Your data, kept small.

Last updated: 27 October 2026

BeanSpot is a map of cafés that serve coffee from independent roasteries. There are no accounts, no analytics, no ads and no tracking. This policy explains the little data the BeanSpot app and the beanspot.gr website do handle, and why.

Who is responsible

BeanSpot is an independent project run by the BeanSpot team in Greece, which is the data controller under the GDPR. Contact: hello@beanspot.gr.

The short version

• You don’t sign up, and we don’t know who you are.
• Your precise location stays on your device.
• To show cafés, the app asks our server for the area of the map you are looking at. That reveals roughly which area you are browsing, not where you are.
• If you write to us, we use your name, email and message only to reply.
• We never sell data or use it for advertising.

Location

If you allow it, the app (or the website, when you tap the location button) reads your device’s location to centre the map on you and to find the cafés nearest to you. Your precise GPS position is used on your device and is not sent to us.

You can refuse or withdraw location access at any time in your device or browser settings. BeanSpot still works; you just move the map yourself.

What our server receives

To show cafés, the app and website request from our API:

• Map areas: the edges of the visible map plus a margin around it, rounded outward to 0.01° (about 1 km).
• Nearest searches: a starting point rounded to 0.01°, taken from your location or the centre of the map, and the roastery you picked, if any.

Like any website, every request also carries your IP address and basic technical details (such as the time, the address requested and your browser or app version). We don’t store these requests in our database or link them to you. Our hosting providers keep short-term technical logs to run and protect the service (see below).

Contact messages

The contact forms in the app and on this website send your name, email address and message to us through EmailJS, an email delivery service. If you email us directly, we receive the same kind of information. We use it only to answer you and keep it only as long as the conversation needs it, after which we delete it. Please don’t include sensitive information.

Stored on your device

The app and website save a few things locally so they work smoothly and offline: your language, your map theme (light or dark), recently viewed café areas, and roastery logos. This data stays on your device; we can’t see it. Deleting the app, or clearing this site’s data in your browser, removes it. We don’t use cookies.

Services we rely on

These providers process limited technical data (mainly your IP address) when BeanSpot uses them, under their own privacy policies:

• Render hosts our API and database in Frankfurt, Germany.
• Cloudflare serves this website, roastery logos and our domain, and protects our admin area.
• CARTO provides the map tiles, built from OpenStreetMap data. Your device loads the tiles for the area you are viewing directly from CARTO.
• EmailJS delivers contact-form messages to us.
• Google Fonts supplies the website’s fonts.
• Google Maps: tapping “Directions” opens Google Maps, which then handles your data under Google’s policy.

Some of these providers may process data outside the European Economic Area. When they do, they rely on safeguards recognised by the GDPR, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Why we may use this data

• Showing the map, keeping the service working and secure: our legitimate interest in running BeanSpot (GDPR Art. 6(1)(f)).
• Device location: your permission, which you control in your device settings.
• Replying to messages: taking the steps you ask for, and our legitimate interest in answering you (Art. 6(1)(b) and (f)).

Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its use, and to receive it in a portable format. Write to hello@beanspot.gr. Because we have no accounts, the only personal data we usually hold is a message you sent us. You can also complain to the Hellenic Data Protection Authority (dpa.gr).

Children

BeanSpot is not aimed at children under 15 and we don’t knowingly collect their data.

Changes

If this policy changes, we’ll update it here and change the date at the top.