Your privacy

Privacy policy

What Espresso Receipt stores on your device, what optional measurement data is sent, and the choices available to U.S. visitors.

Updated U.S. edition

Privacy at a glance

You do not need an account. Here is the short version of what happens to your information.

What stays in this browser

Find my setup drafts, saved setup receipts, feedback, and Fix a shot records stay in this browser unless you choose to share them. Test Lab Workbench drafts also stay in this browser.

What leaves this browser

Cloudflare hosts the site and receives the request data needed to run and protect it. Cloudflare Web Analytics measures page visits without cookies. Google Analytics 4 sends measurement data only when a measurement ID is set for the site. PostHog counts page views, finished Find my setup results, and retailer link clicks without cookies or personal data; it skips browsers that send Do Not Track or Global Privacy Control and drops query strings from page addresses. If a script on the site fails, PostHog receives the type of error and where in the site's code it failed. It also gets the page address without its query and basic browser and device details, but not the error message. Optional feedback sends data only when you submit it.

Who receives it

Cloudflare receives hosting, security, and page-visit measurement data. Google receives measurement data when Google Analytics 4 is set up for the site. A retailer handles data under its own policy after you visit its site.

How long it stays

During one browser session, measurement may remember campaign tags and the first page you opened to connect visits to a campaign. Session storage normally clears when you close the tab. Local records stay until you or the application removes them.

When saved records exist, use Saved setup to remove the saved receipt, feedback, and Fix a shot records. To remove an unfinished setup draft, clear this site's storage in your browser. Use Workbench to remove its drafts. You can also email us about information we control.

The detailed policy below controls if this summary leaves out a detail.

What we store and use

Browser-saved setup draft

Budget, drink, routine, space, café spending, and answers about a grinder you own are saved in first-party local storage so the current draft can continue on the same browser.

Saved receipt and local feedback

An explicit save creates a separate, immutable local receipt snapshot with its result and catalog and model version numbers. Yes, Close, or No and any controlled reason choices may also remain on that device.

Local Fix a shot experiments

Saved shots, linked Better, Same, or Worse outcomes, and an unfinished follow-up may remain in first-party local storage. Optional coffee labels, roast dates, and grinder-setting labels are stored there to keep consecutive shots comparable; those text labels are not included in measurement events.

Counter size for fit checks

The cabinet height, counter depth, and width you type into a "Will it fit" check are saved in first-party local storage so the dimensions chart and other product pages can fill them in on the same browser. They are not uploaded, and analytics events say only which fields you filled in. Select Clear my size to remove them.

Saved setup

Saved setup reads the saved receipt, recent shot history, and active next-shot records already held in local storage. It does not read unfinished setup drafts.

It does not upload these records or create a server-side profile. When saved consumer records exist there, you can remove them from that page. To remove an unfinished setup draft, clear this site's storage in your browser.

Test Lab Workbench drafts are a separate operator record and can be exported or cleared inside Workbench.

Optional feedback measurement

If you choose to send receipt feedback, measurement may include Yes, Close, or No; controlled reason codes; a missing-product kind and brand identifier; receipt and result identifiers; and coarse bands derived from setup answers. The feedback control does not accept free text, names, email addresses, or payment information. Delivery is best-effort and may not succeed.

Shared receipt links

A shared receipt URL visibly contains setup answers such as budget, drink, volume, routine, dimensions, café math, and a grinder you own when selected. Anyone with the URL can read those values and open the recalculated receipt, so treat the link as shareable rather than private.

Technical request data

Cloudflare, our hosting and security provider, may process IP address, user agent, requested URL, timing, approximate region, and security signals in operational logs.

Messages you send

If you email us, we receive your address, message, attachments, and the information you choose to include.

Measurement events

Cloudflare Web Analytics measures page visits without cookies. Google Analytics 4 runs only when a measurement ID is set for the site, and then loads after the page becomes interactive.

Together they can count page, Find my setup, result, feedback, save, share, comparison, ownership handoff, Saved setup, Fix a shot start, controlled outcome, source, and outbound-product events. Saved setup measurement may include whether a saved receipt or active experiment exists and a coarse shot-history band.

Fix a shot measurement may include Better, Same, or Worse, the planned adjustment category, an adaptive diagnosis category, and whether optional local context exists. It does not include the coffee label, grinder-setting label, exact shot recipe, free text, email address, name, or payment data.

Campaign and entry storage

For measurement, first-party session storage keeps non-empty campaign values from the first page you open: campaign_source from utm_source, campaign_medium from utm_medium, campaign_name from utm_campaign, campaign_term from utm_term, campaign_content from utm_content, gclid, and fbclid.

It keeps the first page path as entry_path and uses landing_path for the first landing event. These values help connect page visits to campaign and entry reports.

Duration: the current browser page session, normally until you close the tab. They persist through navigation and reloads in that tab. If session storage is blocked, the site still works and measurement continues without these stored values.

Why we use it

  • Deliver, secure, debug, and improve the site.
  • Restore a setup draft and local Fix a shot experiments on the same browser. Saved setup organizes the saved receipt, shot history, and active next-shot records.
  • Measure whether recommendations fit and identify controlled reasons they miss.
  • Respond to questions, evidence submissions, and correction requests.
  • Detect abuse and comply with legal obligations.

Who receives information

We may share information with vendors that host, secure, measure, or operate the service, subject to their service terms; when required by law or a valid legal process; or in connection with a business transfer.

Retailers receive information under their own policies after you choose to visit their sites. We do not sell personal information. We do not knowingly share personal information for cross-context behavioral advertising.

Shared receipt URLs contain the setup answers described above. Copying or sending one discloses those values to the recipient and to services involved in delivering or opening the link. Do not add or share a receipt URL if you do not want its visible inputs disclosed.

Cloudflare hosts the site and provides security for it, so it handles each request. Cloudflare Web Analytics measures page visits without cookies. Review Cloudflare's Web Analytics data documentation and privacy policy.

When a measurement ID is set for the site, Google Analytics 4 receives measurement events and device, browser, referral, page, and approximate-location context to produce audience and acquisition reports. Google states that IP addresses are not logged or stored in Google Analytics. Google Analytics sets first-party measurement cookies; see Google's GA4 cookie documentation and privacy controls.

How long we keep it and how we protect it

The browser-saved draft, saved receipt snapshot, local feedback, and Fix a shot experiment history remain on the device until removed by you or the application. When saved setup or Fix a shot items exist, Saved setup provides controls to remove them; an unfinished setup draft can be removed by clearing this site's storage in browser settings. Test Lab Workbench provides its own draft deletion control.

Hosting logs and analytics data are retained according to operational needs and provider or property settings. Email is retained as reasonably needed to answer the message, maintain a correction record, or meet legal obligations.

We use reasonable safeguards, but no website or transmission can be guaranteed completely secure.

Your choices

  • Use Saved setup's local controls to remove saved receipt, feedback, and Fix a shot records. Clear this site's storage in your browser to remove an unfinished setup draft.
  • Do not submit optional receipt feedback; the recommendation remains available without it.
  • Do not copy or send a shared receipt URL if you do not want its visible setup answers disclosed.
  • Do not send information you do not want included in an email record.
  • Use browser privacy controls or supported opt-out signals for eligible analytics or advertising processing.
  • Email us to request access, correction, or deletion of information we can reasonably identify and control.

Rights vary by U.S. state. We will respond to verifiable requests as required by applicable law and may need information sufficient to confirm the request.

Children and changes

The service is not directed to children under 13, and we do not knowingly collect their personal information. We may update this policy as features, providers, or legal requirements change. The revised version will carry a new effective or updated date. Material changes will receive reasonable notice on the site when appropriate.

Privacy questions can be sent to hello@espressoreceipt.com.