Privacy Policy

Last updated: 27 September 2026

RoastSource is built with a simple privacy philosophy: your data belongs to you, stays on your device, and we don't want it.

What data RoastSource collects

Almost nothing. The RoastSource web application runs entirely in your browser. All of your coffee inventory, roast profiles, ratings, blend recipes, and settings are stored in your browser's local storage (localStorage). This data does not leave your device unless you export it or turn on one of the optional sync features below. The app contains no analytics or telemetry.

Website analytics

The roastsource.com website uses no analytics scripts. The site is hosted on Cloudflare, which may keep standard server logs (such as IP address and user agent) as part of delivering the pages.

Cookies

RoastSource does not set cookies. We don't use advertising or tracking cookies. When you open the LemonSqueezy checkout to buy a license, that checkout runs under LemonSqueezy's own policies.

License validation

If you purchase a license, your license key is checked with our payment processor (LemonSqueezy) when you activate it, and the app re-checks it about every 7 days after that. Each check sends your license key and a random identifier the app creates for your browser. No roasting data is sent. LemonSqueezy processes your payment information under their own privacy policy as Merchant of Record.

Data you share voluntarily

Sync is optional and off unless you turn it on. GitHub Gist sync sends your data to your own GitHub account, under GitHub's privacy policy. Local Folder sync writes your data to a folder you choose on your device; if that folder is synced by a service such as Dropbox, Google Drive or iCloud, that service's policy applies. Exported backup files are yours to keep wherever you like. RoastSource provides these as convenience features — they are never required.

Temperature probes

If you connect a WiFi temperature probe, the app talks to it directly over your local network. Probe readings are not sent to us or to any outside service.

Third-party services

The RoastSource web app loads a few files from outside services: the LemonSqueezy checkout script (lemon.js, from assets.lemonsqueezy.com) each time the app starts; the Chart.js charting library from cdn.jsdelivr.net; and, only when you import a vendor receipt as a PDF or photo, the pdf.js reader (from cdnjs.cloudflare.com) or the Tesseract.js text reader (from cdn.jsdelivr.net). These providers may log standard web request information (IP address, user agent). We have no control over their logging practices.

Children's privacy

RoastSource is not directed at children under 13. We do not knowingly collect information from children.

Data retention

Since your application data lives in your browser's localStorage, you control its retention. Clear your browser data and it's gone. Export it and it's yours forever. We keep no server-side copies of your roasting data because we never receive it in the first place.

Changes to this policy

If we change this privacy policy, we'll update the date at the top and note what changed. For significant changes, we'll add a notice in the app.

Contact

Questions about privacy? Email us at privacy@roastsource.com.