Privacy Policy

Who we are

Stealth Coffee Lab is a business name (a “doing business as” name) of William Huba, a sole proprietor in Wellesley, Massachusetts (“we,” “us”). This policy covers stealthcoffeelab.com (the “site”), orders placed on it, and the emails and texts we send.

Mailing address: 26 Eisenhower Circle, Wellesley, MA 02482.
Email: privacy@stealthcoffeelab.com

The site is for customers in the United States. We ship to US addresses only. We don’t offer the site to people outside the US, and we don’t run a separate European or UK privacy program.

What we collect

Information you give us:

• Name, email address, and shipping address
• Phone number, if you sign up for texts
• Order and subscription details: what you buy, how often, the next charge date, and any pauses, delays, or cancellations
• Delivery notes you choose to add
• Anything you send us, like support emails

Your subscription is tied to an account on your email address. There is no password. We email you a magic link to sign in. From that account you can cancel, pause, or delay a subscription. A magic link works for anyone who has it until it expires, so don’t forward it.

Payment information: Stripe processes our payments and stores the card you use for a subscription. Your card number goes directly to Stripe, and we never see or store it. Stripe shares limited details with us, such as card type, last four digits, and expiration date. We use that card on file for later subscription charges until you cancel or the charge fails.

Information collected automatically:

• How you use the site, through Amplitude: pages you view, what you click, the site that referred you, your device and browser type, and your approximate location based on your IP address. Session replay is off. We don’t record what you type.
• Error reports, through Sentry: the page you were on, your browser and device type, and what went wrong
• Whether you open or click our emails, through Loops
• Device and browsing data Stripe collects during checkout to detect fraud
• Connection data Cloudflare and Amazon Web Services process to deliver and protect the site, including IP address and request headers

We don’t collect government ID numbers, precise GPS location, or information about children.

How we use it

• To process orders, run subscriptions, and ship coffee
• To charge the card on file for a subscription, and to retry a failed charge
• To send order and subscription messages: confirmations, receipts, reminders before charges, shipping updates, magic links, and notice of price or policy changes
• To send marketing emails or texts, only if you’ve opted in. Consent to texts is not a condition of buying coffee.
• To answer your questions
• To see how the site gets used and improve it
• To prevent fraud and meet legal, tax, and accounting obligations

Stripe may decline a payment using automated fraud checks. If that happens, try another card or email us. We don’t use your information to make other automated decisions about you.

Who we share it with

We share personal information only with service providers that help us run the business, and only what each one needs:

• Stripe, for payments, subscriptions, and fraud prevention
• Loops, for email
• Twilio, for text-message delivery
• Amplitude, for site analytics
• Sentry, for finding and fixing errors on the site
• Shipping carriers, who get your name and address to deliver your order
• Amazon Web Services, which hosts the site and stores order data
• Cloudflare, which delivers the site and filters malicious traffic

We may also disclose information when the law requires it, to protect our rights or someone’s safety, or as part of transferring the business (for example, to a company we form to run Stealth Coffee Lab). A transfer does not include text-message opt-in data and consent, except to a provider sending those texts on our behalf.

We don’t sell your personal information. We don’t share it for targeted advertising or cross-context behavioral advertising. We don’t use advertising cookies or pixels.

Text messages

Message frequency varies. Message and data rates may apply. Reply STOP to opt out and HELP for help. Program details are in our Terms of Service.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Cookies and similar technology

We use cookies and similar browser storage to make the site work, for analytics through Amplitude, and for fraud prevention at checkout through Stripe. Cloudflare may set a cookie to tell real visitors from automated traffic. We don’t use advertising cookies. You can block or clear cookies in your browser, though checkout and other parts of the site may stop working.

Some browsers send “Do Not Track” signals. There’s no agreed standard for responding to them, so the site doesn’t change its behavior when it receives one. We don’t track you across other websites.

How long we keep it

• Order, payment, and tax records: 7 years
• Subscription information: while your subscription is active, and for 2 years after it ends
• Support emails: 2 years
• Marketing lists: until you unsubscribe. After that we keep the email or phone number on a suppression list so we don’t message you again.
• Analytics data in Amplitude: 12 months

Your choices and rights

• Unsubscribe from marketing emails with the link at the bottom of any of them. We’ll still send order and subscription messages.
• Reply STOP to any text.
• Sign in with the magic link we email you to cancel, pause, or delay a subscription.
• Email privacy@stealthcoffeelab.com to get a copy of your personal information, correct it, or delete it. We’ll respond within 45 days and may need to confirm your identity first. We honor these requests from customers in every state. We may have to keep some records after a deletion request, including tax records and the address or number on a suppression list.

We won’t treat you differently for making any of these requests.

These rights are our practice. Most state privacy statutes don’t apply to a business of this size, and this policy is not a notice under those statutes.

Security

We use reasonable safeguards, including encrypted connections, and we route card payments through Stripe so we never hold card numbers. Access to order data is limited. No system is perfectly secure. If a breach affects your information, we’ll notify you as the law requires.

Children

The site isn’t meant for children under 13, and we don’t knowingly collect their information. If you think a child has given us information, email us and we’ll delete it.

Changes to this policy

When we update this policy, we’ll post the new version here with a new effective date. If a change materially affects how we use your information (a new category of use, or a new use of data we already have for marketing), we’ll email you before it takes effect. Swapping a service provider for the same job is an update here, not an email.

Contact

William Huba, doing business as Stealth Coffee Lab
26 Eisenhower Circle, Wellesley, MA 02482
privacy@stealthcoffeelab.com