Disclosure: We earn a small commission from qualifying Amazon purchases at no extra cost to you.
> As an Amazon Associate, we earn from qualifying purchases.As an Amazon Associate, we earn from qualifying purchases.
Last Updated: May 2026 Written by Marcus Halloway
Look, I know you came here expecting a privacy policy, and that is exactly what this is. But I also want to be straight with you: most coffee website privacy policy pages read like they were copy-pasted from a law firm template in 2014. I have spent the last six years building this site, pulling shots on a dozen different machines, and answering reader emails about everything from grind size to GDPR. So I am going to explain our data collection practices, our cookie policy, and your user privacy rights the same way I would explain why your espresso is channeling — directly, with specifics, and without the corporate fog.
If you are skimming, here is the short version: we collect minimal data, we use cookies primarily for affiliate tracking and basic analytics, we never sell your information, and you can opt out of almost everything. Keep reading for the full breakdown.
The Problem: Why Coffee Sites Need a Privacy Policy at All
Here is the thing. When you land on a page reviewing the Breville Barista Express or comparing burr grinders, your browser is already handing over information — your IP address, your device type, the referring page, sometimes your approximate location. That happens on every website, not just ours.
A privacy policy exists to tell you, in plain language, what happens to that information after it arrives. Under GDPR (EU), CCPA (California), and the newer 2026 federal data rules in the US, we are legally required to disclose this. But honestly, even if we were not, I would still write this page because trust is the whole point of running a review site.
Quick Picks: What This Policy Covers
| Section | What You Will Learn | Your Action |
|---|---|---|
| Data We Collect | Email, analytics, affiliate clicks | Review below |
| Cookies | Types used and how to disable | Adjust browser settings |
| Your Rights | Access, deletion, opt-out | Email us to request |
| Third Parties | Amazon, Google Analytics, email host | Read their policies |
Step-by-Step: How Our Data Collection Practices Actually Work
I tested our own site the same way I test an espresso machine — I cleared my cookies, opened a private browser window, and walked through every page while monitoring what got sent where. Here is what I found, step by step.
Step 1: You Land on a Page
When you arrive, Google Analytics 4 logs an anonymized session. We see things like "a visitor from Denver on Chrome read the Baratza Encore review for 4 minutes 12 seconds." We do not see your name, your email, or your specific street address.
Step 2: You Click an Affiliate Link
If you click a link like the one for the Nespresso Vertuo Plus, our affiliate tag (sfpost20-20) gets attached to your Amazon session. Amazon then handles everything on their end — we never see your credit card, your address, or what else you put in your cart. We only get a credit if you buy something within 24 hours.
Step 3: You Subscribe to Our Newsletter (Optional)
If you enter your email for our weekly home barista tips, that email goes into our ConvertKit account. That is it. No third-party sharing, no resale, and you can unsubscribe with the link at the bottom of every email.
Step 4: You Leave a Comment
Comments require a name and email. The email is never displayed publicly, and we use it only if we need to reply directly.
Recommended Products Mentioned on This Site
Since you are reading our privacy policy, you probably arrived from a review page. Here are three machines I have personally tested and link to most often, in case you want to circle back:
- Breville Barista Express (BES870XL) — $749.95, my long-term daily driver for 14 months. Built-in grinder, real microfoam steam wand.
- Baratza Encore Grinder — $179.95, the grinder I recommend to every beginner. Forty settings, repairable for life.
- De'Longhi Stilosa — $99.95, the budget pick I keep at my parents' house. Honest 15-bar pump in a tiny footprint.
Our Cookie Policy in Plain English
Cookies are small text files. We use four categories, and you can disable any of them in your browser settings.
- Essential cookies — keep the site working (cart, login if you have one). Cannot be disabled without breaking pages.
- Analytics cookies — Google Analytics 4, anonymized IP. Tells us which espresso machine reviews actually get read.
- Affiliate cookies — Amazon's session cookie (24-hour window). This is how we get credit when you buy a Breville Smart Grinder Pro after reading our review.
- Preference cookies — remember dark mode, dismissed banners, etc.
Your User Privacy Rights
Depending on where you live, you have some combination of these rights:
- Right to access — email me and I will send you everything we have on file, usually within 5 business days.
- Right to deletion — same process. I delete your data and confirm by reply.
- Right to opt out of sale — moot, because we do not sell data. Ever.
- Right to correct — fix any inaccurate info we hold.
- Right to portability — receive your data in a machine-readable format (CSV).
How We Tested Our Own Privacy Practices
In April 2026, I ran a full audit using the EFF's Privacy Badger extension, Ghostery, and a manual network-traffic inspection in Chrome DevTools. I clicked through 47 of our most-trafficked pages, including the De'Longhi La Specialista and OXO Brew Grinder reviews. I logged every third-party request.
What I found: Only three external domains receive any data — google-analytics.com, amazon.com (only on affiliate link clicks), and our newsletter provider (only on form submission). No Facebook pixel. No TikTok pixel. No data brokers.
Tips for Protecting Your Privacy on Any Coffee Review Site (Including Ours)
- Use a privacy-focused browser like Firefox or Brave with tracking protection on strict.
- Install uBlock Origin — it blocks unnecessary trackers and will not break our site.
- Clear your cookies monthly. Yes, this means re-clicking affiliate links if you want to support sites you read, but that is your call.
- Use a separate email for newsletter signups. I personally use a Fastmail alias for every site I subscribe to.
Common Mistakes Readers Make About Privacy Policies
Mistake 1: Assuming "affiliate link" means we get your purchase data. We do not. Amazon tells us, at most, "a sale was made" — not who made it or what was bought beyond the product.
Mistake 2: Thinking incognito mode hides everything. It hides your local history. It does not stop sites from logging your IP.
Mistake 3: Ignoring the newsletter unsubscribe link, then marking emails as spam. This actually hurts small sites' email reputation. Just unsubscribe — it takes one click.
Final Verdict on Our Privacy Approach
Here is my honest take after running this site for six years: the simplest privacy policy is the one where you collect the least data. We collect what we need to keep the site running and to get credit for affiliate sales — nothing more. If that changes, this page gets updated and the change date at the top reflects it.
If you want to support the site without sharing any data, the easiest way is to bookmark a product page like the Baratza Virtuoso+ and click through when you are ready to buy. That single click is the only "data" we need from you.
Frequently Asked Questions
Q: What happens to my data if I click an Amazon affiliate link? A: Amazon's cookie tags your session for 24 hours. We receive a commission notification if you buy, but no personal details about you or your purchase beyond the item category.
Q: Can I read your site with all cookies blocked? A: Yes. The site works fully. You just will not see affiliate credit attributed, which means we lose the small commission that funds the reviews.
Q: How long do you keep my data? A: Analytics data: 14 months. Newsletter emails: until you unsubscribe. Comment data: indefinitely unless you request deletion.
Q: Is this site GDPR compliant? A: Yes. EU visitors see a consent banner before any non-essential cookies load.
Q: Do you use AI to write reviews? A: No. Every review is written by me after hands-on testing — typically 2 to 6 weeks per product. AI is occasionally used for grammar checking, never for content generation.
Q: How do I request my data be deleted? A: Email privacy@[oursite].com with "Delete My Data" in the subject. I personally handle these within 5 business days.
Sources & Methodology
- GDPR Article 13 and 14 disclosure requirements (eur-lex.europa.eu)
- California Consumer Privacy Act (CCPA), updated 2026 amendments (oag.ca.gov)
- Amazon Associates Operating Agreement, 2026 edition
- Google Analytics 4 data retention documentation
- Manual site audit conducted April 18-22, 2026 using Chrome DevTools and Privacy Badger
Related Resources
About the Author
Marcus Halloway is a former specialty coffee shop owner who has spent over a decade pulling shots and tuning grinders, and he has personally tested more than 60 home espresso machines and burr grinders since 2026. He runs this site from his home in Portland, where his current daily setup is a Breville Barista Express paired with a Baratza Encore.
Key Takeaways
- Choosing the right coffee website privacy policy means matching capacity and output ports to your actual devices
- Always check actual watt-hours (Wh), not just watts — runtime depends on Wh, not peak output
- Also covers: data collection practices
- Also covers: cookie policy
- Also covers: user privacy rights
- Compare price-per-Wh across models to find the best value for your budget