Privacy policy
Updated October 10, 2026
1. What we collect
If you join the coffee waitlist or subscribe to service updates, we save your email address. Both the coffee waitlist and service subscriptions require explicit consent and email confirmation. We store first signup and confirmation times, coarse city/region/country estimated from the signup network when Vercel provides it, unsubscribe identifiers, and per-update email acceptance/failure progress. We do not store raw IP addresses, GPS coordinates, or postal codes for signup analytics. Network-based area estimates can be inaccurate, particularly with VPNs and proxies. When you explicitly check in, enable online mode, or request network status through the CLI, we store a hash of a random installation identifier and your first/latest activity times. Explicit online mode sends periodic presence heartbeats until you leave it or close the session. Heartbeats do not inflate check-in totals; initial registration counts as one enrollment check-in. No CLI task, history, email, hostname, or location content is included. Check-ins do not include your email, hostname, tasks, or location. Hosting providers receive normal connection information, including IP addresses, and may keep request logs.
2. What we do with it
Service subscriptions are used for service interruptions, recoveries, and maintenance updates, separate from the coffee launch waitlist. We use check-in records to show network activity and your installation's private statistics. Public counts describe anonymous CLI installations, not verified people. Opening the CLI does not automatically check you in. Subscriber email addresses are visible only in the authenticated admin console, not on the public status page.
3. What we do not do
We do not sell your information or give it to other companies for advertising. We do not use waitlist or subscription data to train machine learning models. Service emails do not use open or click tracking.
4. Storage
The website runs on Vercel. Network records and service subscriptions are stored in Upstash Redis. Resend processes email addresses and email content to send confirmation, admin sign-in, and service-update emails, and retains its own sending logs under its policies. Unconfirmed email requests expire after 24 hours. Confirmed subscriptions remain until you unsubscribe or request deletion. Unsubscribing removes your email address from the active list; encrypted retry envelopes, opaque identifiers, and sending progress associated with previous updates may remain until deleted on request. Network check-in records remain until we remove them on request or reset the service. Admin sign-in links expire after 15 minutes and sessions after eight hours.
5. Your choices
Subscribing and checking in are optional. Every service-update email includes an unsubscribe link. You can ask to see, correct, or delete information we have about you. Deleting your local CLI identity does not delete its server record. Keep identity files, email confirmation links, unsubscribe links, and admin sign-in links private. One-click unsubscribe URLs may appear in normal provider request logs.
6. Contact
Send privacy questions to foundermodecoffee@gmail.com.