Skip to content
Order

Plain language

Privacy

The short version: what we collect, who sees it, and how you get it deleted.

What we collect, and when

Creating an account gets us an email address and a display name. You can also tell us your usual drink and the month and day of your birthday, and neither is required. We do not ask for the year, so what we hold is a date to celebrate rather than a date of birth. Enter a contest, and we keep the artwork, its title, the description and the story you write for it, the name you want credited, how you heard about the contest if you tell us, and a record of which version of the contest terms you accepted and when. Your vote tells us which entry you picked. The workshop application collects whatever you put into it, from your name and contact details to your idea.

On the production site, GA4 counts page visits and clicks on things like directions and phone calls. We don't use it to personalize ads, though Google's own cookies are part of how it works.

The home page also loads a script from inKind, which can show a pop-up with an inKind offer. To count how often you have seen it, inKind sets its own cookies here and makes an identifier for your device from details your browser shares, like its screen size, language and time zone. It tells inKind when the pop-up is shown and on which page. Anything you type into the pop-up, like an email address or phone number, goes to inKind.

What it's for

All of that runs accounts, contests, and voting, and answers workshop applications. Your usual is so the person behind the counter knows what you like. Your birthday is for a free drink. Analytics tells us which pages actually help someone find the shop.

The emails we send

Signing in works by email: we send you a link rather than asking for a password. Changing your email address works the same way, with a link to confirm it.

If you enter a contest, we may email you about your entry: when it arrives, when it has been reviewed, and a few reminders while voting is open. You can turn the reminders off in your account details.

If you apply to sell your work in our marketplace, we may email you about it: when your application has been decided, when a monthly report is coming due or overdue, when we have answered one, when a month's statement is final, when we have paid you, if a payout to you is reversed, and if we remove you from the marketplace.

The birthday email goes only to people who check the box for it. It arrives on the morning of your birthday, about your free drink and nothing else. The box starts unchecked, and you can uncheck it in your account details whenever you want.

We also send emails about the shop, like news and upcoming events. To stop any email from us, write to contact@bchain.coffee and a person will take you off the list.

Who handles it

Supabase holds accounts, contest entries, and votes. Netlify hosts the site and collects the workshop application form. Resend sends all of our email, so your address passes through them. Google runs sign-in, if you choose to use it, and the analytics. Some of what GA4 measures, like a click to call or get directions, is set up to feed our Google Ads account as a conversion, so Google can learn which visits led somewhere. Cloudflare checks that a sign-in request isn't a bot, through Turnstile.

inKind runs the pop-up on the home page and keeps what you enter into it, under inKind's own privacy policy.

Eventbrite carries some of our free events. If you RSVP there, your name and email go to Eventbrite, and we can see who is coming, because we are the organizer. We don't put those addresses anywhere else.

What we don't do

We don't sell your data, and we don't show ads on this site. The inKind pop-up is an offer from a company we work with, not an ad network.

Cookies

Signing in sets a session cookie, so the site remembers you between pages. It also sets one small cookie holding the name you chose, the letters on your account button, and whether you work here, so a page built before you arrived can still show your account menu. That one leaves your email address out on purpose. Neither is used for anything else. On the production site, analytics cookies come from Google as well, and the home page carries inKind's cookies for its pop-up.

If you pause the notices that turn at the top of the home page, your browser remembers that on your device, so they stay paused next time. It is never sent to us.

Your choices

You don't need an account to use this site. Everything public here is readable while you're signed out.

Want your data gone? Email us and a person will delete your account and anything attached to it. There is no automated button yet.

Contact

Questions about any of this go to contact@bchain.coffee.

Last updated October 19, 2026.