Privacy / Updated 21 October 2026
Privacy, without mystery.
This notice explains what information is collected when you browse the site, join the release list or request coffee, why it is needed and how it is handled.
Information collected
The release list collects your email address and the date and source of your consent. An order request collects your name, email, delivery address, city, postal code, country, selected coffees and quantities. Short-lived pseudonymous rate-limit keys are used to prevent automated abuse; raw IP addresses are not intentionally stored in the application database. Payment-card details are not collected by this site.
For local price display, the hosting network supplies a country code from your connection. We keep only the country associated with registration or your first verified visit, linked to your account, and use it as a currency default. This does not identify your precise location or store your raw IP address. You can choose another display currency or save a currency preference in your account. Agreed proposals and orders keep their original currency.
A Treasure quote request collects your name, email, country, selected coffee bags, any message you choose to include and your consent. A snapshot of the selected bags and the request’s handling and notification status are saved in Daniel’s private workspace. No delivery address or payment information is required to request a quote.
Treasure accounts
Treasure and its community require a verified account. Supabase manages your sign-in identity, name, email address, verification status and account sessions. Email-and-password access includes confirmation and password recovery. Google or Facebook sign-in shares the basic profile information you approve; it does not request access to your contacts, messages or advertising accounts. An account does not subscribe you to marketing.
Authentication emails are delivered through the configured mail service. Where Gmail is used, Google processes the recipient address and the confirmation or recovery message. Account information remains until the account is deleted; you can request deletion using the contact details below. Quote-request records follow the separate retention period described in this notice.
How it is used
Release-list information is used only to send relevant coffee-release notes. Order-request information is used to confirm availability, delivery, pricing and the next step toward fulfilment. It is not sold or used for unrelated advertising.
Treasure requests are used to reply personally with availability and a price quote. When notifications are connected, Daniel receives a Telegram alert containing the request reference, the number of selected bags and a link to his private inbox. Your contact details, message and selected coffees stay in the website’s private workspace. A request does not make a payment, reserve stock or subscribe you to marketing.
Your coffee account and community
Your wishlist, search and taste preferences, requests, accepted proposals and orders are connected to your verified account. Historical anonymous requests are not linked merely because their email address matches yours. Accepting a proposal creates an unpaid order awaiting Daniel’s confirmation; payment is arranged directly.
Community membership includes a profile in the member directory and the ability to exchange private member messages. Your display name, handle and bio are visible to signed-in members. Forum posts show your chosen display name and handle; your email and sign-in identity are not public. Content you post in the forum can be read by signed-in members. You can edit your own posts, block a member and report content.
Direct messages are available only to conversation participants. Daniel can access messages addressed to him. A report shares the reported message and its author’s community profile with Daniel for moderation, without opening the rest of a member conversation. Alerts sent to Daniel’s Telegram contain a reference and a private-workspace link, not the message body or your contact details.
Drafts of private messages, forum replies and coffee impressions marked as saved are stored in your verified account and can be restored after a refresh or reopening the browser. Only you can open or edit your unpublished drafts through the application. They are not sent to recipients, published in the community or included in the moderation workspace, and remain until you send, publish or clear them, or request account deletion.
Profile and preference records, saved coffees, community discussions and conversations remain while needed to provide your account and community history. Contact Daniel to request access, correction or account deletion. Accepted-order records and the related proposal may be retained longer for fulfilment and applicable recordkeeping requirements.
Storage and retention
Information is stored in the website's protected database and is accessible only for operating Gold & Extraction. Release-list requests remain pending until an email-confirmation service is connected; once confirmation is available, unconfirmed requests will be removed after 30 days. Confirmed records remain until you unsubscribe or request deletion. Order requests that do not become completed orders are removed after 180 days. Completed-order records may be retained longer where accounting or other applicable law requires it.
Treasure quote requests that are not linked to an accepted order are retained for up to 180 days. Older requests are removed in bounded batches when the request service or private inbox is next used. Accepted orders retain the proposal version and their confirmation, payment and fulfilment status; payment is arranged directly with Daniel.
Local cart and cookies
The cart and Treasure selection are stored locally in your browser so they can survive a refresh. Contact details typed into the Treasure form are not saved in local storage. When you sign in, strictly necessary, secure authentication cookies keep your account session; their browser lifetime is up to 30 days and can be renewed while you use your account. Passwords are not saved in local storage. The site is hosted through OpenAI Sites and delivered using Cloudflare infrastructure; these providers may process connection metadata and set strictly necessary security cookies for delivery and abuse prevention. Gold & Extraction does not use advertising cookies or cross-site tracking. Clearing site data in your browser removes the local selections and sign-in cookies.
Optional visit measurement
With your permission, this site uses a random first-party browser identifier to understand visits, pages, referring websites, short campaign tags and a small set of actions such as opening a coffee or clicking an Instagram link. Measurements may also include device and browser categories, country, visible active time, scroll depth and page-loading measurements. This helps Daniel improve the site. It does not record search terms, form content, personal account details, full referring URLs or raw IP addresses. No advertising profiles or cross-site tracking are created.
You can decline without losing access to any feature. Your choice is remembered in a first-party cookie for up to 90 days; an analytics identifier is created only if you allow measurement. Browser privacy signals are respected. Reports cover the latest 90 days of measurements in the protected site database. Older rows are excluded from reporting and removed by bounded housekeeping on subsequent service activity. Short-lived keyed abuse-control buckets expire within an hour and do not contain raw network addresses.
Only Daniel can access the audience reports. Visitor totals describe consenting browsers, not an exact count of people. Changing browsers, deleting cookies or blocking measurement can change the count. Turning measurement off here stops collection and erases measurement records linked to this browser’s current identifier.
Purchases through collaboration partners
Collaboration purchase links may take you to the partner's own website. Information you enter on their website is handled under their privacy policy and order terms. An enquiry sent to Gold & Extraction does not create a paid order with a collaboration partner.
Your choices
You may ask to access, correct or delete your information, or unsubscribe from release notes at any time. Email Daniel at danielmichaeli89@gmail.com, or contact him through the official Gold & Extraction Instagram account.