Privacy Policy

Last updated: February 9, 2026

RoastSource is built with a simple privacy philosophy: your data belongs to you, stays on your device, and we don't want it.

What data RoastSource collects

Almost nothing. The RoastSource web application runs entirely in your browser. All of your coffee inventory, roast profiles, ratings, blend recipes, and settings are stored in your browser's local storage (localStorage). This data never leaves your device unless you explicitly export it.

Website analytics

We use Cloudflare Web Analytics on roastsource.com. This is a privacy-first, cookieless analytics service that collects aggregate page view data (page URL, referrer, country, device type) without using cookies, tracking pixels, or fingerprinting. No personal information is collected. No data is sold. You can read Cloudflare's privacy commitment.

Cookies

RoastSource does not use cookies. We don't use advertising cookies, tracking cookies, or third-party cookies of any kind. Period.

License validation

If you purchase a license, your license key is validated through our payment processor (LemonSqueezy). This sends your license key to verify its validity. No personal roasting data is transmitted during validation. LemonSqueezy processes your payment information under their own privacy policy as Merchant of Record.

Data you share voluntarily

If you use the GitHub Gist sync or local file export features, you are choosing to send your data to those services under their respective privacy policies. RoastSource provides these as optional convenience features — they are never required.

Third-party services

The RoastSource web app loads JavaScript libraries (React, Tailwind CSS, Chart.js) from public CDNs (unpkg.com, cdn.tailwindcss.com, cdn.jsdelivr.net). These CDN providers may log standard web request information (IP address, user agent). We have no control over their logging practices. The desktop version of RoastSource (when available) will bundle all dependencies locally, eliminating CDN requests entirely.

Children's privacy

RoastSource is not directed at children under 13. We do not knowingly collect information from children.

Data retention

Since your application data lives in your browser's localStorage, you control its retention. Clear your browser data and it's gone. Export it and it's yours forever. We retain no server-side copies of your roasting data because we never receive it in the first place.

Changes to this policy

If we change this privacy policy, we'll update the date at the top and note what changed. For significant changes, we'll add a notice in the app.

Contact

Questions about privacy? Email us at [email protected].