Privacy Policy
Last Updated: September 6, 2026
This policy explains what BeanHoard collects, how we use it, and the choices available to you.
The Short Version
- You can browse BeanHoard without an account.
- If you sign in, we store basic profile and sign-in identity information from your chosen provider.
- We store your saved feed preferences when you configure them.
- We collect limited usage and clickout analytics to operate and improve the service.
- We do not sell your personal information or use third-party advertising cookies.
- You may contact us to access, export, correct, or delete your account data.
Information We Collect
Account and Sign-In Information
When you sign in through Discord or Google, we may receive and store:
- A provider-specific user identifier
- Your email address and whether the provider reports it as verified
- Your display name or Discord username
- Your avatar URL
- Account creation and update timestamps
The exact fields depend on the provider and what it makes available. BeanHoard does not receive your provider password.
Saved Feed Preferences
If you configure your feed, we store selected roaster countries and specific roasters so we can personalize `/new` for your account.
Usage and Clickout Data
We collect limited operational analytics, including:
- Page views, searches, approximate engagement, and outbound coffee or roaster clicks
- A browser-generated visitor session identifier
- Technical request information needed for security, abuse prevention, and rate limiting
- One-way, date-scoped representations of IP addresses for aggregate analytics
Hosting infrastructure may retain request logs, including IP addresses, under its own retention and privacy practices.
How We Use Information
- Authenticate accounts and display account profile information
- Apply saved feed preferences and provide account-only feed features
- Operate, secure, troubleshoot, and improve BeanHoard
- Understand aggregate interest in coffees and roasters
- Prevent abuse and enforce rate limits
- Respond to support, privacy, and data requests
Third-Party Services
Discord and Google (optional authentication)
If you choose one of these providers, its handling of your data is governed by its own privacy policy. Discord also hosts BeanHoard's public community channel.
Railway (application and database hosting)
Railway processes infrastructure and request data subject to its Privacy Policy.
Roaster websites (outbound links)
When you follow a listing link, the roaster receives the information normally sent by your browser and applies its own privacy policy.
How We Store and Retain Information
Account and application data is stored in a PostgreSQL database hosted on Railway. BeanHoard uses HTTPS and does not store account passwords.
- Account and preference data is generally retained until deletion is requested or the account is removed.
- Operational logs and security records are retained as reasonably necessary to run and protect the service.
- Aggregate analytics may be retained to understand long-term service usage.
- Some information may be retained when required by law or necessary to resolve abuse or security incidents.
Cookies and Local Storage
BeanHoard uses limited browser storage:
- user_token — keeps a user account signed in
- admin_token — authenticates authorized administrators
- A visitor session identifier used for first-party aggregate analytics
- Interface preferences such as theme where applicable
We do not use third-party advertising cookies or sell cross-site browsing profiles.
Your Choices and Rights
- Browse without creating an account.
- View available profile information on your account page.
- Change or clear saved feed preferences.
- Request access, correction, export, or deletion of your account data.
- Use browser privacy controls to restrict optional local storage.
To make a data request, email [email protected]. We may need to verify your identity before fulfilling a request.
Data Sharing and Disclosure
We do not sell personal information. We disclose data only to service providers needed to operate BeanHoard, when you direct us to interact with a provider, when required by law, or when reasonably necessary to protect the service and its users. If BeanHoard is transferred as part of a business transaction, relevant data may transfer with it subject to this policy and applicable law.
International Users
BeanHoard is operated from the United States. If you access it elsewhere, your information may be processed in the United States, subject to applicable law.
Children's Privacy
BeanHoard is not directed to children under 13, and we do not knowingly collect personal information from them. Contact us if you believe a child has provided account data.
Changes to This Policy
We may update this policy as BeanHoard changes. The date above identifies the latest revision. Material changes may also be announced on the site.
Contact
For privacy questions or requests, email [email protected].