Privacy Policy

BaristaBase ("we," "us," or "our") is a specialty coffee discovery platform operated by CosmoLabs. This Privacy Policy explains what information we collect when you sign up for our early-access waitlist, how we use it, and what rights you have over your data.

We built BaristaBase to honor the hands and hearts that make coffee possible — that same care extends to how we handle your personal information. We collect only what we need, store it responsibly, and will never sell it.

1. Information We Collect

Information you provide directly

• —Email address (required) — used to send launch announcements and platform updates.
• —Name (optional) — used to personalise communications.
• —Country (optional) — helps us understand where our community is located and prioritise regional launch timing.
• —Role (optional) — e.g. barista, roaster, café owner, home enthusiast — helps us tailor the platform to our community's needs.
• —Consent record — a boolean flag recording that you agreed to receive communications at the time of sign-up.

Information collected automatically

• —IP-derived country — if you do not select a country manually, we use a third-party geolocation service (ipapi.co) to approximate your country from your IP address. The IP address itself is not stored by us.
• —User agent string — your browser and operating system identifier, collected at sign-up to help us understand which platforms our audience uses.
• —UTM / referral parameters — if you arrived via a link containing utm_source or ref query parameters, we record those to understand which channels bring people to BaristaBase.

2. How We Use Your Information

• —To send you launch notifications, product updates, and community news about BaristaBase. You consented to this at sign-up.
• —To understand who our early community is so we can build the right features for the right people.
• —To measure the effectiveness of marketing channels through referral attribution.
• —We do not use your data for automated decision-making or profiling.
• —We do not sell your data to any third party, ever.

3. How Your Data Is Stored

Your information is stored in a secure, hosted database. All data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Data is hosted on infrastructure located in the United States.

Sign-up submissions are made directly from your browser to our secure API. Only the fields described in Section 1 are written to the database.

4. Third-Party Services

We use a small number of third-party services to operate this site. Each has its own privacy policy.

5. Cookies

We do not set any cookies. BaristaBase does not use tracking cookies, analytics cookies, or session cookies of our own. Third-party services listed above may use cookies governed by their own policies.

6. Data Retention

We retain your waitlist data until one of the following occurs:

• —You request deletion of your data (see Section 7 below).
• —BaristaBase launches publicly and your waitlist record is migrated to your user account.
• —The platform is discontinued, in which case we will delete all waitlist data within 90 days and notify you by email.

7. Your Rights

Regardless of where you live, you have the right to:

• —Access the data we hold about you.
• —Correct inaccurate data.
• —Delete your data from our systems.
• —Withdraw consent to receive communications at any time.
• —Object to processing or request a copy of your data in a portable format.

To exercise any of these rights, email us at privacy@baristabase.com. We will respond within 30 days.

8. Children's Privacy

BaristaBase is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us at privacy@baristabase.com.

9. Changes to This Policy

We may update this Privacy Policy as the platform evolves. When we make material changes, we will update the "Last updated" date and, where appropriate, notify waitlist members by email.

10. Contact Us