Privacy Policy

1. Introduction & Commitment

Code & Coffee ("we", "our", or "the Platform") respects the privacy and sovereignty of our developer community. This Privacy Policy governs the collection, processing, and storage of data across our website and REST APIs.

2. Information We Collect

• Account Credentials: Name, email address, password hash (salted using bcrypt with cost factor 10), and optional bio information.
• OAuth2 Profile Data: When signing in through Google or GitHub OAuth, we receive authorized public profile identifiers and verified email addresses.
• Real-Time Reader Telemetry: Ephemeral sliding-window reader tokens processed via Redis with 25-second auto-expiration (TTL) to measure active readers without persistent user tracking.

3. Data Storage & Encryption

All persistent relational records are housed within Neon Serverless PostgreSQL with mandatory SSL transport encryption (sslmode=require). Password hashes are one-way cryptographic digests. Sensitive verification OTP tokens expire within 10 minutes and are purged from database records upon use.

4. Your Rights Under GDPR & CCPA

You retain the unconditional right to access, rectify, export, or permanently erase your user account and associated comments from our database at any time. Inquiries regarding data deletion requests may be directed to privacy@codeandcoffee.dev.