Please review before relying on this page. It describes how the website works today. It is not a lawyer-drafted policy.
Orders and payments
Checkout asks for your name, email, and shipping address, and takes payment through Square's secure card field. The card number is entered on Square's side. This site does not store card numbers. Square keeps the order, the charge, and the customer record. We email an order confirmation and, once a shipment is marked complete, a tracking message.
The Opportunist
A subscription creates a Square subscription and stores the ship-to address and roast preference Square needs to bill and pack the box. You can review it from your account.
Account sign-in
Sign-in emails a 6-digit code to the address you enter. A successful code sets a session cookie so the account pages know it is you. We do not collect a password.
Messages and the newsletter
Contact, event, and wholesale forms send us the fields you fill in (name, email, and whatever else that form asks) and email the roaster. A newsletter signup is saved as a Square customer with a note that you subscribed on the website. We do not run a separate mailing-list product in this codebase.
Bot checks and rate limits
Forms include a honeypot. If Cloudflare Turnstile keys are configured, the form also asks Cloudflare to check that a person submitted it. Rate limits may be counted in Upstash Redis when those keys are set, or in memory on the server when they are not. Those checks use your IP address as the platform reports it.
Analytics
The site includes Vercel Web Analytics and Speed Insights. When those products are enabled for the deployment, Vercel receives page views and performance measurements. They are not given your card number. If the products are not enabled in the Vercel project, the scripts do not record traffic.
What this page does not decide
It does not state a retention schedule, a "we never sell data" promise, or a process for access and deletion requests — those are not implemented as features here. Write to hello@occasioroasters.com and we will answer from the records Square and the email provider actually hold. See also the terms.