Privacy policy

Data controller

The publisher of the site, identified in the legal notice. Contact: the contact address in the legal notice.

Data processed

• Account: email address, password (stored hashed), public handle, role, reputation, language (used for emails and notifications), and the email verification date. No real name is asked for or stored.
• Reviews: rating, text, language, status, dates (including the edit date) and, when the author sends one, the proof file (purchase receipt, payout screenshot: JPG, PNG or PDF) with its status, its decision date and the administrator's reasons. The public handle (linked to the public profile), reputation, date and text are shown publicly with the review; the proof is not.
• Proof files: kept on a private storage, not reachable by a public URL, readable only by their author and by the administrators. Images are re-encoded when stored, which removes their metadata (EXIF); PDF files are stored unchanged. A file is deleted when its review is deleted, when the author's account is deleted, when the author withdraws a pending proof or asks for the deletion of a refused one. The site asks authors to hide sensitive data before sending.
• Public profile (/roasters/<handle>): handle, sign-up month and year, reputation, level, number of published and verified reviews, and the published reviews. The email address is not shown.
• Firm claims: method (domain email, DNS TXT record or manual), verification token, the email address the verification link was sent to, the justification text of a manual claim, status, date, and the administrator's decision with its reasons.
• Replies, removal cases and appeals: text of the reply and its previous versions, reason and comment of the removal request, appeal text, reasoned decisions, and the accounts involved (requesting member, administrator).
• Moderation log: for each administrator decision (removal, claim or proof), the administrator's handle, date, decision and reasons. It cannot be edited from the interface and keeps the administrator's handle if their account is deleted.
• Notifications: title and text of the notices about claims, removal cases and proof decisions, stored on the account (with their read status) and sent by email.
• Sessions: session identifier, account identifier, IP address, browser (user agent), last activity date.
• Login: number of attempts per email and IP address pair (temporary), to limit abuse.
• Password reset: email and reset token.
• Emails sent by the site: email verification, password reset, claim verification link (sent to the address entered), notices about claim, removal request, appeal and proof decisions.
• Technical logs of the server and the application: date, IP address, requested URL, errors.

Purposes and legal bases

• Creating and managing the account, publishing reviews, computing scores and reputations, handling replies and removals: performance of the service requested.
• Examining the proofs sent by authors to mark a review as verified: performance of the service requested (the proof is optional).
• Verifying that a person represents a firm before they can reply or request a removal: legitimate interest.
• Security (sessions, attempt limiting, logs) and moderation: legitimate interest.

Recipients

• The host: the host named in the legal notice.
• The public, for published reviews (public handle, reputation, date, text), the public profile and firm replies.
• The review author, for a removal request about their review: reason and comment, without the identity of the member who filed it, then the reasons for the decision. The members of the firm receive the decisions.
• The site's administrators, for claims, removal cases and proofs (the only people, besides the author, who can open a proof file).
• The email delivery provider configured by the publisher, for verification and reset emails.

To date the site uses no advertising third party and no analytics tool. Fonts are hosted by the site: displaying pages triggers no request to a third party.

Your rights

You can request access, rectification, erasure, restriction or portability of your data, and object to its processing, by email to the contact address in the legal notice.

From the profile page, you can edit your information and delete your account (password required). Deletion removes the account and, in the database, the reviews, replies, claims, notifications and reputation events linked to it, and deletes the proof files from the storage. Moderation log entries are kept without a link to the account. From the "My reviews" page you can also delete a review, with its proof file, without deleting the account.

You can lodge a complaint with the competent data protection authority.