Privacy policy
Last updated: July 9, 2026
Fellow Aiden Profiler is run by a private individual based in Denmark (in GDPR terms, the data controller). The easiest way to reach me about anything on this page is the contact page. The site collects what it needs to work and nothing more: there is no advertising, no tracking across other sites, and your data is never sold.
What is stored, and why
Your account
Sign-in is handled by Auth0 (with Google or an email and password; passwords for email sign-in live with Auth0, not here). The site stores the identifier Auth0 assigns you, your email address, and your display name, so your profiles, brews, and subscription can belong to you.
Your Fellow connection
If you connect your brewer, the site stores your Fellow email and password. The password is encrypted at rest and is used for exactly one thing: talking to Fellow's service on your behalf when you send or update a profile. It is never logged, never shown in the browser, and never used for anything else. You can delete the connection at any time on the My Fellow Aiden page, which removes the stored credentials.
Your brewing data
The coffees you add, your bags and their roast dates, your personal recipes and dial-in history, taste check-ins, votes, comments, and your registered grinder. This is the product; without it there is nothing to show you. Personal recipes are private to you. What you contribute to the catalog is public but shown without your name.
Bag reads
When you photograph a bag, paste its text, or paste a link, that content is sent to Anthropic's Claude API to extract what the label says. Anthropic processes it to provide the service and does not use API content to train its models. A photo you attach to a new catalog coffee is stored and shown publicly with that coffee; bag photos are not stored otherwise.
Billing
Premium payments run through Stripe. Your card details go directly to Stripe and never touch this site. The site stores your Stripe customer id, your subscription status, and when your one free trial started.
Contact messages
A message through the contact form stores the message, its category, the optional reply email, the page it was sent from, and your browser's user-agent string, and is emailed to me via Azure Communication Services so I actually see it.
Server logs
Like every website, the servers keep short-lived technical logs (including IP addresses) for security, debugging, and the rate limits that protect the AI features. They are not used to profile you.
Cookies and browser storage
The site sets a sign-in cookie when you log in (it keeps you signed in for 14 days of activity) and the standard security cookies a login flow needs. That is it: no advertising or cross-site tracking cookies, which is why there is no cookie banner. Preferences like your temperature unit and brew method live in your own browser's local storage and are not sent anywhere. If the site ever adds visitor counting it will be Cloudflare Web Analytics, which is cookieless and stores no personal data.
Where it lives, and who else touches it
The site and its database run on Microsoft Azure in the EU (Sweden). A few services process data on my behalf, each for one job: Auth0 (sign-in), Stripe (payments), Anthropic (reading bag labels), and Microsoft Azure (hosting and the contact-form email). Some of these are US companies; transfers are covered by the EU's standard safeguards, including the EU-US Data Privacy Framework and standard contractual clauses.
How long it is kept
Your data is kept while your account exists. Contact messages are kept until handled and then eventually cleared out. Server logs are short-lived. If you ask me to delete your account, personal data goes with it; catalog contributions are already nameless, and I will remove those too if you ask.
Your rights
Under the GDPR you can ask for a copy of your data, have it corrected or deleted, or object to how it is handled. Write me via the contact page and I will sort it out. If you are not satisfied, you can complain to the Danish Data Protection Agency (Datatilsynet) or your own country's authority.
Changes
If this policy changes in a way that matters, the date at the top changes and significant changes get a note on the site.