COWBOY COFFEE CO. YELLOW LOGO - BROWN TRADEMARK - STACKED ROPE

Effective April 14, 2026

PRIVACY POLICY

Cowboy Coffee Co. (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you visit cowboycoffee.com or buy from our stores, how we use it, who we share it with, and the choices you have. By using our website or services, you agree to the practices described here.

1. Who we are

Cowboy Coffee Co. is a Wyoming company headquartered in Jackson Hole, Wyoming. You can reach us at office@cowboycoffee.com or (307) 733-6238.

2. Information we collect

We collect the following categories of information:

  • Account information. When you create an account, we collect your name, email address, and a password hash. If you provide a phone number or shipping address, we store those as well.
  • Order information. When you place an order, we collect your billing and shipping address, the items you purchased, and the order total. We do not store your full credit card number — payment details are handled directly by our payment processor (see section 4).
  • Communications. If you email us, fill out a form, or sign up for our newsletter, we keep a record of that correspondence and any information you share with us.
  • Automatic information. We use a privacy-first analytics tool (Plausible) that counts pageviews and aggregate traffic statistics without cookies, localStorage, or fingerprinting. No persistent identifier is ever created for you. See section 5 for details.
  • In-store information. If you sign up for our email list at one of our cafes, we collect your name and email address.

3. How we use your information

We use personal information to:

  • Process and fulfill your orders, including shipping and customer support.
  • Manage your account and Coffee Club subscription, if applicable.
  • Send transactional emails (order confirmations, shipping notifications, password resets).
  • Send marketing emails about new products, promotions, or events — only if you opted in. You can unsubscribe at any time via the link in any marketing email.
  • Detect, investigate, and prevent fraud or abuse.
  • Improve our website, products, and services.
  • Comply with legal obligations.

4. Who we share information with

We do not sell your personal information. We share information only with service providers who help us operate the business, and only to the extent necessary:

  • Payment processing. Card payments are processed by Authorize.Net. Your card number is transmitted directly to Authorize.Net; we receive only a tokenized reference and the last four digits.
  • Shipping carriers. We share your shipping address and contact information with the carrier fulfilling your order (e.g., USPS, UPS, FedEx).
  • Email delivery. Transactional and marketing emails are sent through Resend.
  • Hosting and error monitoring. Our site runs on managed infrastructure providers who handle uptime and security patching, and an error-monitoring service receives anonymized stack traces when something breaks.
  • Analytics. We use Plausible Analytics to measure aggregate traffic — which pages are visited, where visitors are coming from, and whether the site is performing well. Plausible is a privacy-first tool that does not use cookies, does not track individuals across sessions, and does not sell data. See section 5.
  • Legal compliance. We may disclose information if required by law, court order, or to protect the rights, property, or safety of Cowboy Coffee Co., our customers, or others.

5. Cookies, tracking, and analytics

We do not use tracking cookies and we do not track you across sessions. We believe this is the right default for a small business and we designed the site around it.

For aggregate traffic statistics we use Plausible Analytics, a privacy-first analytics tool that does not set cookies, does not use localStorage for tracking, and does not fingerprint visitors. Plausible counts unique visitors using a rotating daily hash of your IP address and browser, which is discarded at the end of each day — it cannot be used to identify you or tie together your visits across days. Plausible does not sell data to third parties and does not integrate with any ad network.

We do store a small amount of information in your browser's local storage for features that require it:

  • Your shopping cart contents (so the cart persists if you close the tab and come back later).
  • A login token (if you sign in to an account).
  • Whether you've dismissed the welcome offer (so we don't show the same popup repeatedly).
  • A one-time access grant for the order confirmation page after you check out.

These are strictly functional and are required for the relevant features to work. We do not use them to track, profile, or advertise to you. Because none of this storage is used for tracking, we do not display a cookie-consent banner.

6. Data retention

We keep account information for as long as your account is active. Order records are retained for as long as needed for tax, accounting, and legal purposes — typically seven years. You can request deletion of your account and associated data at any time by emailing us, subject to legal retention requirements.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export the personal information we hold about you, and to object to or restrict certain processing. California residents have specific rights under the CCPA, including the right to know what personal information we collect and the right to request deletion. EU and UK residents have rights under the GDPR and UK GDPR.

To exercise any of these rights, email office@cowboycoffee.com. We will respond within the timeframes required by applicable law.

8. Marketing communications

We only send marketing emails to customers who have opted in. Every marketing email contains an unsubscribe link. Unsubscribing stops marketing emails but does not stop transactional emails related to your orders or account.

9. Children's privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Security

We take reasonable steps to protect your information, including encrypting payment and password data in transit, hashing passwords at rest, and limiting access to employee accounts that need it. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Effective” date at the top of the page. For material changes, we will provide additional notice (for example, by email or a notice on the site).

12. Contact us

Questions about this policy? Email office@cowboycoffee.com or write to us at Cowboy Coffee Co., Jackson, WY.