Skip to content
Coffee Env
Open

Privacy policy

Last updated 14 September 2026

Coffee Env is run by JP.Coffee. This page says what it keeps, what it can read, and what it cannot. The short version: it cannot read anything you put in it.

What you store is encrypted before it leaves your browser

Project names, environment labels, notes and every .env body are sealed with AES-256-GCM in your browser, under a key derived from a passphrase you choose. The passphrase, the recovery key and the key derived from them are never sent to this site. The database holds ciphertext only. Nobody operating Coffee Env can decrypt it, and there is no way to reset a forgotten passphrase.

What the server does learn

  • Your email address, name and profile picture, from Google, when you sign in.
  • How many projects and environments you have.
  • Roughly how large each environment is — one of seven size steps, from 4 KB up.
  • When each was created and last saved, and how many times.
  • Your IP address and browser, which any web server receives, recorded against your sign-in sessions.
  • Whether your account is active, who invited you, and any invites you have sent, including the address an invite was emailed to.

Who else is involved

  • Google signs you in. It learns that you signed in to Coffee Env. It never receives anything you store.
  • Neon hosts the database, and holds the ciphertext and the account details above.
  • Vercel hosts the site and sees requests as any host does.
  • Resend, if email is switched on, delivers invites and security notices. No email ever contains a project name, a label, or anything from an environment.

There are no analytics, no advertising, no tracking pixels and no third-party scripts on any page.

Cookies and local storage

One session cookie keeps you signed in. A short-lived cookie carries an invite code across the Google sign-in if you arrived with one. If you choose to remember this device, your browser stores the decryption key in IndexedDB in a form no script can read back out; locking the vault or signing out removes it. Your theme choice is kept in local storage.

Keeping and deleting

Your data is kept until you delete it. Settings → Delete account removes your account, your sign-in sessions, the encrypted key and every project, environment and saved version, immediately. Before deleting, you can export everything as a decrypted file, produced in your browser.

Database backups kept by the hosting provider may retain ciphertext for a short period after deletion. They are no more readable than the live copy.

Your rights

You can see, export and delete your data yourself at any time. For anything else, write to me@jp.coffee. Because the content is encrypted with a key only you hold, a request to disclose it can only ever be answered with ciphertext.