/ 01Who we are
HexRoast (operated under the brand name HexRoast, accessed at hexroast.com) is a craft coffee brand publishing a journal and operating a forthcoming retail product line. Our companion blog, HexRoast Field Notes, is hosted at hexroastlogs.blogspot.com on Google's Blogger platform.
For privacy questions, contact: privacy@hexroast.com
/ 02What we collect
We try to collect the minimum amount of data necessary to operate the site and the eventual store. Specifically:
// 02.1Email addresses
If you join the waitlist or subscribe to the newsletter, we collect your email address. We use this only to send you HexRoast-related updates. We do not sell, share, or rent email addresses to third parties. You can unsubscribe at any time using the link at the bottom of every email.
// 02.2Analytics data
We use privacy-respecting web analytics (Cloudflare Web Analytics) to understand how the site is being used. This collects aggregate, anonymized data: page views, referrers, country-level location, browser type. We do not use cookies for analytics. We do not track individual users across sessions.
// 02.3Order and shipping data
When the store launches, placing an order will require name, shipping address, email, and payment information. Payment processing is handled by a PCI-compliant third-party processor; we never see your full card number. Shipping data is shared only with the carrier responsible for delivering your order.
// 02.4Comments and form submissions
If you email us, send us a contact form, or otherwise reach out, we keep that correspondence on our email server until it's no longer needed.
/ 03Cookies and similar technologies
This site (hexroast.com) does not set tracking cookies of its own. We may set strictly necessary cookies for functionality such as keeping you logged into the eventual store, remembering items in a cart, or preventing fraud.
If we add display advertising in the future (for example, Google AdSense), those ads may use cookies and similar technologies to serve, render, and measure ads. You can review Google's advertising privacy practices at policies.google.com/technologies/ads and opt out of personalized advertising at google.com/settings/ads.
The companion blog at hexroastlogs.blogspot.com runs on Google's Blogger platform, which has its own cookie behavior governed by Google's privacy policy.
/ 04Third-party services we use
To operate the site we rely on a small number of third-party services. Each has its own privacy policy:
- Cloudflare — content delivery, DNS, basic security, and aggregate analytics.
- Google Fonts — typeface delivery (Instrument Serif and JetBrains Mono).
- Google Blogger — companion blog hosting at hexroastlogs.blogspot.com.
- An email service provider — to send the roastlog newsletter.
- A payment processor — to handle product orders when the store launches.
- A fulfillment partner — to ship physical orders.
/ 05Your rights
Depending on where you live, you may have legal rights regarding your personal data, including the right to access, correct, delete, or export your data, and the right to object to certain uses. We honor these rights regardless of where you live, on a best-effort basis.
To exercise any of these rights, email privacy@hexroast.com from the address on file. We respond within 30 days.
// 05.1EU / UK residents (GDPR)
You have rights under the General Data Protection Regulation including access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint with a supervisory authority.
// 05.2California residents (CCPA / CPRA)
You have rights including the right to know, delete, correct, and limit the use of personal information, and the right to opt out of "sale" or "sharing" of personal information. We do not sell personal information.
/ 06Children
HexRoast is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us data, contact us and we will delete it.
/ 07Data retention and security
We keep personal data only as long as necessary to provide the service it was collected for, comply with legal obligations, resolve disputes, or enforce our agreements. Email subscribers can request deletion at any time by replying to any newsletter email.
We use industry-standard security practices to protect data, but no system is 100% secure. If we ever experience a breach affecting your personal data, we will notify affected users within the timeframe required by applicable law.
/ 08International transfers
HexRoast is operated from the United States. If you access the site from outside the U.S., your data will be transferred to and processed in the U.S. By using the site, you consent to this transfer.
/ 09Changes to this policy
We update this policy when we change how we handle data — most commonly when we add new third-party services. The "last updated" date at the top of the page reflects the most recent change. Material changes will be announced on the homepage and, where appropriate, by email.
/ 10Contact
Privacy questions, requests, or complaints: privacy@hexroast.com
General inquiries: hello@hexroast.com
Or visit the contact page.