Privacy Policy
This page explains what data we collect when you visit CoffeeSpecs, why we collect it and what you can do to control it. We wrote it in plain language, without hiding behind legalese. If something isn't clear, write to us at privacy@coffeespecs.com.
Who we are
The data controller is the operator of the CoffeeSpecs site, reachable at privacy@coffeespecs.com.
What we collect when you browse the site
Anonymous browsing data. We measure site visits with Plausible Analytics, a tool installed on our server. Plausible uses no cookies and collects no personal data. We only see aggregate data: which pages are most viewed, which country visitors come from (not the exact IP address), which browser they use. We can't identify you, even if we wanted to.
Clicks on links to external stores. When you click a link to a store, we only record which link you clicked, when, and the language of the page you came from. The click uses no cookies and records neither your IP address nor a session. We do this for two reasons: to check that affiliate links work and to reconcile the commissions we receive from sellers. We can't link these clicks to your identity.
Technical logs. If the site generates an error, we record it in our logs so we can fix it. Logs are kept for 90 days and contain no personal data.
What we collect if you write to us
Contacts from brands and manufacturers. If you're a brand and write to us by email, we collect the company name, the contact's email and the content of your request. We use this data only to reply to you and assess a possible collaboration. We keep it for 24 months from the last contact.
What we never do
- We don't sell your data to third parties.
- We don't profile users for advertising purposes other than those stated.
- Non condividiamo dati personali con i brand di cui pubblichiamo le schede.
- We don't use tracking cookies without your explicit consent.
- We don't intentionally collect data from minors under 16.
Who we share data with
The site's operational data lives on our server, managed by Netcup, based in Germany. We don't share data with third parties for marketing purposes. For analytics we use a self-hosted version of Plausible: the data never leaves our server.
Third-party technologies
Geolocation for language. When you visit the site for the first time, your IP address is matched against a local geographic database to determine your country. This lets us automatically show you the version of the site in the most suitable language. The IP is neither stored nor sent to external services: the lookup happens entirely on our server and the result (only the country, not the IP address) is used to set a language cookie.
The geographic database is GeoLite2, produced by MaxMind, Inc. As required by its licence:
"This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com."
How long we keep data
| Type of data | Retention |
|---|---|
| Anonymous browsing data | Aggregated, no limit (not personal data) |
| Affiliate clicks | 24 months |
| Technical logs | 90 days |
| Brand contacts | 24 months from the last contact |
| Tax data / invoices | 10 years (legal obligation) |
Your rights
You can always:
- Know what data we hold about you (right of access).
- Ask to correct wrong data (rectification).
- Ask to delete your data (erasure), except for legal obligations that prevent us from deleting it (e.g. invoices).
- Restrict or object to the processing.
- Export your data in a readable format.
- Withdraw the consent you gave.
To exercise a right, write to privacy@coffeespecs.com. We'll reply within 30 days.
If you believe the processing of your data breaks the law, you can file a complaint with the Italian Data Protection Authority (garanteprivacy.it).
Safety
We protect your data with HTTPS across the whole site, hashed passwords, encrypted backups and limited admin access. We update the system within 7 days of a security patch being released.
Cookies
For details on the cookies we use and how to control them, read the Cookie Policy.
Changes to this policy
If we change this policy, we'll flag it with a notice on the site. For major changes (new purposes or new data recipients) we'll give you at least 30 days' notice. You can ask us for previous versions by writing to the address above.