Privacy Policy

Sixth Coffee is operated by Christoph Schmatzler, trading as Leuchtturm Software, Bornhövedstr. 17, 23554 Lübeck, Germany. We are the controller for account, coffee record, billing, security, and service-operation data under the GDPR. You can contact us at christoph@schmatzler.com.

You can use support chat without an account. When you open it, we store a random chat token in your browser's local storage so you can return to your conversations. Your messages and, if you are signed in when starting a conversation, your account ID go directly to our Atlas support service. The token has no automatic expiry. Clearing browser storage removes access from that browser but does not delete the conversations in Atlas. Closed conversations are deleted after 365 days; open conversations remain until closed. Account deletion does not automatically delete support conversations. Contact us to request their deletion.

We process information to authenticate accounts, synchronize records, provide billing and support, generate requested dial-in suggestions, identify a coffee bag when you request it, prevent abuse, and diagnose failures. Where enabled, optional analytics helps us understand usage, see an account's usage when we help that account holder in support, and improve Sixth Coffee. It operates only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. We do not record browser sessions.

Sixth Coffee synchronizes authorized records with our hosted database. Signing out or clearing browser storage does not by itself delete synchronized account records.

We use Cloudflare for DNS; Railway for application hosting, PostgreSQL, object storage, server logs, and request tracing; Resend for service emails; OpenAI for requested dial-in suggestions, bag identification, public bean research, and photo content checks; and Polar for billing. Technical error reports use the Sentry SDK and our self-hosted Atlas service on Railway. Each provider processes only the information needed for its role. Our optional self-hosted Atlas service runs on Railway at atlas.leuchtturm.dev and receives analytics only after you consent, using the official PostHog browser SDK.

Essential cookies and browser storage support sign-in, security, appearance, and language preferences. We keep your optional analytics choice in the first-party sixth-coffee-atlas-analytics-v2 cookie for one year. Earlier analytics decisions, including Umami consent and choices made before analytics was linked to accounts, do not enable Atlas. Only after consent, the PostHog SDK stores a random pseudonymous browser identifier in first-party cookies and local storage, with a one-year rolling cookie expiry. Local storage has no automatic expiry; clearing website data or withdrawing consent removes the SDK identity. Native sessions rotate after 30 minutes of inactivity or at the SDK's 24-hour maximum. We send canonical route templates, event identifiers and timestamps, plus coarse browser/device categories, not raw page URLs, queries, fragments, referrer addresses, titles or inputs. From the referrer, or from a recognized utm_source campaign tag in the page address, we keep only a coarse channel (AI assistant, search engine, social network, other website or direct visit) and, for well-known sites, their name, for the current session and for the first time we see your browser, so we can tell which channels bring new accounts. Nothing else from the address is kept. While you are signed in, each page visit also carries your Sixth Coffee account ID, so we can see how your account uses Sixth Coffee when we help you in support and to improve the product. Page visits made while signed out carry no account ID, but share the browser identifier with visits made in the same browser while signed in. We do not send your name or email address to analytics. There is no session recording or automatic interaction capture. Atlas analytics events are deleted after 90 days. The analytics payload contains no IP address, but hosting and network infrastructure necessarily receives it; hosting-log retention and access must be reviewed before activation. You may withdraw using the control below. Withdrawal stops new capture, clears the persistent SDK browser identity and reloads the page. A native tab marker may remain in session storage until the tab closes. Withdrawal does not recall requests already sent or affect prior lawful processing. You can ask us at any time to delete analytics linked to your account; deleting your account also deletes them. Withdraw analytics consent

When you request a suggestion, the relevant brewing parameters and recent session history are sent to OpenAI. Account credentials, billing data, and unrelated records are not part of the suggestion prompt.

When you choose bag identification, Sixth Coffee sends the selected photo to OpenAI for a structured label-reading request. If the bean is not already in the shared catalog, Sixth Coffee may send public label facts, including the roaster and bean name, to OpenAI for live web research. Unless you separately opt in to public photo sharing, the photo is held only for the duration of the operation and is not written to the Sixth Coffee database, object storage or application logs. Analytics never records the photo. A high-confidence public bean result may be added to the shared catalog; it is shown as editable prefill and never submits a Bag automatically.

The coffee bean directory can be viewed without an account. Public bean facts are separate from your private Bags. Community rating summaries contain no account identifiers, names, Brew notes, or individual ratings. They appear only after at least five people have rated the same bean; each person’s average counts equally. Photo sharing is optional and off by default. Enable automatic sharing of future scans in Preferences. With your explicit permission, we store and display a resized copy only after automatic identification and a photo content check. We remove image metadata and do not display your identity. We privately retain your account identifier, permission version, and submission time to record permission and allow withdrawal. Turn photo sharing off in Preferences at any time to stop future sharing, withdraw permission, and remove your shared photos; account deletion also removes them. Copies already downloaded by others cannot be recalled. Roaster and other third-party photos require permission covering public display; a matching image or public source URL alone does not establish permission. Report a photo or rights concern using the contact details in our imprint.

We retain account and synchronized coffee records while your account is active and for the limited period needed to complete deletion, backups, fraud prevention, or legal duties. Shared coffee bean facts and their public source URLs may remain in the shared catalog after an individual Bag is deleted. Bag photos are not retained unless you explicitly choose to publish them. Atlas analytics events are deleted after 90 days, or earlier when you ask us to delete them or delete your account. You may request account deletion or a portable export from the application.

Depending on applicable law, you may request access, correction, export, restriction, or deletion of personal information. Optional analytics stays off unless this deployment enables them and you consent. Essential cookies and browser storage support sign-in, security, appearance, and language preferences.

For privacy requests, use the contact details in our imprint.