Privacy policy
Last updated: October 2026
This policy explains, in plain words, what 112 Coffee does with your personal data. It applies to the website and the app.
Who we are
112 Coffee is operated by OFFICECAFFE SRL, CUI RO30940491, trade register no. J2012001120261, registered office Str. Pandurilor 94/3, Târgu Mureș, județul Mureș, Romania. We are the controller of your data.
Contact for anything about your data: istvan.zsigmond@112coffee.com.
What we collect, why, and on what legal basis
| Data | Why | Legal basis |
|---|---|---|
| Email address, password (stored hashed) | Your account and signing in; service messages such as email confirmation and password reset | Contract (art. 6(1)(b) GDPR) |
| Display name (can be a pseudonym), country | Your profile and how others see your extractions | Contract |
| Grinder, machine, water, automatic-machine settings | Defaults for the simulator and your extractions | Contract |
| Extractions, comments, photos, coffees you add | The community: logging, comparing and sharing shots | Contract |
| Plan and billing period | Giving you the features of your plan | Contract; later also legal obligation (accounting) |
| Acceptance of the terms (date, version), age confirmation | Proof that you accepted the terms | Legal obligation and legitimate interest |
| Your setup answers (where and how you make coffee, gear, water, coffee you buy, goals, optional budget and favourite roaster) and the profile we derive from them | Suggesting a mode, a plan, gear and coffees that fit you; anonymous totals for us | Contract; the answers are optional and you can redo or skip them |
| Views of and clicks on recommended products, with your setup profile and country | Counting how often a product is shown and opened, and reporting totals (never your identity) to sponsors | Legitimate interest |
| Newsletter choice | Sending news only if you ticked the box | Consent (you can withdraw it any time in My account) |
| Roaster or café claims: role, website, business email, message | Checking that you represent the business | Legitimate interest |
| Reports and feedback (and the page address, optional email) | Moderation and improving the app | Legitimate interest |
| Links you ask us to read | Filling the coffee form; the page text is not stored | Contract |
| Anonymous counts of coffee page views and simulator uses (no user ID) | Statistics for roasters | Legitimate interest |
What other members see
Your display name, and your country unless you hide it. Your public extractions, with their photos and comments, and the coffees you added. You choose whether new extractions are public or private by default, and you can change it per shot.
Your email address is never shown to other members, roasters or cafés. Roasters and cafés see your private extractions only inside totals and averages, never one by one.
Affiliate links and sponsored placements
Some recommended products are sponsored placements paid for by a brand or shop, always labelled "Sponsored". Some links are affiliate links: if you buy after clicking, the seller may pay us a commission. Some links are sponsored or earn us a commission. We only list gear we would use ourselves.
We count views and clicks to show sponsors how their placement performs. Sponsors only receive totals per product, placement and month; we never give them your name, email or account. When you click a link you leave our app, and the seller's own privacy policy applies to what they collect.
Who processes data for us
- Hosting and database: Vercel, which runs the app, and Supabase, which stores the data and handles sign-in.
- Sign-in: Google and Apple, only if you choose to sign in with them. Google shares your name and email; Apple shares your email (or a private relay address) and, if you allow it, your name.
- AI page reader: when you add a coffee by link, the page text is sent to an AI model (Claude, by Anthropic) to fill the form. No personal data of yours is sent.
- Email: the email service of our hosting provider sends confirmation and password-reset messages.
- Payments: payments are not open yet. When they open, a payment provider will process payment data; we will name it here before it starts.
Transfers outside the EU
Some of these providers are based in, or use servers in, the United States. Where data leaves the European Economic Area, the transfer relies on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
How long we keep data
- Account data: while your account exists. When you delete your account, it is removed straight away.
- Extractions and photos: until you delete them or your account. If you choose to keep your extractions when you delete your account, they stay without any link to you (no name, no country, no photos).
- Terms acceptance records: while the account exists, and up to 3 years after, to answer legal claims.
- Reports, feedback and claims: up to 2 years. Rate-limit records for page reading: up to 30 days.
- Invoices, once payments start: 10 years, as Romanian accounting law requires.
Your rights
You have the right to access your data, correct it, delete it, restrict or object to its use, take it with you (data portability) and withdraw consent at any time. Most of this you can do yourself in My account: edit your profile, hide your country, make extractions private, download all your data as a JSON file, and delete your account.
For anything else write to istvan.zsigmond@112coffee.com; we answer within one month.
You can also complain to the Romanian data protection authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), dataprotection.ro.
Minimum age
You must be at least 16 years old to create an account.
Cookies and storage in your browser
We use only storage that is strictly necessary: your sign-in session is kept in cookies, and a few settings (such as light or dark mode) in your browser's local storage. These cookies only keep you signed in; there is no advertising, no analytics and no tracking. That is why there is no cookie banner.
If we ever add analytics or other non-essential cookies, we will list them here and ask for your consent first.
Changes
If we change this policy in a way that matters, we will tell you in the app and, where needed, ask you to accept it again.