Privacy

CoffeePassport is an independent project in active development. This page describes what the app actually stores today.

What we collect

• Your account. Email address and display name. If you set a password we store only a bcrypt hash of it, never the password itself. If you sign in with Google we store the Google account identifier and, if provided, your avatar URL — we never receive your Google password.
• Check-ins. When you check in, your device sends its coordinates and their accuracy. We store those coordinates, the accuracy, the distance we computed to the shop, and whether you used the QR code or GPS. Location is only read when you tap check in — never in the background, and never while the app is closed.
• Ratings. Your score out of five, and any comment or flavour notes you add. These are public and shown next to your display name.
• Private notes. Your own notes about a shop and any photos you attach. These are private, filtered by your account on every request, and are never returned by a public endpoint.
• Menu photos. If you photograph a menu board, we store the image and the text extracted from it so the same photo never has to be read twice.

Who it is shared with

We do not sell your data. We pass it to these services only to run the app:

• MongoDB Atlas — database hosting.
• Railway — application hosting.
• Cloudinary — storage for photos you upload.
• Google Cloud Vision — reads text from menu photos you submit.
• Resend — sends verification email.
• Mapbox — renders map tiles in your browser.
• Google — only if you choose to sign in with Google.

Cookies

We set cookies to keep you signed in and to protect the sign-in flow against cross-site request forgery. They are HTTP-only, so no script can read them, and they are not used for advertising or tracking. We run no analytics and no third-party trackers.

Deleting your data

Email hello@coffee-passport.com and we will delete your account, check-ins, ratings, notes and uploaded photos. There is no self-service delete button yet.

Children

CoffeePassport is not intended for anyone under 13.