Privacy Policy

Last updated: March 2026

Cafepedia ("we", "us", "our") operates the website cafepedia.id. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

Data We Collect

We collect minimal data to operate the service. Specifically:

  • Search queries — what you type into the search bar. We use this to improve search results and understand what users are looking for.
  • Usage data — pages visited, clicks, session duration, device type, and browser. Collected automatically through analytics.
  • Location (approximate) — if you use location-based features (e.g., "cafes near me"), your browser may share your approximate location. This is never stored permanently.

We do not require account creation or payment information to browse the site.

Additionally, if you choose to use optional features:

  • Newsletter email — if you subscribe to our newsletter, we store your email address to send you updates about Cafepedia. You can unsubscribe at any time.
  • Cafe reviews — if you leave a review, we collect your display name, your rating, the tags you select (e.g., work-friendly, WiFi speed, vibe), and any optional comment you write. Reviews are public and visible to all users on the cafe page.
  • Cafe suggestions — if you suggest a new cafe, we store the information you provide to review and potentially add it to our database.

How We Use Data

  • To provide and improve cafe search results
  • To power the AI recommendation engine (your query is sent to OpenAI to generate personalized cafe suggestions)
  • To display user reviews and aggregate ratings on cafe pages
  • To send newsletter updates to subscribers (email only)
  • To understand which cafes and areas are most popular
  • To fix bugs and improve site performance
  • To generate aggregate, anonymized statistics about cafe trends in Indonesia

Cookies & Analytics

PostHogproduct analytics, including page views, clicks, session recordings, and heatmaps to understand how users interact with our site. PostHog may use cookies or similar technologies to collect anonymized data. We do not use advertising cookies or third-party ad trackers.

Your language preference (English or Indonesian) is stored in localStorage on your device. This never leaves your browser.

Third-Party Services

We rely on the following third-party services to operate Cafepedia:

  • Google Maps Platform — cafe data (ratings, review counts, hours, coordinates) and photos are sourced from Google Maps. Photos remain the property of their original photographers/contributors and are displayed with Google Maps attribution. Google’s privacy policy applies to data sourced from their platform.
  • Supabase — our database and photo storage provider. Data is stored on Supabase-managed infrastructure.
  • Vercel — hosts our frontend. Vercel may process request metadata (IP address, user agent) for performance and security purposes.
  • PostHog — provides product analytics, session recordings, and heatmaps. Data is processed in the US.
  • OpenAI — powers our AI recommendation engine. When you use the "Pick for me" feature, your query is sent to OpenAI to generate cafe suggestions. OpenAI’s data usage policies apply.
  • Typesense — our search engine. Search queries are processed by Typesense to return results.

User-Generated Content (Reviews)

When you submit a review on Cafepedia, you agree that:

  • Your display name, rating, selected tags, and optional comment will be publicly visible on the cafe page.
  • Your review may be used in aggregate statistics (e.g., "92% say this cafe is work-friendly").
  • We may use aggregate review data in structured data (schema.org) to help search engines display ratings.
  • You can request removal of your review at any time by contacting us.
  • We reserve the right to moderate, hide, or remove reviews that contain spam, offensive content, or false information.

Data Retention

Search queries and usage analytics are retained for up to 12 months, after which they are deleted or anonymized. Newsletter email addresses are retained until you unsubscribe. Reviews are retained indefinitely as part of the public cafe database, unless you request deletion. We do not maintain long-term profiles of individual users.

Your Rights (UU PDP Compliance)

In accordance with Indonesia’s Personal Data Protection Law (Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi), you have the right to:

  • Access — ask what personal data we hold about you
  • Correction — request correction of inaccurate data
  • Deletion — request deletion of your personal data (email, reviews, suggestions)
  • Withdrawal of consent — unsubscribe from newsletter or opt out of analytics at any time
  • Objection — object to processing of your data for specific purposes
  • Opt out of analytics by using browser privacy settings or ad blockers
  • Disable location sharing in your browser settings

To exercise any of these rights, contact us at hello@cafepedia.id. We will respond within 3x24 hours as required by UU PDP.

Contact

For any privacy-related questions or requests, contact us at hello@cafepedia.id.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.