Privacy
What we collect, and what we don't
Bean Feen is a one-woman coffee trailer. This page describes what actually happens to your information when you order, in plain language.
This site sets no cookies, runs no analytics, and loads no advertising or tracking scripts. That is not a promise to keep — it is enforced by the site's Content-Security-Policy, which permits scripts only from this domain. A tracker could not load here even if someone added one.
What we collect when you order
To take a pre-order we ask for four things, and we use all four:
- Your name — so we can call out the right order at the window.
- Your phone number — so we can text you if there's a problem, or when your order is ready.
- Your email address — this is where your receipt and your pickup details are sent. It's required for that reason.
- Order notes, if you write any — the box that says "allergies, extra ice, anything we should know". Whatever you type there is stored with your order and is also included in the email that reaches us and in your own receipt. If you tell us about an allergy, please know it travels in those emails.
Alongside that we keep what you ordered, the pickup date and time slot you picked, and the amounts charged.
The booking form on the homepage
The "book us" form asks for your name, email, phone, event type, event date, location, guest count and a message. That one is email only — it is not saved to any database. It reaches an inbox and lives there.
Your IP address
We use your IP address to stop the order form being abused. It is never stored as-is: it is hashed with a secret before anything is written down. Those hashes are cleared out when the next order comes in, once they are more than a day old — so on a quiet week they can sit a little longer. We cannot read an IP address back out of what we keep.
Card details
We never see them. When you pay, your browser goes to Stripe's own checkout page and the card details are entered there, on Stripe's systems. Our database has no field for a card number, an expiry date or a security code — there is nowhere for one to go. What comes back to us is that the payment succeeded, and a reference we can use to issue a refund.
Who else your information reaches
Six companies are involved. That is the complete list:
- Stripe — payments. Your browser is sent to Stripe directly, so Stripe also sees your IP address and browser. We send Stripe your email address and what you ordered so your Stripe receipt makes sense.
- Resend — sends the emails. Your receipt and the order alert we get both pass through it, so it handles your name, email, drinks and notes.
- Supabase — the database and the code behind ordering. Hosted in the United States (us-east-1).
- Vercel — hosts this website and keeps ordinary server logs.
- Google Fonts — the two typefaces this site uses are loaded from Google's servers, which means Google receives your IP address on every page you view, before you have done anything at all. This applies to every page, not just ordering.
- Google Workspace — our email. Every order alert lands in a mailbox Google hosts, and those alerts contain your name, phone number, drinks and notes.
Order alerts arrive in a Google Workspace mailbox, so Google also holds the email containing your name, phone number, drinks and any notes — for as long as that mail sits in the inbox. If we hit reply on one of those alerts, the reply is addressed to the developer who maintains this site rather than to you.
We do not sell your information, and we do not share it with anyone beyond the list above.
How long we keep it
Two different clocks, because two different things are being kept:
- Your contact details — name, phone, email and notes are removed from the order record after about 13 months. Thirteen months is not arbitrary: a card payment can be disputed up to 120 days after the pickup date, some payment methods allow 180, and a dispute can take a further two to three months to resolve — call it nine months. The rest is margin, so that a clear-out in January never lands on a prior-year record someone is still asking about. We keep your details long enough to answer a dispute, then we stop.
- The sale itself — what was bought, what it cost and the tax collected is kept for at least three years, because West Virginia requires sellers to preserve those records for that long.
Removing the contact details is something we do by hand, not on a nightly timer, so treat "about 13 months" as the point after which it can happen rather than the exact moment it does. Your receipt link keeps working either way.
Two things this does not reach, and it is fairer to say so than to imply otherwise: Stripe and our email provider keep their own copies on their own schedules, and emails that have already arrived in an inbox stay there.
Your receipt link
When you order you get a link to a confirmation page. That link is the key to the page — anyone who has it can see the order and, once it's paid, the pickup address. It does not show your name, phone number or email address to anyone who opens it. Treat it like a ticket: it isn't secret, but don't post it publicly.
What your browser stores
No cookies. The ordering pages use your browser's session storage to remember your order code and your unfinished basket while the tab is open, and that is cleared when you close it. Your name, phone, email and notes are deliberately not saved there.
Do Not Track
There is nothing here to honour or ignore. This site does no tracking, so a Do Not Track signal makes no difference to what happens.
Getting in touch
Questions about any of this, or a request about your own information, go to contact@beanfeencoffee.com. We're a very small operation — a real person reads it.