Privacy notice

We collect as little as we can. Reading Coffearium needs no account, no cookies for tracking and no advertising profiles.

Who is responsible

Coffearium. Write to us through the contact form (topic “Privacy or a data request”).

What we handle and why

• Reading the site: our host, Cloudflare, processes technical data such as your IP address to deliver pages and protect the site from attacks. We do not use analytics cookies or advertising trackers.
• Short links: when you open a link of the form coffearium.org/go/…, we count it: the date, which link and which page. Nothing else is stored – no cookies, IP address or device details.
• Settings in your browser: your colour theme is stored in your own browser only.
• Contact form and Suggest a change: your message, and your name and email if you give them, so that we can read, check and answer it. Messages are stored in a private archive and sent to our inbox.
• Accounts: your email address (to sign you in and, if you ever buy something, for receipts), your display name, the public part of your passkeys (the private part never leaves your device), and a sign-in cookie that keeps you signed in on this device.
• Comments: what you write, when, and which comments you marked as helpful or flagged.
• Buying a print: payment, your name, shipping address, email and phone number are collected on Stripe’s checkout page. Stripe handles the payment; we never see your card details. We pass your name, address, email and phone number to our print partner Gelato so it can print and deliver the poster. Our own database keeps only the order number, the poster, the quantity and the delivery status.
• Spam protection: forms use Cloudflare Turnstile, which checks that a person, not a bot, is using the form.

Cookies

Only when you sign in: a secure sign-in cookie, and a second small cookie that tells pages you are signed in. Both are removed when you sign out.

How long we keep it

• Sign-in links: they expire after 20 minutes.
• Sign-in on a device: up to 180 days after you last used the site, or until you sign out.
• Your account and comments: until you delete them.
• Messages from the forms: as long as needed to handle them.
• Orders: Stripe and Gelato keep order and payment records for as long as accounting law requires.

Service providers

We use Cloudflare (hosting, database, spam protection), Resend (sending emails), GitHub (private archive of form messages), Stripe (payments) and Gelato (printing and delivery of posters). Their servers may be outside Switzerland and the EU; we rely on their contractual data-protection safeguards.

Your rights

You can see, correct and delete your account data yourself under Account. For any other request, such as a copy of your data, write to us through the contact form. You may also contact the data protection authority in your country.

Draft, 12 October 2026.