protect forms from misuse, and keep the website secure. We do not use advertising cookies, tracking cookies, or analytics cookies.
The main cookies are sessionid, which keeps users logged in while using the site, and csrftoken, which helps protect forms against cross-site request forgery.
Because these cookies are necessary for the website to work, they are not managed through a cookie banner. Cookies can be deleted or blocked in browser settings, but parts of the site may stop working.
When the website is accessed, technical access data may be processed, such as IP address, access time, requested URL, browser information, and HTTP status. This data is used to operate the website securely and reliably. We also summarise server logs into private traffic statistics, including page requests, approximate visitor counts, referral domains, and device types. The dashboard uses no tracking cookie and stores no individual IP addresses.
Security events such as registrations, failed logins, email confirmation, and automated rate limits are recorded for abuse prevention. IP addresses and browser information are retained with these events for up to 30 days. A one-way identifier and coarse network information, such as country and network provider, may be retained for longer-term security statistics. Network information is obtained from the RIPE NCC public statistics service.
Account data and user-entered content remain stored while the account exists or until they are deleted. Raw IP addresses and browser information attached to application security events are removed after 30 days. Technical backups may contain data for a limited period.
Depending on applicable law, data subjects may request access, correction, deletion, restriction of processing, data portability, and objection. Please use hello@coffeenerd.io for requests.