privacy policy
Privacy policy
What Coffee Snobs collects, why, who helps us run it, and what you can ask of us.
the short version
- We collect what you put into Coffee Snobs (your account, your logs, your friends) and how you use the app.
- On the waitlist, we keep only your email address, when you joined and where on this site, for news about Coffee Snobs opening and, now and then, to invite you to test it early.
- While Coffee Snobs is a closed test, we record how testers use the app, including screen recordings that can show what you type (never passwords). See section 5.
- We use it to run Coffee Snobs and to make it better. We don’t sell it, and there are no ads.
- Your account data is stored in the EU. A few services we use also keep logs or copies in the US, under EU data protection rules.
- You can ask to see, correct, download or delete your data at any time: email jasper@coffeesnobs.app and we’ll do it within a month.
- 01 · who we are
- 02 · what we collect
- 03 · why we use it, and on what basis
- 04 · who can see what you log
- 05 · analytics and session recordings
- 06 · who helps us run coffee snobs
- 07 · how long we keep it
- 08 · your rights
- 09 · security
- 10 · age
- 11 · automated suggestions
- 12 · cookies and similar technology
- 13 · changes to this policy
- 14 · contact
01Who we are
Coffee Snobs, the app and this website, is made by Jasper is Hungry, a one-person business in Amsterdam, the Netherlands. Jasper is Hungry decides what happens with your data, which makes it the controller under the GDPR. Where this policy says “we” or “us”, that’s who it means.
Email: jasper@coffeesnobs.app. Our full company details, including our address and Chamber of Commerce (KvK) number, are on the legal notice page.
On Google Play, the app is listed as Coffee Snobs. There is no separate data protection officer: privacy questions go straight to Jasper, in English or Dutch.
02What we collect
When you use the app
- Your account: your email address and password. The password is stored as a scrambled hash by our database provider; nobody can read it. If you sign in with Google, we receive your name, email address and profile photo from Google.
- Your profile: your first name, last name and display name, your home country, and what you told us when you started: the flavours you like and don’t like, how you drink coffee and what you brew with. Also your default visibility for logs.
- Your logs: which coffee, when, your verdict, the aromas, tastes and body you noted, your notes and private notes, the cup temperature, how it was brewed (who made it, the drink, grind setting, café), and which of the roaster’s notes you tasted.
- Coffees you add: the name, roaster and other details you type, and a photo if you add one.
- Saves and favourites: the coffees you want to try, and the order you put your favourites in.
- Friends: friend requests, the invite links you create and who used them, reactions (raising a mug) and your notifications.
- Taste summaries: for a small group of test users, a short written summary of their palate, generated from their logs.
- Old chat conversations: if you used the chat assistant that was in the app earlier in 2026, your conversations with it. The assistant is gone; the conversations are deleted with your account, or earlier if you ask.
- How you use the app: the screens you open, what you tap, heatmaps of where people tap, your device and browser type, loading speed, technical error messages from your browser, an approximate location (country and city) and session recordings. See section 5.
- Technical logs: our hosting providers (Vercel and Cloudflare) process your IP address in short-lived logs to serve pages and to stop abuse.
- Emails we send you: the email itself and whether it was delivered.
When you contact us or help us test
- Your messages: your email address and what you write.
- Test rounds: if you sign up to help test Coffee Snobs, your answers in the sign-up form and notes from any interview you agree to.
On this website and the waitlist
coffeesnobs.app sets no cookies of its own and uses no analytics or tracking scripts. Cloudflare, which delivers the site, processes technical data such as your IP address to serve pages and to protect the site against attacks, and may set a strictly necessary security cookie when it checks for bots.
If you join the waitlist, we send one email to the address you give, through Resend, our email provider, to check that it’s yours. Only when you open the link in that email and confirm do we add your address to our mailing list at beehiiv, together with the date and where on this site you joined. We use the list only for news about Coffee Snobs opening and, now and then, to invite you to test it early. Every email from it has an unsubscribe link. If you don’t tap the button, we don’t keep your address: only our email provider’s log of that one email remains, for 30 days.
You don’t have to give us any of this. Without an email address you can’t have an account, though, and without logs there’s not much for Coffee Snobs to show you.
03Why we use it, and on what basis
| what for | which data | legal basis |
|---|---|---|
| Running your account and the app: logging, your palate, your matches, want to try, favourites | Account, profile, logs, coffees you add, saves | Providing the service you signed up for (GDPR art. 6(1)(b)) |
| Friends and sharing: showing your logs as you choose, invites, reactions, notifications | Profile, logs, friends | Providing the service (art. 6(1)(b)) |
| Taste summaries for the test users who have them | Counts from your logs and coffee names | Providing the service (art. 6(1)(b)) |
| Service emails: confirming your email address, resetting your password, friend requests | Account, email delivery | Providing the service (art. 6(1)(b)) |
| Testing and improving the app: usage analytics, session recordings, finding bugs | How you use the app | Our legitimate interest in testing Coffee Snobs and seeing where it is confusing (art. 6(1)(f)). During the test we can’t switch this off for one person; section 5 says what you can do. |
| Keeping Coffee Snobs secure and preventing abuse | Account, technical data | Legitimate interest (art. 6(1)(f)) |
| Test rounds and interviews | Form answers, interview notes | Your consent (art. 6(1)(a)), which you can withdraw at any time |
| The waitlist: news about Coffee Snobs opening and, now and then, an invite to test it early | Email address, when and where you joined | Your consent when you joined (art. 6(1)(a)); unsubscribe at any time |
| Answering your messages | Your messages | Legitimate interest (art. 6(1)(f)) |
| Meeting legal obligations | Only what the law requires | Legal obligation (art. 6(1)(c)) |
04Who can see what you log
For each log you choose who sees it, and you can set a default in your account:
- coffee snobs (the standard setting): your verdict, aromas, tastes, body and the date count on the coffee’s page, where anyone can see them without your name, also people who aren’t signed in. Your friends also see your name and your note.
- friends only: only the people you’ve added as friends.
- private: nobody but you.
Other people never see what you write in a note just for you.
Also good to know:
- Coffee pages are public: anyone with the link can open them, with or without an account. When you share a coffee, you share a link to that page.
- Your friends can see your name and your profile.
- An invite link shows your first name to whoever opens it. Invite links stop working after 7 days.
- A coffee you add is only shown to you in the app. Its photo is stored at an unlisted web address, so anyone who had that exact address could open the photo.
05Analytics and session recordings
We use PostHog, hosted in the EU (Frankfurt), to see how people use Coffee Snobs: which screens they open, what they tap, where they get stuck and how fast pages load. PostHog also makes session recordings: a replay of what happened on screen during a visit, which shows us where the app is confusing.
Coffee Snobs is a closed test. Seeing how testers use the app is how we find what breaks and what confuses, so analytics and recordings run for everyone who uses the app. Before Coffee Snobs opens to everyone, we’ll review how this works and update this section.
How it works during the test:
- Usage data is linked to your account (your user ID, email address and name), so we can follow up when something goes wrong for you.
- Recordings can include text you type into fields, such as notes and the email address you sign in with. Passwords are never recorded, and invite pages are not recorded at all.
- PostHog does not store your IP address. It uses it on arrival to estimate your approximate location (country and city), and stores that.
- Usage events are kept for 1 year, recordings for 30 days.
- PostHog uses a cookie and your browser’s local storage to recognise your device.
Don’t want this? Email jasper@coffeesnobs.app and we’ll delete your analytics history and recordings. During the test we can’t yet switch analytics off for a single person, so the way to stop it is to stop testing: tell us, and we’ll delete your account as well.
06Who helps us run Coffee Snobs
These companies process data for us, so that we can run Coffee Snobs:
| provider | what for | where |
|---|---|---|
| Supabase | Database, sign-in and photo storage | EU (Ireland) |
| Vercel | Hosting the app. Our server functions run in Dublin; Vercel is an American company. | EU and US |
| PostHog | Analytics and session recordings | EU (Frankfurt) |
| Resend | Sending emails, including the email that confirms your place on the waitlist | Sent from the EU (Ireland); delivery logs in the US |
| Sign in with Google. Gemini, the AI model that writes a short taste summary for a small group of test users: it receives counts from their logs and coffee names, never an email address or notes. Google Forms, for test-round sign-ups. | EU and US | |
| Cloudflare | This website, the domain name, and forwarding email sent to jasper@coffeesnobs.app | Worldwide network |
| GitHub (Microsoft) | Scheduled jobs, such as creating notifications about new coffees and matches | US |
| beehiiv | The waitlist: storing the email addresses of people who confirmed, and sending the waitlist emails | US |
Email sent to jasper@coffeesnobs.app is forwarded to Jasper’s Gmail inbox. Where data leaves the EU, the transfer is covered by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses. Ask us if you’d like the details.
AI assistants. Jasper builds and maintains Coffee Snobs with the help of AI assistants (Anthropic’s Claude and Cursor). When he investigates a problem with them, they can see the app data needed for that. He keeps this to what the problem needs.
Other websites. Bag photos in the app load from the roasters’ own websites, so those sites see your IP address, like any website you visit. When you tap buy this coffee, you go to the roaster’s shop, and their privacy policy applies there.
We don’t sell your data, we don’t share it with advertisers, and we don’t show ads.
07How long we keep it
- Your account and everything in it: as long as you have an account. After you ask us to delete it: gone within 30 days.
- Database backups: these roll over automatically; deleted data disappears from them within 30 days.
- Analytics: usage events for 1 year, session recordings for 30 days.
- Emails and delivery logs at our email provider: 30 days.
- Technical logs at our hosting providers: a few days at most.
- Messages you send us: as long as we need them to help you, and at most 2 years.
- Test rounds: until the results of the round are written up, and at most 12 months after the round ends.
- The waitlist: until we’ve emailed you that Coffee Snobs is open, or until you unsubscribe, and no later than 30 June 2027.
08Your rights
You have the right to:
- see the personal data we have about you, and get a copy;
- have it corrected if it’s wrong;
- have it deleted (see delete your account);
- get your data in a file you can take elsewhere;
- ask us to limit what we do with it;
- object to how we use it (for analytics and session recordings during the closed test, see section 5);
- withdraw your consent, where we asked for it.
To use any of these, email jasper@coffeesnobs.app from the address linked to your account. We’ll answer within one month, and we may ask you to confirm it’s really you.
Not happy with how we handle your data? Please tell us first; we’d like to fix it. You can also complain to a data protection authority: in the Netherlands the Autoriteit Persoonsgegevens, in Belgium the Gegevensbeschermingsautoriteit.
09Security
All traffic to Coffee Snobs is encrypted. Passwords are stored as hashes. Database rules make sure each account can only read what it’s allowed to see, and admin access is limited to Jasper. No system is perfect: if something goes wrong that affects your data, we’ll tell you and the authorities, as the law requires.
10Age
Coffee Snobs is for people aged 18 and over.
11Automated suggestions
Your matches (the coffees Coffee Snobs suggests for you, including the one to stretch you) and your palate are worked out automatically from your answers and your logs. They’re suggestions about coffee, nothing more: they have no legal or similarly significant effect on you.
12Cookies and similar technology
In the app we use:
- a sign-in cookie that keeps you logged in, which the app needs to work;
- PostHog’s cookie and local storage entry, for analytics (see section 5);
- local and session storage for small things, like the order of your favourites, your unread notifications, an invite link you opened, and a log you haven’t saved yet.
We don’t use advertising cookies. This website sets no cookies of its own; Cloudflare may set a strictly necessary security cookie when it checks for bots.
13Changes to this policy
If we change this policy, we update the date at the top. If a change matters for you, we’ll tell you in the app or by email before it takes effect.
14Contact
Questions about your privacy: jasper@coffeesnobs.app. Our postal address is on the legal notice page.