Privacy Notice

Last updated: March 1, 2026

This notice explains how we process personal data when you use How Much Coffee Today.

Data We Process

• Account data: email address, user id, authentication metadata.
• Profile data: handle and timezone.
• Usage data: coffee events and daily aggregated count.
• Security data: admin actions and authentication events.

Public Handle Data

Handles and current daily count are intentionally public at /@handle. Choose a handle that does not expose sensitive personal information.

Purposes And Legal Basis

• Provide the service (contract performance).
• Protect the service and accounts (legitimate interests).
• Comply with legal obligations where required.

Processors

• Supabase (database and authentication).
• Vercel (hosting and serverless APIs).
• Upstash (public-handle cache).
• Mailgun (transactional email delivery).

Retention

• Account and coffee data: until account deletion or admin removal.
• Public handle cache (Upstash): up to 7 days (enforced TTL).
• Browser-side public cache: up to 24 hours.
• Operational logs: retained only as needed for security and troubleshooting.

Your Rights

You can request access, correction, deletion, restriction, portability, and objection where applicable. Send requests to privacy@tripox.dk.

Security And Incidents

We apply technical and organizational controls and follow an incident response process. If a reportable personal data breach occurs, we will follow GDPR notification timelines.