Privacy Policy

What We Collect

Cacao Journal collects only what is necessary to provide the service:

• ✦Email address — used to sign you in via a one-time code. We do not send marketing email.
• ✦Tasting notes — the bar name, origin, flavors, intensity scores, notes, rating, and date you record. Stored securely and visible only to you unless you explicitly share a note.
• ✦Photos — any photos you upload are stored in our secure file storage and linked to your account.

How We Use It

Your data is used solely to operate Cacao Journal — to display your journal, save new entries, and generate share links when you choose to share a tasting. We do not sell your data, run ads, or share it with third parties beyond what is required to run the infrastructure.

Shared Tastings

When you enable the share link for a tasting, that note becomes publicly accessible to anyone with the link. It is not indexed by search engines. You can revoke access at any time by toggling sharing off in your journal.

Infrastructure

Cacao Journal is hosted on Cloudflare Pages. Data is stored in Supabase (PostgreSQL database and file storage), which is hosted on AWS. Authentication is handled by Supabase Auth. These providers have their own privacy and security practices.

Cookies & Sessions

We use a single session cookie to keep you signed in. No tracking cookies, no analytics cookies, no third-party cookies.

Your Rights

You may delete your account and all associated data at any time by emailing hello@cacaojournal.com. Individual tastings can be deleted from your journal at any time.

Contact

Questions about this policy: hello@cacaojournal.com