פרטיות

CoffeeLabZ is a coffee notebook that works without an account. Your stations, bags, dial-ins and brews live on your device. We don't run analytics or trackers. Sign in only if you want to sync between devices or share with a crew; then we store your email address and the notebook you sync, nothing else about you.

Everything you log is stored in this browser's IndexedDB (a database named "brewer"), or in the Android app's own storage. Each record carries a device-only tag saying which account's notebook it belongs to; that tag never leaves your device. If someone else signs in on the same device, your unsynced changes are set aside for you, hidden from them and never sent to their account.

A few small values live in the browser's local or session storage: a "sync everything next time" flag after joining a crew, and a recipe you are about to copy. Clearing your browser data removes all of it.

In Settings → Privacy you can download a full JSON backup in every level, delete everything CoffeeLabZ stored on this device, or, when you sign out, choose to keep your notebook or remove it from the device.

Signing in is optional. With an email code, we email you a 6-digit code through Amazon Simple Email Service (in the language you use CoffeeLabZ in); we keep only a keyed hash of the code, for 10 minutes. With Google, Google confirms your email address to us. Either way, our server stores:

• your email address and, if you set one, a display name;
• the records you sync (stations, bags, dial-ins, attempts, your profile settings and custom gear);
• the crews you start or join, and the invite codes you create;
• a hash of your session token, so you stay signed in for up to 180 days.

Things you mark "Share with crew" are visible to that crew's members, read-only. Leaving a crew stops sharing. A recipe link is public to anyone who has the link. It contains only the recipe card: brew method, gear names, the numbers, taste and notes of that brew, and the display name you chose to show. Never the ids of your other records.

• brewer_session: only when you sign in. httpOnly (page scripts can't read it), sent only to CoffeeLabZ's own API path, up to 180 days. Signing out or deleting your account removes it.
• NEXT_LOCALE: remembers the language you picked, for one year. It holds only the language code.

No analytics or advertising cookies are set by CoffeeLabZ itself.

Some public pages (tutorials, the gear catalog, the home page footer) may show Google AdSense banners. Ads never appear in your notebook while you brew or log, or during onboarding. Every ad request asks Google for non-personalized ads. Google may still use cookies for frequency capping, fraud prevention and measurement, subject to your consent choices.

When you add gear that isn't in our catalog and choose "Suggest it for the catalog", we receive the brand, model, type and dial range, without your identity.

Settings → Privacy → Delete account removes your account, every record you synced, the crews you own, your crew memberships and every recipe link you made, from our server, right away. Data on your device stays until you delete it there too (Settings → Privacy → Delete everything on this device).