Privacy policy
Last updated September 2026
Crafted Coffee Supply is a small United States shop. We collect the minimum we need to sell and ship coffee equipment, and we do not run advertising trackers on this site.
What we collect
- Order details. When you buy, we keep a record of what you ordered, the amount paid, your shipping address, and your email address so we can fulfill the order, send its confirmation and tracking emails, and handle returns.
- Payment. Payment is handled entirely by Stripe Checkout on Stripe’s servers. Your card number never touches ours; we store only Stripe’s reference identifiers for the payment.
- Account. Signing in uses a one-time link sent to your email — there is no password. A session cookie (a strictly necessary, first-party cookie) keeps you signed in; we also store your email and, if you save one, a default shipping address.
- Messages. If you use the contact form, we receive your name, email, and message so we can reply.
What we do not do
- No advertising or cross-site tracking cookies.
- No sale or sharing of your information for marketing.
- No marketing email — we send transactional messages only: order confirmation, shipping notice with tracking, and sign-in links you request.
Who processes data for us
Three service providers handle data on our behalf: Stripe (payments and checkout), Cloudflare (hosting, our order database, and the product catalog — no customer data), and Resend (transactional email delivery). Each receives only what its role requires.
Order status links
Guest orders get a private status link by email. The link’s token is unguessable, shows only the order’s items and shipping progress — never your address or email — and we store only a fingerprint of it, not the link itself.
Retention and your choices
Order records are kept as long as we need them for accounting, warranty, and fraud-prevention purposes. To ask what we hold about you, correct it, or have your account data deleted, contact us from the email on the order and we will respond within 30 days.