Privacy policy

Who runs Copsffee

Copsffee is an independent project and the controller of the personal data described here. For anything about your data, write to [email protected].

What Copsffee collects

• Your account. Your email address and password (stored only as a secure hash, never readable). If you sign in with Google, the name, email address and profile picture Google shares instead of a password.
• Your username, if you pick one. It’s public: it appears next to your public reviews and on your profile.
• What you do in the app. Your ratings and notes (and whether each note is public), your wishlist, the capsule systems you have at home, the flavours you said you like, capsules you marked as not sold where you live, and barcode matches you confirmed.
• Your country. Worked out from your IP address, or picked by hand in Settings. It decides which capsule names and suggestions you see and whether cup sizes show in ml or fl oz. Copsffee never asks for your precise location or GPS.
• What you send. Capsule suggestions (with any link and photos you add), feedback from a capsule page, and reports about reviews. Suggestions and feedback are emailed to Copsffee so a person can read them.
• Counters. How many barcode lookups and photo identifications you used in the last day, so nobody can run up the bill.
• Technical data. Like any website, the hosting providers below process your IP address and browser details to serve the pages and keep the service secure.

Camera and photos

The scanner uses your browser’s camera to read barcodes. The camera picture is read on your phone and never uploaded.

When Copsffee doesn’t know a barcode, it sends only the barcode to Open Food Facts to look the product up. If that fails, the barcode and your country are sent to Anthropic’s Claude, which may search the web for it.

If you take a photo of a box or of a single capsule to identify it, the photo goes to Anthropic’s Claude through Copsffee’s server, which compares it with the catalog. Copsffee doesn’t store these photos: they’re used for that one answer and discarded.

Photos you attach to a capsule suggestion are stored privately: no other user can see them, and they’re deleted when you delete your account.

Who sees what

• Your ratings are private by default. Every score still counts toward each capsule’s average, without your name on it.
• A note you make public becomes a review: it shows your username, the note and its score.
• If you make your ratings public (Settings › Profile), your profile shows your scores and your taste profile to signed-in users.
• Your email address is never shown to other users.

Who else handles your data

Copsffee uses a few services to run. Each handles your data only to do its job for Copsffee:

• Supabase: the database, accounts, file storage and server functions. Hosted in the EU (Paris, France).
• Cloudflare: hosts copsffee.com and delivers its pages.
• Resend: sends account emails, such as the sign-up confirmation, and forwards suggestions and feedback to Copsffee.
• Anthropic (United States): identifies packs and capsules from barcodes and photos, as described above.
• Open Food Facts: receives a barcode, and nothing else, when Copsffee doesn’t know it yet.
• country.is: receives your IP address, and nothing else, to tell which country you’re in.
• Google: only if you choose to sign in with Google.

Where data leaves the EU, it does so under these providers’ data protection terms. Copsffee doesn’t use analytics or tracking today. If product analytics are added, they’ll be hosted in the EU, tied to an account number rather than your name or email, never record anything you write, and this page will say so first.

On your device

Copsffee keeps a few things in your browser’s storage: your sign-in session, your preferences (language, cup size units, a dismissed banner) and, before you sign up, your answers to the first questions. A service worker keeps a copy of the app so it opens on a weak connection. All of this is needed for the app to work. There are no advertising or tracking cookies, so there’s no cookie banner.

Why it’s used

• To give you the service you signed up for: your account, your ratings, scanning, suggestions and your taste profile.
• Because Copsffee has a legitimate interest in keeping it safe and fair: usage limits, preventing abuse, moderating public reviews and answering your messages.

How long it’s kept, and deleting it

Your data is kept while you have an account. You can delete your account any time in Settings › Delete account. That deletes your ratings and notes (and takes your scores out of every average), your wishlist, systems at home, preferences, country, username and profile, your suggestion photos and your usage counters, and closes your sign-in account.

Suggestions, feedback and reports you sent are kept, with your account removed from them, because they’re part of how the catalog and the reviews are looked after.

Your rights

Under the GDPR you can ask to see the data Copsffee holds about you, correct it, delete it, get a copy to take elsewhere, and object to or limit how it’s used. Much of it you can change yourself in Settings; for the rest, write to [email protected] and you’ll get an answer within a month.

If you think your data has been mishandled, you can complain to a data protection authority: in Portugal, the CNPD, or the one where you live.

Children

Copsffee isn’t meant for anyone under 16. If you believe a child has given Copsffee their data, write to [email protected] and it will be deleted.

Changes to this policy

When this policy changes, the date at the top changes too. If a change affects how your data is used, the app will tell you before it applies.