Privacy Policy

1. Who we are

Sane (sane.coffee) ("Sane", "we", "us") operates a curated, map-based directory of specialty coffee roasters and cafés, currently piloting in Zürich, Switzerland. This policy explains what personal data we collect, why, and the choices you have. For any privacy question, contact us at hello@sane.coffee.

2. Data we collect

We keep data collection to the minimum needed to run the service:

• Newsletter: if you subscribe, your email address, chosen language, the page you signed up from, and the date.
• Partner & admin accounts: your email address, used to sign you in with a one-time code (passwordless). We do not store passwords.
• Session data: a small authentication cookie that keeps you signed in, and a cookie that remembers your language preference.
• Technical data: standard server logs (such as IP address, browser type and timestamps) used for security and reliability.

3. How we use your data

• To run and display the live coffee map and listings.
• To send the newsletter you asked for, and let you unsubscribe at any time.
• To authenticate partner and admin users and let them manage their listings.
• To keep the service secure, prevent abuse, and fix problems.

4. Legal bases

Where the EU GDPR or the Swiss Federal Act on Data Protection (FADP) applies, we rely on: your consent (newsletter); the performance of a contract or our legitimate interest (operating partner accounts and the service); and our legitimate interest in keeping the service secure. You can withdraw newsletter consent at any time.

5. Cookies

We use only essential cookies: an authentication cookie for signed-in partners/admins, and a preference cookie that remembers your language. We do not use advertising or cross-site tracking cookies.

6. Service providers

We share data only with the processors that help us run Sane:

• Supabase: database and authentication, hosted in the EU.
• Vercel: website hosting and delivery.
• SMTP2GO: sending login codes and the newsletter.

7. Where your data is stored

Our database and authentication are hosted in the EU. Some providers may process limited technical data outside your country; where they do, they rely on recognised safeguards such as the EU Standard Contractual Clauses. We never sell your personal data.

8. How long we keep it

• Newsletter: until you unsubscribe or ask us to delete it.
• Account data: while your account is active, then deleted or anonymised within a reasonable period.
• Logs: kept only as long as needed for security and operations.

9. Your rights

Subject to applicable law, you can request access to your data, correction, deletion, restriction, objection, and portability, and you can withdraw consent. To exercise any of these, email us at hello@sane.coffee. You also have the right to complain to a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, your local data protection authority.

10. Security

We protect data with encryption in transit, row-level database security, and restricted access. No system is perfectly secure, but we work to keep your information safe and to respond quickly if something goes wrong.

11. Children

Sane is not directed to children under 16, and we do not knowingly collect their personal data.

12. Changes

We may update this policy as the service evolves. We will change the effective date above and, for material changes, give notice through the site.

13. Contact

Questions or requests: hello@sane.coffee.