Privacy Policy
Preview draft — owner and counsel review required; changes are not approved for publication.
- Reference date (draft):
- January 15, 2026
- Last updated:
- October 14, 2026
We collect the information needed to run an account-based discovery platform: your account details, what you save, the searches you subscribe to, submissions you send us, and security-related technical data. Payment card details are handled by Stripe, not by CoffeeModes.
1. Information you provide
- Account: email address and password credentials handled by our authentication provider.
- Profile: display name, optional bio, location preference, interests and notification settings you choose to add.
- Submissions: the opportunity details, provider information and application URL you send for review.
- Support and feedback: messages, reports and flags you send us.
2. Activity information
- Opportunities you save and searches you save.
- Notification preferences and delivery channels.
- Aggregate listing events such as views and outward application clicks, used to measure listing performance.
- Application statuses you record yourself (for example "applied" or "not eligible"). These are visible only to you, are never shared with the provider, and can be removed at any time from your account.
- Purchases you make: subscription state and featured-placement orders.
2A. Applicant Privacy — on-platform answers and screening
When you submit an on-platform application or screening form, CoffeeModes stores your answers with the question wording shown at submission. Authorized listing owners, provider managers and administrators can review applications; this is separate from private application-status notes you keep for yourself. The applicant name shown to reviewers comes from your profile display name, with a fallback label if absent.
Fit Profile suggestions are visible and editable before you submit. The organizer controls the questions and invitation or not-selected decision; automated notifications can communicate those decisions. The current screening flow sends an in-app invitation notification. These tools do not independently select candidates or guarantee admission, employment or payment.
Ask and answer only what is necessary for the opportunity. On-platform question validation prohibits requests for financial/login credentials, identity documents or numbers and specified sensitive traits. Do not volunteer this information in free-text answers. Reporting and support should also avoid unnecessary third-party personal data.
For external applications, the destination’s own privacy practices apply. In the screen-then-external flow, only invited applicants receive the gated next-step link. CoffeeModes does not track whether that external application is completed. Contact us for access, correction or deletion requests; retention and legal obligations remain governed by the rest of this Privacy Policy and applicable law.
3. Payment information
Payments are processed by Stripe. Stripe receives your card details directly; CoffeeModes stores only non-sensitive references such as a customer identifier, subscription status, amount, currency and order state. We never receive your full card number.
4. Device, browser and security-event data
Our infrastructure logs standard request data such as IP address, user agent, timestamps and authentication events. This is used for security, abuse prevention and debugging.
Signed-out visitors are given a random session identifier stored in the browser so that duplicate listing events can be de-duplicated. It is not a fingerprint and is not linked to an identity.
For engagement measurement, that identifier (or your account identifier when signed in) is converted to a one-way hash before it is stored with a listing event. We do not store the raw identifier, IP address or user agent alongside these events, and repeat activity from the same visitor within 30 minutes is not counted again.
5a. Advertising and third-party vendors
CoffeeModes has infrastructure for display advertising, but advertising may not be enabled at all times. Where advertising is enabled, placements may appear on eligible public pages.
Where advertising is enabled we use Google AdSense. Google and its partners may set cookies or use device identifiers to serve, personalize, cap and measure advertising. Google's use of advertising cookies is described in Google's own advertising and privacy notices, and you can review or change ad personalization at google.com/settings/ads.
We ask for your advertising choice before any advertising code is loaded. Choosing "Essential only" limits requests to non-personalized advertising. You can clear your choice at any time by clearing site storage in your browser.
We do not share your name, email address or account activity with advertising vendors, and advertising is never placed on account, billing, submission, notification or administrative pages.
OWNER/LEGAL REVIEW REQUIRED: this section describes how the product behaves and is not legal advice. Have counsel confirm the disclosures and consent mechanism required in your jurisdictions before enabling live ads.
6. Why we process information
- To operate accounts, saved items and saved-search matching.
- To review submissions and moderate the platform.
- To send notifications you have asked for.
- To process subscriptions and featured-placement purchases.
- To protect against fraud, abuse and security incidents.
- To improve curation, categories and product quality.
7. Service providers
We share only what is required with the providers that run the platform: our hosting and database/authentication provider, Stripe for payments, our email delivery provider for transactional and notification email, OneSignal for push notifications where you enable them, and Google AdSense for display advertising where advertising is enabled.
We do not sell personal information.
8. Retention
Account data is retained while your account is active. Submissions and moderation records are retained for platform-integrity purposes. Payment and order records are retained as long as required for accounting and dispute handling. Security logs are retained on a short rolling window.
9. Security
Access to user data is restricted at the database level with row-level security so that users can read and change only their own records. Administrative access is role-based and audited. No system is perfectly secure, and we cannot guarantee absolute security.
10. Your choices and account deletion
- Update your profile and privacy preferences in your account settings.
- Turn email or push notifications on and off per channel.
- Delete saved opportunities and saved searches at any time.
- Request account deletion from account settings or by writing to legal@coffeemodes.com.
11. Children's privacy
CoffeeModes is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact legal@coffeemodes.com.
12. State privacy rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to appeal a decision we make about such a request. Submit requests to legal@coffeemodes.com; we verify requests using your account email.
13. International visitors
CoffeeModes is operated from the United States and information is processed there. If you use the service from outside the United States, you understand your information is transferred to and processed in the United States.
14. Updates to this policy
We update the "Last updated" date whenever this policy changes and highlight material changes in the product.
15. Contact
Privacy questions: legal@coffeemodes.com.
Questions about this page?
Write to support@coffeemodes.com or use the contact page.