Privacy

What we collect and what stays public.

Last updated 2026-05-18

What you give us

Everything on your card is supplied by you when you fill in the profile form: handle, status, city, chat-kind tags, and the contact channels you choose (Telegram, WhatsApp, email). Your sign-in email is stored separately by our auth provider so you can log back in.

What's public

Your card page at acoffee.com/{handle} is public. Anyone with the URL can see your handle, status, city, chat tags, and the initials avatar generated from your handle. Contact channels stay hidden until a visitor clicks Invite for coffee, at which point all channels you've added become visible to them.

What's not public

Your sign-in email is never shown to other users. We don't track who clicked your Invite for coffeebutton, who viewed your card, or who you've previously talked to — there's no invite log on our side. After contact reveal the conversation happens entirely on Telegram / WhatsApp / your email client, not on acoffee.

Third parties

  • Supabase — Postgres database + auth. Stores your profile row and session cookie.
  • Resend— sends the one-time welcome email after you finish onboarding. We don't send marketing.
  • Google Analytics 4 — anonymous page-view stats so we know which surfaces matter. No PII forwarded.
  • Vercel — hosts the site. Standard server logs.

Cookies

A Supabase session cookie keeps you signed in. GA sets analytics cookies. That's it — no third-party advertising or tracking pixels.

Remove your data

Edit any field on /profile. To delete your card and account entirely, use the “Delete account” button on /profile, or email hello@acoffee.com from the address you signed up with.