151 Coffee
Privacy Policy
What we collect, what we do not, and who else is involved. The short version is at the top.
Last updated: October 2026
151 Coffee operates this website. This policy explains what the site collects, why, and who else is involved. It covers this website. It does not cover what happens when you visit one of our stores.
The short version
We do not sell your information. If you fill in a form, it is emailed to us and not stored on the website. We measure how our own site is used, for everyone, and that sets a cookie. Advertising is a separate thing and a separate choice: nothing advertising-related loads unless you accept it on the banner, and if your browser sends a Global Privacy Control signal we take that as a no without asking you again.
Information you give us
Two forms on this site collect information, and both are optional.
The contact form asks for your first name, last name, email address, phone number (optional) and a message. The investor inquiry form asks for your name, email address and phone number (optional).
When you submit either one, the contents are emailed to us. They are not saved in the website’s database. The record of your inquiry is the email in our inbox, and it lasts as long as that email does.
We use what you send to reply to you and, where you have asked for it, to send you updates. We do not add you to a marketing list because you used the contact form.
Information collected automatically
Our web host records standard server logs for every visit: your IP address, the page requested, the time, your browser and operating system, and the page you came from. This is ordinary server operation and happens before any consent choice, because without it the site cannot be served or defended against attack. Our host is Automattic, through WordPress.com.
Spam prevention. When you submit a form we store a one-way hash of your IP address, combined with the form name, for fifteen minutes. This is how we stop a single source from flooding the form. It is a hash rather than the address itself, it cannot be read back into an IP address, and it is deleted automatically.
Error monitoring. We use Sentry to be told when the site breaks. It records the error, the page it happened on, and your browser version. It is configured not to collect personally identifying information, not to record your session, and not to measure page performance. It runs whether or not you accept analytics, because a site that silently breaks for some visitors and never tells anyone is the worse outcome.
Host platform telemetry. Our host loads a small script of its own, called bilmur, which measures how fast their platform is serving pages. This is Automattic measuring their own hosting rather than us measuring you. We cannot switch it off or make it wait for your consent, and we would rather say so than leave it unmentioned.
Local storage
The website stores two small pieces of information in your browser. These are not cookies, are never sent to us, and never leave your device.
| What | Why |
|---|---|
| Your cookie choice | So you are not asked again on every page |
| Your selected store | So the menu shows that store’s drinks next time |
You can clear both at any time by clearing site data for this site in your browser. Site analytics sets cookies as well, which the next section covers.
Site analytics
We measure how this website is used: how many people visit, which pages they read, which store they pick. This runs for every visitor and does not wait for the banner, because it is us counting our own site rather than anyone advertising to you.
It uses Google Analytics 4, which sets cookies in your browser so that a second page view is recognised as the same visit rather than a new stranger. We configure it as measurement and nothing else: your IP address is truncated, Google Signals is turned off, ads personalization is turned off, and every advertising permission is denied before the tag is allowed to load. What Google collects here cannot be used to build an advertising profile of you or to target you somewhere else.
We record five things as events: a form being successfully sent, a directions link being opened, a phone number being tapped, a store being chosen on the menu, and the careers job board being opened. We record that these happened and which store was involved. We do not record what you typed.
We also measure how quickly pages actually load and respond for you: how long the main content takes to appear, how quickly the page reacts when you tap something, and how much the layout moves while it is loading. These are timings about the page, not facts about you, and they are what tell us a page is slow for real visitors rather than fast on our own machines.
Advertising, only if you accept
We process personal data for targeted advertising. When you first visit, a banner asks you to choose. Nothing in this section loads unless you choose Accept. If you choose Decline, ignore the banner entirely, or send a Global Privacy Control signal, none of it runs.
| Service | Provider | What it is for |
|---|---|---|
| Meta Pixel | Meta | Measuring our Facebook and Instagram advertising, and showing our ads to people like you |
| Google advertising signals | Letting the analytics above share with Google’s advertising products | |
| Jetpack Stats | Automattic | A simpler visitor count in our dashboard |
These services set their own cookies and may build a profile of you across other websites. Meta in particular uses what it collects for advertising, including advertising you see elsewhere. If that is not what you want, choose Decline.
How to opt out. Choose Decline on the banner. If you have already accepted and want to take it back, use the Cookie Preferences link at the bottom of any page, or clear this site’s data in your browser, which removes your choice and brings the banner back. You can change your mind as often as you like.
Global Privacy Control
Some browsers and extensions send a Global Privacy Control signal with every request. It is a standing instruction not to use your data for targeted advertising and not to sell it, given once in your browser settings instead of on every website you visit.
We honor it. If your browser sends the signal, we do not show you the cookie banner at all, nothing in the advertising section above loads, and that holds even if you accepted on this device at some point in the past. Site analytics still runs, because the signal is about advertising and sale rather than about a business counting visits to its own site.
Maps
The store locator and the maps on store pages are drawn using map tiles from CARTO. If you open a map, CARTO receives your IP address as part of loading those tiles. If you search by zipcode, that zipcode is sent to Nominatim, a service of the OpenStreetMap Foundation, to turn it into a location. We send the zipcode and nothing else, and we send nothing at all if you do not search.
Maps load only when you scroll to them, so a visitor who never reaches one never contacts either service.
Our rewards program
Our rewards program collects information when you order in our stores. It does not collect anything through this website, and nothing you do here is connected to a rewards account.
Job applications
Our careers page sends you to a third-party job board to apply. Your application, and everything in it, goes to that provider rather than through this website. What happens to it is governed by their privacy policy, which is worth reading before you apply. We receive applications from them; we do not collect them here.
What we do not do
- We do not sell, rent or trade your personal information.
- We do not load web fonts from a third party. Every font is served from our own site, so no font provider learns that you visited.
- We do not run session recording or heatmap software. Nobody is watching a replay of your mouse.
- We do not use the website to make automated decisions about you.
Links to other sites
Our careers page sends you to a job board, and our store pages link to Google Maps. Once you follow one of those links you are on someone else’s site under someone else’s policy. We are not responsible for what they do, and theirs is worth reading.
Children
This site is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has sent us something through this site, contact us and we will delete it.
What we process, and who receives it
The categories of personal data this website processes are: identifiers you type into a form, meaning your name, email address and phone number; the contents of a message you send us; internet and device activity, meaning the pages you view, the links you tap, the store you select and the page timings described above; and the technical data your browser sends with every request, meaning your IP address, your browser and operating system, and the page you came from. We do not process sensitive data, biometric data or precise geolocation through this website.
The categories of third parties that receive any of it are: our web host and platform provider, our analytics providers, our error monitoring provider, our advertising partners (only if you accept), our map tile and address lookup providers (only if you open a map or search a zipcode), and the job board we send applicants to. Every one of them is named by service elsewhere in this policy rather than left behind a category.
Your choices and rights
Wherever you live, you can:
- Decline advertising, using the banner or the Cookie Preferences link in the footer.
- Send a Global Privacy Control signal from your browser, which we honor automatically.
- Ask us what we hold about you from a form you sent, and ask us to delete it. In practice this means finding and deleting the email.
- Use the site without giving us anything, since every form is optional.
If you are a Texas resident, the Texas Data Privacy and Security Act also gives you the right to confirm whether we are processing your personal data and to access it, to correct inaccuracies in it, to have it deleted, to obtain a portable copy of it, and to opt out of targeted advertising, of the sale of personal data, and of profiling that produces legal or similarly significant effects. We do not sell personal data, and we do not profile you in that way.
How to make a request. Email Contact@151Coffee.com, or call the number at the bottom of this page, and tell us what you want. We will answer within 45 days. If we genuinely need longer we may take one further 45 days, and we will tell you why before the first 45 are up. Your first request in any twelve month period is free, and we will not treat you differently for asking.
If we say no. We will tell you why, and you can appeal by replying to that answer or by emailing Contact@151Coffee.com with “Appeal” in the subject line. We will give you a written answer within 60 days. If we deny the appeal, you can complain to the Texas Attorney General at texasattorneygeneral.gov, and our answer will include that link.
Security
We serve the entire site over HTTPS, we apply a content security policy restricting what can run on the page, and we rate-limit our forms. No website can promise perfect security and we are not going to.
Changes
If we change this policy we will update the date at the top. If we start using a new analytics or advertising service, we will name it here before it goes live, not after.
Contact
Questions about this policy, or a request about your information: