Privacy

The app keeps your data on your phone. Your shots, beans, gear and notes are stored on the device. There is no account, no analytics and no advertising.

Community recipes

When you open a roaster's community link, the app asks this site for that roast's public numbers. That request carries nothing about you beyond what any web request does.

A recipe is only sent when you press Post on a bag's Share my recipe screen. That screen lists every field before you post: the name you typed, the coffee, your grinder model, grind setting, dose, yield, time, your rating, the bean age, water temperature if you logged it, how many shots it took, and any taste notes. Nothing else is sent. No account, device identifier, location or other shots.

Posted recipes are public. They appear on the roast's page here, in the app for other people, and on the roaster's dashboard.

Removing a post: press Remove my recipe on the same screen. The app holds a removal key for each post; this site keeps only a one-way hash of it.

"Get notified" emails

If you ask to be told when the app is out, this site stores your email address and the date. It's used for that one announcement, never shared or sold, and deleted when the list is no longer needed.

What this site stores

• Email addresses people add to the "Get notified" list.
• Posted recipes, as listed above.
• To limit spam, a daily counter keyed by a one-way, salted hash of the connection address. The address itself is not stored and the counter is deleted after two days.
• For roasters only: the email address and a hashed password for their sign-in.

The hosting provider keeps standard web server logs, which include IP addresses, for a limited period for security and operations.