Privacy

Creating an account gets us an email address and a display name. You can also tell us your usual drink and the month and day of your birthday, and neither is required. We do not ask for the year, so what we hold is a date to celebrate rather than a date of birth. Enter a contest, and we keep the artwork, its title, the description and the story you write for it, the name you want credited, how you heard about the contest if you tell us, and a record of which version of the contest terms you accepted and when. Your vote tells us which entry you picked. The workshop application collects whatever you put into it, from your name and contact details to your idea.

On the production site, GA4 counts page visits and clicks on things like directions and phone calls. We don't use it to personalize ads, though Google's own cookies are part of how it works.

All of that runs accounts, contests, and voting, and answers workshop applications. Your usual is so the person behind the counter knows what you like. Your birthday is for a free drink. Analytics tells us which pages actually help someone find the shop.

Signing in works by email: we send you a link rather than asking for a password. Changing your email address works the same way, with a link to confirm it.

If you enter a contest, we may email you about your entry: when it arrives, when it has been reviewed, and a few reminders while voting is open. You can turn the reminders off in your account details.

The birthday email goes only to people who check the box for it. It arrives on the morning of your birthday, about your free drink and nothing else. The box starts unchecked, and you can uncheck it in your account details whenever you want.

We also send emails about the shop, like news and upcoming events. To stop any email from us, write to contact@bchain.coffee and a person will take you off the list.

Supabase holds accounts, contest entries, and votes. Netlify hosts the site and collects the workshop application form. Resend sends all of our email, so your address passes through them. Google runs sign-in, if you choose to use it, and the analytics. Some of what GA4 measures, like a click to call or get directions, is set up to feed our Google Ads account as a conversion, so Google can learn which visits led somewhere. Cloudflare checks that a sign-in request isn't a bot, through Turnstile.

Eventbrite carries some of our free events. If you RSVP there, your name and email go to Eventbrite, and we can see who is coming, because we are the organizer. We don't put those addresses anywhere else.

We don't sell your data, and we don't show ads on this site.

Signing in sets a session cookie, so the site remembers you between pages. It also sets one small cookie holding the name you chose, the letters on your account button, and whether you work here, so a page built before you arrived can still show your account menu. That one leaves your email address out on purpose. Neither is used for anything else. On the production site, analytics cookies come from Google as well.

You don't need an account to use this site. Everything public here is readable while you're signed out.

Want your data gone? Email us and a person will delete your account and anything attached to it. There is no automated button yet.

Questions about any of this go to contact@bchain.coffee.