Privacy Policy
Effective June 9, 2026
This policy explains what Roastr ([YOUR BUSINESS NAME / your name]) collects, why, and what choices you have. Roastr aggregates publicly listed specialty-coffee pricing and lets you optionally create an account to follow roasters and save coffees.
What we collect
If you just browse:we don't require an account. We collect standard, privacy-respecting analytics about page visits (via Vercel Analytics) to understand traffic. We do not sell this data or use it to build advertising profiles.
If you create an account:we collect your email address (used as your sign-in identity via a magic link — we never store a password), and the roasters and coffees you choose to follow or save. That's it. We don't ask for your name, address, or payment information, because purchases happen directly on roasters' own websites, not on Roastr.
How we use it
Your email is used to sign you in and, if you opt in, to send you alerts about price drops, sales, or new releases from roasters and coffees you follow. Your follow and save lists exist to power those features and show you your lists when you sign in. We use your data only to operate Roastr— not for advertising, and we don't sell or rent it to anyone.
Who we share it with (processors)
We rely on a small number of infrastructure providers who process data on our behalf: Supabase (database and authentication — stores your account and lists), Vercel (hosting and analytics), and an email delivery provider (to send sign-in links and alerts). These providers are bound to use the data only to provide their service to us.
Email and your choices
Sign-in (magic link) emails are required to use an account. Alert emails are optional — you can turn them off or stop them at any time. You can delete your account and all associated data by emailing us at [YOUR CONTACT EMAIL]; we'll remove your profile, follows, and saves.
Data retention
We keep your account data while your account is active. If you ask us to delete it, or if your account is inactive for an extended period, we remove your personal data. Aggregated, non-identifying analytics may be retained.
Your rights
Depending on where you live (for example under GDPR or CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these, email [YOUR CONTACT EMAIL]. We honor these requests regardless of where you live.
Children
Roastris not directed to children under 13, and we don't knowingly collect their data.
Changes
We may update this policy as Roastrevolves. We'll update the effective date above, and for material changes we'll make a reasonable effort to notify account holders.
Contact
Questions? Email [YOUR CONTACT EMAIL]. Governing law: [YOUR STATE/COUNTRY, e.g. Colorado, USA]. See also our Terms of Service.
This is a plain-language starting policy, not legal advice. Before relying on it publicly, have it reviewed against your actual practices and the laws that apply to you.