Privacy

Creating an account gets us an email address and a display name. You can also tell us your usual drink and the month and day of your birthday, and neither is required. We do not ask for the year, so what we hold is a date to celebrate rather than a date of birth. Enter a contest, and we keep the artwork, its title, the description and the story you write for it, the name you want credited, how you heard about the contest if you tell us, and a record of which version of the contest terms you accepted and when. Your vote tells us which entry you picked. The workshop application collects whatever you put into it, from your name and contact details to your idea.

On the production site, GA4 counts page visits and clicks on things like directions and phone calls. We don't use it to personalize ads, though Google's own cookies are part of how it works.

All of that runs accounts, contests, and voting, and answers workshop applications. Your usual is so the person behind the counter knows what you like. Your birthday is for a free drink on the day. The box beside it records whether you want an email about it. We are not sending that email yet, and when we start it will be one message on the morning, once a year, about nothing else. The box starts unticked, and you can untick it again on your account page whenever you want. Analytics tells us which pages actually help someone find the shop.

Supabase holds accounts, contest entries, and votes. Netlify hosts the site and collects the workshop application form. Resend is who will carry the birthday email once we switch it on, so your address would pass through them. Google runs sign-in, if you choose to use it, and the analytics. Some of what GA4 measures, like a click to call or get directions, is set up to feed our Google Ads account as a conversion, so Google can learn which visits led somewhere. Cloudflare checks that a sign-in request isn't a bot, through Turnstile.

We don't sell your data or send marketing email without asking. We don't show ads on this site.

Signing in sets a session cookie, so the site remembers you between pages. It also sets one small cookie holding the name you chose, the letters on your account button, and whether you work here, so a page built before you arrived can still show your account menu. That one leaves your email address out on purpose. Neither is used for anything else. On the production site, analytics cookies come from Google as well.

You don't need an account to use this site. Everything public here is readable while you're signed out.

Want your data gone? Email us and a person will delete your account and anything attached to it. There is no automated button yet.

Questions about any of this go to contact@bchain.coffee.