Privacy Policy

Last updated: September 13, 2026

This policy explains what personal information Unlisted Coffee collects, why, who we share it with, and what you can ask us to do with it. We've tried to write it the way we'd want it written to us: specific, and in plain English.

"Unlisted Coffee," "we," "us," and "our" mean Unlisted Coffee LLC, a small-batch coffee roaster based in Austin, Texas. It covers unlistedcoffee.com, checkout, our emails, and anything else we run under the Unlisted Coffee name (together, the "Services").

The short version

• We collect what we need to sell you coffee, ship it, and run the site — and the things you choose to give us, like a newsletter signup or a saved recipe.
• We don't sell your personal information, and we don't use it for third-party ad targeting.
• We use a small set of service providers (listed below) to do the work: Shopify for the store and checkout, Convex for our database, Resend for email, PostHog for analytics, and a few others.
• Email support@unlistedcoffee.com to see, correct, or delete what we have about you.

What we collect

When you buy something. Checkout runs on Shopify. We receive your name, email, shipping address, phone number (if you give one), what you ordered, what you paid, any discount code, and notes like a gift message or delivery instructions. We don't receive or store your full card number — payment is handled by Shopify and its payment processors.

When you create an account. Accounts are optional; you can always check out as a guest. If you sign in, we store your email address and a one-time code we email you to log in. If you set up a profile, we store the display name, handle, and bio you choose.

What you save or share. If you're signed in, we store the brews you log and the recipes you write. Brew logs are private to you. Recipes you publish, and your display name, handle, and bio, are public — anyone can see them on your profile page. If you run a tasting session, we store the coffees, links, or bag photos you add and the feedback your guests leave.

When you contact us or sign up for things. That includes the contact form, newsletter signup, back-in-stock alerts, reader requests, feedback, event or catering inquiries, and tasting-session responses. We store what you send us — typically your name, email, and message, and a phone number only if you give one.

Automatically, when you use the site.

• Analytics. We use PostHog to understand how people use the site: pages viewed, clicks, how visitors move between pages, device and browser type, and approximate location derived from your IP address. PostHog assigns your browser an identifier, and if you place an order or sign in we may link that activity to your email. PostHog also records session replays — a reconstruction of how you move through and interact with our pages — which we use to find confusing or broken parts of the site. Replays mask what you type into form fields by default. You can turn analytics and session replay off; see "Your privacy choices" below.
• Security. To stop abuse of our forms, we record your IP address with a count of recent requests.
• Your cart. Your browser stores your cart's ID so it's still there when you come back.

How we use it

• To fulfill orders: roasting, packing, shipping, local delivery, and support when something goes wrong.
• To run your account: signing you in, and saving and showing your brews, recipes, and profile.
• To talk to you: order and account emails, replies to your messages, and — only if you signed up — the newsletter, including any signup offer. Every marketing email has an unsubscribe link.
• To improve the site and our coffee: understanding what's working, what's confusing, and what people want more of.
• To keep things secure: preventing spam, fraud, and abuse.
• To meet legal obligations: taxes, accounting, and responding to lawful requests.

Who we share it with

We share personal information only with service providers that help us run the business. Each one handles it on our behalf, for the purposes above:

Provider	What they do for us	What they receive
Shopify	Store, checkout, payments, order records	Order, payment, and customer details
Convex	Our database and backend	Orders mirrored from Shopify, accounts, saved content, form submissions
Vercel	Hosts the website	Standard web request data, like IP address and browser
Resend	Sends our email and manages newsletter subscriptions	Email address, name where given, email content
PostHog	Product analytics and session replay	Usage data and session replays, and order totals/email when you buy
Discord	Internal notifications to our team	New orders (name, email, total); newsletter signups and back-in-stock requests (email); contact-form messages, reader requests, and feedback (name/email and message); catering and event booking requests (name, email, event date, headcount, location, and estimate)
OpenAI	Reads coffee details from bag photos and links you add to a tasting session	Those photos and links
Shipping carriers (USPS, UPS)	Deliver your order	Name, shipping address, phone if given

We also show posts from our own Instagram account on the home page. Those images load directly from Instagram's servers, so Meta receives the standard request data your browser sends when fetching them (your IP address, browser type, and the page you're on).

We may disclose information if required by law, to protect our rights or someone's safety, or as part of a business transfer such as a sale of the company.

We don't sell your personal information or share it for cross-context behavioral advertising.

Shopify also processes the information you give at checkout under its own terms; see the Shopify Consumer Privacy Policy.

Cookies and similar storage

We use a small number of cookies and browser-storage entries:

• Essential: your sign-in session, your cart, and Shopify's checkout cookies.
• Analytics: PostHog's identifier, which lets us count visits and understand usage.
• Campaign attribution: if you arrive through one of our links (a flyer, a post, an Instagram or Facebook link), a cookie remembers which one for 30 days so we can tell which campaigns lead to orders.
• Feedback forms: a random ID stored in your browser so a tasting or cupping scoresheet counts one response per device.

We don't use advertising cookies. You can clear or block cookies in your browser settings; the site still works without analytics, though checkout and sign-in need their essential storage.

Your privacy choices

You can turn off analytics and session replay at any time on our Your Privacy Choices page, which is also linked in the site footer. Your choice is saved in your browser, so it applies to that browser and device. We also treat a Global Privacy Control signal from your browser as an opt-out, with no action needed.

While you're opted out, no analytics events or session replays are sent from your browser, and purchases you make in that browser aren't sent to PostHog either. We still keep the order itself, in Shopify and our own systems, so we can fulfill it.

How long we keep it

• Orders: as long as we need them for fulfillment, support, taxes, and accounting — we keep order records for 7 years.
• Accounts and saved content: until you delete them or ask us to.
• Newsletter: until you unsubscribe.
• Messages and form submissions: 7 years.
• Security logs (IP addresses): about 48 hours after the request.

Your rights and choices

Wherever you live, you can email support@unlistedcoffee.com to:

• See the personal information we have about you;
• Correct anything that's wrong;
• Delete your account, saved content, and other personal information. We may keep what we're legally required to, such as order records for taxes;
• Get a copy of your information;
• Unsubscribe from marketing — or just use the link in any newsletter;
• Opt out of analytics and session replay on the Your Privacy Choices page.

Some state privacy laws (including Texas's) give you these rights formally. We'll verify it's really you before acting on a request, usually by confirming from the email address on file, and we'll respond within 45 days. We won't treat you differently for making a request. You can also update your profile yourself from your account settings.

Children

The Services aren't directed to children under 13, and we don't knowingly collect their personal information. If you believe a child has given us information, email us and we'll delete it.

Security

We use reasonable safeguards: encrypted connections, access limited to the people who need it, and signed verification of order data we receive from Shopify. No system is perfectly secure, so please don't email us sensitive information like card numbers.

Where your information is processed

We're based in the United States, and our service providers process information in the United States. We don't currently ship internationally.

Changes

If we change this policy, we'll update the date at the top. If a change is significant, we'll give you notice, for example by email or on the site.

Contact

Questions or requests: support@unlistedcoffee.com Unlisted Coffee LLC, Austin, Texas, USA