Dialshots is built for people who care about espresso, not surveillance. This policy explains what we collect, why, and what you can do about it. If anything here is unclear, email support@dialshots.com.
The short version
Your espresso shots, coffee bags, and preferences are yours. We store them so you can sync them across devices.
Email is used only for login and account messages, never for marketing.
We do not sell your data, and we do not run third-party ad or analytics trackers.
You can export or delete your data at any time from the app.
Data stays in your browser (localStorage) unless you choose to sync it to an account. We do not see it.
When you sign in with email
Your email address, used to send you the magic-link login
The shot logs, coffee bags, tasting notes, equipment profile, and preferences you save in the app
Automatically, through our hosting provider
Standard access logs: IP address, browser type, referring page, timestamp
These are used to keep the service running and to detect abuse
02 How we use it
To store and sync your data across your devices
To send authentication emails (magic-link login)
To keep the service secure, including blocking bots and preventing abuse
To respond to your questions when you contact us
We do not use your data for advertising, personalization outside the app, or to train AI models.
03 Third-party services
Dialshots relies on a small number of trusted providers to run:
Cloudflare
Hosts the site and provides bot protection (Turnstile). Processes standard access logs.
Supabase
Stores your account, shot logs, and coffee data. Servers are primarily located in the United States.
Brevo
Sends authentication emails when you sign in with a magic link.
Amazon
Operates the product pages our affiliate links point to. We do not share your data with Amazon. They see the click, like any web link.
Each of these providers has their own privacy policy that governs how they handle data.
04 Cookies and local storage
Authentication cookies set by Supabase while you are logged in
localStorage for your preferences (dark mode, language, unit choices) and, in guest mode, your local shot data
We do not use cookies for advertising or third-party tracking.
05 How long we keep data
Your account data is kept for as long as your account exists
You can delete individual entries or your entire account at any time from Dialshots settings, and deletion is permanent
Server access logs are retained by our hosting provider for a short period, according to their standard retention policies
06 Your rights
If you live in a place that recognizes data privacy rights (like Quebec's Loi 25, Canada's PIPEDA, or the EU's GDPR), you generally have the right to:
Access the personal data we hold about you
Correct inaccurate information
Delete your data
Export it in a portable format
Object to certain uses
Most of these you can handle directly in Dialshots settings. For anything else, email support@dialshots.com.
07 Data security
We use HTTPS everywhere and rely on Supabase's encryption for data at rest. No service can guarantee absolute security, but we do our best to protect your data and to fix issues quickly if they come up.
08 Children
Dialshots is not directed at anyone under 13. If we learn we have collected personal data from a child under 13 (or 16 in some regions), we will delete it.
09 International transfers
Our hosting and database providers operate servers primarily in the United States. When you use Dialshots, your data is transferred to and stored in these regions.
10 Changes to this policy
If we make significant changes, we will update the effective date and post the new version here. If the change materially affects how we handle your data, we will notify you inside the app or by email.