Privacy policy

This page explains what personal data Work&Sip collects, why we collect it, who else handles it and what you can do about it. We have kept it as short and plain as we can. If anything is unclear, email us.

Who is responsible

Work&Sip is run from Stockholm, Sweden. We are the data controller for the personal data described on this page. You can reach us at hello@workandsip.com.

What we collect and why

Reading the site

You can read all of Work&Sip without an account. When you do, our server sees your IP address, like any website does, and uses it for a few minutes to limit how many requests one address can make. It is not stored.

We also count, for each cafe, how often its card is seen, its page is opened and its directions or website are tapped, without cookies and without knowing who you are.

Counting visits

We count visits with PostHog, an analytics service, in the EU. It sees which pages are opened and a few things done on them, such as a vote cast or a filter used, but never your name, your email address, the words you search for or where you are, signed in or not. The first time you come, a small box at the bottom of the screen asks whether PostHog may set a cookie.

If you accept, PostHog keeps a random id in a cookie and in your browser's storage for a year, so when you come back you count as the same visitor, once a month, rather than as someone new each day. It also notes the country and city your IP address points to, then throws the address away.

If you decline, or don't answer, nothing is kept in your browser but your answer, once you give one. PostHog counts your visit by mixing your IP address and browser with a random value it deletes every day, so you count once for each day you come and can't be followed from one day to the next. It keeps neither the address nor where it points.

Joining the waitlist

We store your email address, the city or cities you ask for and, if you give them, your name and a username you would like to hold. We use this to email you when your city opens and to see which cities people want. We also keep a scrambled (hashed) version of your IP address next to the signup to catch spam. It cannot be turned back into your address.

Signing in

Work&Sip has no passwords. You sign in with a link we email you, or with your Google account. Either way we store your email address and the username you choose. If you sign in with Google, we also receive the name and profile picture on your Google account, and nothing else. We never see your Google password. A signed-in session lasts 30 days and is kept by a cookie. We record the IP address and browser a session was started from, as a security measure.

Voting, writing and reporting

We store your votes (a yes or no on each of the eight questions, per cafe), the laptop rules you tap under the laptops question, the notes you write, the photos you add, the cafes you save and anything you report as wrong. Votes are added into the cafe's totals. Notes are shown on the cafe page under your username. Photos are shown on the cafe page, and on its card, once we have looked at them. Your profile page is public and shows your username, your picture, when you joined, how many votes and notes you have made, and your notes. It never shows your email address, and your saved cafes are seen by you alone. If you report a listing without an account, we keep a hashed version of your IP address with the report so that one person cannot flood us. If you tell us without an account that a cafe has closed or changed its hours, or that you run it, you can leave your email address so we can write back. It is optional, only the people who run the site see it, and it is deleted when we close the report.

When something breaks

An error report goes to Sentry so we can fix it. We strip IP addresses and email addresses from those reports before they leave our server.

What we don't do

We do not sell personal data, we do not show ads, we do not use advertising cookies or anything that follows you to other sites, and we do not build profiles of you. Most of the cookies we set are for signing in: one keeps you signed in, one lasts a few minutes during a Google sign-in to check it started in your browser, one remembers a vote or a save you made just before signing in so it can be counted or made, and one lasts a minute afterwards so our analytics can count sign-ins without knowing who you are. Two are for counting visits: one remembers your answer to the cookie question for a year, and PostHog's, only if you accept it, keeps its random id for a year. The admin pages, which only we use, keep one more for light or dark mode.

Our legal basis

The GDPR requires a legal basis for each use of personal data. For the waitlist, your account, your votes and your notes it is the performance of a contract with you (Article 6(1)(b)): it is what you asked for. For rate limiting, spam defence, error reports and counting visits without a cookie it is our legitimate interest in keeping the site running and safe, and in knowing how many people use it (Article 6(1)(f)), and for an email address left with a report it is our legitimate interest in keeping the listings right and answering you about it (Article 6(1)(f)). PostHog's cookie is the one thing we ask your consent for (Article 6(1)(a)), which is why the site asks. You can change your answer at any time under Counting visits, above.

Who else handles it

A few companies process data on our behalf, on our instructions and under contract. None of them may use it for their own purposes.

• Railway hosts the site and the database, in the EU.
• Cloudflare stores the photos you add and serves them to the site.
• Resend sends our email, so it sees your email address and the messages we send you.
• Google handles sign-in if you choose to sign in with Google. Your Google account is covered by Google's own privacy policy.
• PostHog, in the EU, counts visits as described above.
• Sentry, in the United States, receives error reports with IP and email addresses removed. The transfer is covered by the EU's standard contractual clauses.

We do not share personal data with anyone else unless the law requires it.

Content from Google on cafe pages

Cafe pages show opening hours, ratings, photos and a few sentences from public Google reviews, with the reviewer's name, picture and a link to the review. This is Google's content, shown under Google's terms. We never store Google's photos. Your browser loads them from Google each time you open a cafe page, so Google sees that request. We hold the rest for at most 30 days before refreshing it from Google, and remove it when Google does. If you wrote a review and don't want it quoted here, edit or remove it on Google and it disappears from Work&Sip within 30 days.

Buy me a coffee

The Buy me a coffee buttons open Buy Me a Coffee's payment page inside ours. Nothing from them loads until you tap one. After that, they and Stripe handle what you give them under their own privacy policies.

How long we keep it

• Waitlist signups: until we have opened your city and emailed you, or until you ask us to remove you.
• Your account: until you delete it, which you can do from your profile page. That removes your email address, name, picture and sign-in details, and deletes the photos you added, files included, and the cafes you saved. Your username is held for 30 days so nobody can take it straight away, then released. Your votes, laptop rules and notes stay, shown as from a former member, so the cafe's totals keep what you reported. Delete any notes you want gone before you delete the account.
• Sessions: 30 days. Sign-in links expire shortly after we send them.
• Hashed IP addresses on waitlist signups and reports: as long as the signup or report exists.
• An email address left with a report: until we close the report, then deleted.
• Error reports: up to 90 days at Sentry.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, restrict or object to how we use it, or ask for it in a form you can take elsewhere. Email us and we will answer within a month. You can also complain to the Swedish Authority for Privacy Protection (IMY) or to the data protection authority where you live.

Children

Work&Sip is not meant for children under 16, and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will say so on the site. The date at the top says when this version went live.

Contact

Write to hello@workandsip.com for anything on this page.