Privacy

Who is responsible

Seduh Score is run by Grey Matter Coffee Werks in Brunei. Questions or requests about your data: hello@seduhscore.com.

What we hold

Competitors and event entries (entered by the organiser, usually ahead of the event)

• Display name, cafe, and bib number for each event.
• Phone number (required), and optionally email, cafe, country and organiser notes, in the organiser’s own registry of people.
• Times, right and wrong answers and results recorded during the event.
• A log of changes made to scores, times and results since 24 September 2026 (who made the change, when, the old and new value, and any reason given).

Seduh ID record (a private record we keep that links the same person across organisers)

• A phone number in international format, the name it was published under, and, if the organiser entered one, a country.
• It is created only when you are named in a published, non-test result, or by us on request. Rehearsal (“test”) events never create one.
• When you are named on a podium published on a Seduh Score results page, we create a Seduh ID record for the phone number your organiser entered for you, or use the record that number already has.
• It is linked to the entry for you in each organiser’s own registry, so the same phone number is recognised as the same person. If an organiser changes the phone number on your entry, the link is removed and checked again.
• It holds no email address, no results, no scores and no sign-in. Its contents are shown on no page, public or private. An organiser’s own people list shows only whether a person is linked.
• An organiser can also record, for its own people, that someone is staff or affiliated with it.

Organisers and staff

• An email address and password for signing in, handled by our authentication provider (Supabase).
• Which organisation you belong to, and your user ID against changes you make.

Guess the Bean participants (public tool, no account needed)

• The name you give, your guess, and a phone number or Instagram handle you choose to give so an organiser can contact a winner.

What is published to the public archive

• A Community event’s podium, about 24 hours after it ends. The event’s format, name, city, venue and date, the number of competitors and rounds, the winning time, and the podium: each person’s place, name, cafe, and how many sets they got right out of how many. The name of the organisation that ran the event is shown with it. When two or more people share a podium place, all of them are shown.
• Not published: the full standings, phone numbers, emails, set-by-set marks, or the names and details of competitors who are not on the podium.
• A name-only entry (the event’s name, date, venue, city and the organiser, with no results) in two cases: on Per-event and Annual when the organiser has not chosen to list the results, and on Community when we cannot build a reliable podium (for example, the organiser’s device never sent the final results, or a score was changed after they were prepared). We would rather publish no podium than a wrong one. The organiser can publish the results themselves at any time.
• Never for a rehearsal. An event the organiser has marked as a test is not published.
• How we do it. Your organiser’s device prepares the podium when the champion is declared and sends it to us. A job in our database publishes it. The job only copies the fields listed above; it does not work out placings itself.
• When an event “ends”. When the champion is declared, when the organiser presses “Finish event”, or when we close a stuck event at the organiser’s request. The publication follows about 24 hours later (not earlier than 24 hours, and usually within a few minutes after; later if a publish has to be retried).

On your device

• The Timer, Brew Planner and Random Selector tools, Guess the Bean setup and offline scoring store small amounts of data in your browser (local storage and IndexedDB) so they keep working without a connection. For the Brew Planner that is your heats, coffees, machines and ticked-off items. For the Random Selector it is your entry list, its settings and your recent draws. This stays on your device: neither tool sends it to us. We use no advertising trackers. We do use Cloudflare Web Analytics, a privacy-focused service that measures how pages perform and how many people visit, without tracking individuals across sites. We also use Google Search Console and Bing Webmaster Tools to see how the site appears in search results. They report on searches, not on individual visitors.
• Random Selector share links put the list you shared in the link’s web address. Anyone you send the link to can read that list, and the address may be kept by the app you paste it into or in the logs of the services that deliver the page, such as Cloudflare. Leave out anything you would not want shared.

Who can see it

• Organisers and their team can see their own organisation’s registry and events. Another organisation’s members cannot.
• The public sees the name and date of each event, the live audience view (standings and competitor names) while an event is running, and the results of events published to the public results archive. Whether an event’s results are published depends on the plan the organiser is on. Community events are published automatically: about 24 hours after an event ends, its podium is published to the public archive. The organiser can publish sooner, and is told in the app that the time is coming. On Per-event and Annual, the organiser chooses whether the results are listed. An event whose results are not listed is still named in the archive (its name, date, venue and city, and the organiser), with no results. For a Cup Taster event the organiser chooses how much. By default that is the event name, city, venue and date, the number of competitors and rounds, the winning time, and the top three (name, cafe and how many they got right). On Community, only the podium is published. The organiser can instead publish the full standings: every competitor’s placing, name, cafe, how many they got right and their time in the last round they reached, and which round that was. Competitors who withdrew, or who have no scores, are left out. Every published event also has a printable results sheet, showing the podium or the full standings, whichever the organiser chose. Every published result also shows the name of the organisation that ran the event. Published results never include phone numbers, emails or set-by-set marks. The score-change record on the results page shows what changed after results were confirmed, never the scores involved.
• If you take part in an event run on the Community plan, your placing, name and cafe appear in the public archive about 24 hours after the event ends, if you are on the podium. Your phone number, email and set-by-set marks are never published. On the paid plans, the organiser decides whether results are listed. If you want your name removed or changed in a published result, see “Asking us to remove or correct your data” below.
• Can the organiser stop it? On Community, the organiser can take a published result down. We count how often that happens, and the result is not published again automatically. Publication is a condition of the Community plan (see the Terms). If you are a competitor and want something removed, you do not need to rely on the organiser: ask us, as below.
• The Seduh ID record is private. No organiser, competitor or member of the public can read it, and no page shows what is in it. An organiser sees only its own registry and its own entries; one organiser cannot see another organiser’s records, or what another organiser holds about you.
• Staff and affiliate lists are kept by an organiser about its own people (for example, that someone is staff). Only members of that organisation can see them. They are not shown to other organisers or to the public.
• Our operator view shows totals only: how many records exist and in what state. It does not show names, phone numbers or which organiser anyone belongs to. Direct access to the database stays with one person, as described below.
• Set-by-set marks and the full change log go only to the organiser, who may hand them over on request (the dispute pack). The pack contains names, cafes and bib numbers but not phone numbers or emails.
• Guess the Bean phone numbers and Instagram handles are visible only to the person who created that session. Before the reveal, the live display shows names but not guesses. The reveal shows names and guesses, never contact details.
• Grey Matter restricts direct access to the database to one person, the owner of Seduh Score. It is used to keep the service running and to act on your requests, not to read organisers’ data.

Where it is stored

Data is stored in Singapore, with Supabase (AWS ap-southeast-1), and is primarily processed there. If personal data is transferred outside Brunei, we will make sure it is protected to a standard comparable to that of the Personal Data Protection Order, 2025. The website is served through Cloudflare. We do not sell your data and do not use it for advertising.

How long we keep it

A result published to the public archive stays there until it is removed, by the organiser or by us at your request. There is no automatic deletion of published results, and we do not apply a fixed retention period to them.

Before a Community result is published, the organiser’s device sends us a prepared copy of the podium, which we hold until the result is published. We delete that copy when it is published, or 30 days after it was due to be published if it never was.

A Seduh ID record has no automatic deletion either. It stays until we delete it.

Asking us to remove or correct your data

Email us at hello@seduhscore.com. We will delete or correct what we hold about you. We aim to do this within 14 working days.

Things to know:

• Deleting deletes what we can find by name, phone or email. Tell us which events you took part in to make sure we get everything.
• Past results keep the name as it was entered for that event. Each event entry stores the name and cafe as they were on the day, so a result is not rewritten later. If you want a name removed or changed from a past published result, tell us and we will handle it with the organiser.
• Asking us to take your name off a published result, or to stop publishing yours. Email our Data Protection Officer, Grey Matter Coffee Werks (D29, Bangunan Lim Eng Ming, Kg Kiulap, Brunei Darussalam), at hello@seduhscore.com. We will acknowledge your request within 10 days. We will tell you what we can do and what the consequence is: for example, we can remove your name from the public archive entry, but we cannot change the organiser’s own record of the event. If you took part in a Community event, tell us which one.
• Asking us to stop using your Seduh ID record. Email us and we will acknowledge your request within 10 days and complete it within 30 days of receiving it. We will mark your record as opted out, remove the name from it and stop using it. We keep the phone number on that record so that we can recognise it and honour your request; without it, a later result with the same number would create the record again. It is used for nothing else. Organisers’ own registries are separate: ask the organiser, or us, to remove those as above.
• Guess the Bean sessions can be ended or reset by whoever created them, which permanently removes the guesses and contact details. If you took part and want yours removed, email us.

Changes to this page

We will update this page when what we hold changes, and put the date at the top.