Privacy Policy

Still Coffee Lab ("we," "us," or "our") operates stillcoffeelab.com (the "Site"), a specialty coffee editorial website based in Banda Aceh, Indonesia. This Privacy Policy explains what information we collect, how we use it, and your rights as a visitor.

We are committed to handling your data responsibly in accordance with Indonesia's Personal Data Protection Law (UU PDP No. 27/2022) and, where applicable, the EU General Data Protection Regulation (GDPR) for visitors from the European Economic Area.

1. Information We Collect

a. Automatically Collected Data

When you visit our Site, Google Analytics 4 automatically collects:

• Pages visited, time spent on each page, and navigation path
• Browser type, device type, and operating system
• Approximate geographic location (country and city level — full IP addresses are not retained)
• Referring URL and how you arrived at our Site
• User interactions such as clicks and scroll depth

b. Cookies

Our Site uses cookies. See Section 5 for a full list and how to opt out.

c. Voluntarily Provided Data

If you contact us by email, we receive your email address and the content of your message. We do not directly collect payment information.

d. Blind Series Tasting Data

When you take part in a Blind Series tasting experience, we record your answers — country guess, origin-name guess, confidence level, sensory slider scores, and any free-text tasting notes you choose to write — to understand how participants perceive our coffees. When you complete a session through the reveal, we also record your IP address, used solely to enforce a limit of one completed session per access code per network; it is not used for tracking or profiling. If your guess qualifies for a reward and you submit the claim form, we additionally collect your name, purchase order number, and Instagram handle, used solely to verify your purchase and deliver the reward. This data is stored in a private Google Sheets document accessible only to us. To have it corrected or deleted, email us at stillcoffeelab@gmail.com.

2. Legal Basis for Processing

We process personal data on the following legal bases:

• Legitimate interest — We use analytics to understand Site usage and improve the visitor experience, and we record Blind Series answers and IP addresses to run the tasting experience fairly (one completed session per access code per network) and prevent misuse. These interests do not override your fundamental rights.
• Consent — For non-essential cookies (analytics), collected through our cookie consent banner. You may withdraw consent at any time.

3. How We Use Your Information

• To understand how visitors use our Site and improve content and user experience
• To monitor Site performance and diagnose technical issues
• To respond to inquiries you send directly to us

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Services

• Google Analytics 4 (property ID: G-TXZW7VHZRV) — We use GA4 to analyze Site usage. Data is sent to Google servers, which may be located in the United States. Google's Privacy Policy: policies.google.com/privacy
• Google Fonts — Typefaces are loaded from Google's servers. Google may receive your IP address when fonts are requested. If you prefer, you can block these requests using a browser extension.
• Vercel — Our Site is hosted on Vercel, Inc. Vercel may log standard server data including IP addresses. Vercel's Privacy Policy: vercel.com/legal/privacy-policy
• Google Sheets & Apps Script — Blind Series answers and reward claims are stored in a private Google Sheets document. Data is processed on Google servers, which may be located in the United States. Google's Privacy Policy: policies.google.com/privacy
• External Links — Our Site includes links to third-party platforms such as Shopee. We are not responsible for the privacy practices of those sites. We encourage you to review their policies before providing any personal information.

5. Cookies

We use the following cookies and local storage items:

* Stored in browser localStorage (not a cookie). Cleared when you clear your browser data.

To opt out of Google Analytics:

• Install the Google Analytics Opt-out Browser Add-on
• Or disable cookies in your browser settings — note that this may affect Site functionality

6. Data Retention

Google Analytics retains event-level data for up to 14 months and aggregated user data for up to 26 months, after which it is automatically deleted by Google. We do not store personal data on our own servers. Standard server logs maintained by Vercel are retained according to Vercel's policies.

7. International Data Transfers

Our analytics provider (Google) and hosting provider (Vercel) are US-based companies. By using our Site, data may be transferred to and processed on servers in the United States or other countries. Both providers maintain appropriate safeguards in line with applicable data protection requirements, including Standard Contractual Clauses for EEA data transfers.

8. Your Rights

Under Indonesia's UU PDP and/or the GDPR (if you are an EEA resident), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or request restriction of certain processing
• Request data portability in a structured, machine-readable format (GDPR)
• Withdraw consent at any time without affecting the lawfulness of prior processing
• Lodge a complaint with your national data protection authority

To exercise your rights, contact us at stillcoffeelab@gmail.com. We will respond within 30 days.

9. Children's Privacy

Our Site is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal data through our Site, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. For material changes, we will provide a more prominent notice. Your continued use of the Site after changes are posted constitutes your acceptance of the updated policy.

11. Contact

For questions about this Privacy Policy or to exercise your rights, please contact us:

Still Coffee Lab
Banda Aceh, Aceh, Indonesia
stillcoffeelab@gmail.com