Privacy Policy

1. Scope

This policy explains how Fragrance Collect processes information when you browse the site, create an account, save preferences or favorites, sign in with Google, or contact us. Purchases take place on third-party retailer sites and are governed by those retailers' privacy policies.

2. Information We Process

Account information: name, email address, a securely hashed password for email accounts, or basic Google profile information such as name, email, and profile picture when you choose Google Sign-In.

Saved information: fragrance preferences, sensitivities you choose to provide, favorite products, and price, stock, or promotion watches you create.

Retailer visit attribution: when you follow a retailer link, we may record the product, retailer, page context, country code when available, time, and your account ID if signed in. We do not store an IP address in the outbound-visit record.

Messages: your name, email, selected subject, and message when you use the contact form.

Technical information: IP address, user agent, session timing, and standard request metadata used for authentication, abuse prevention, security, and service operation. Rate-limit identifiers and session tokens are stored as hashes rather than raw values.

3. Cookies and Local Storage

We use a secure, HttpOnly session cookie to keep signed-in users authenticated. The homepage may use local storage to preserve pending favorite changes for the current signed-in account for up to 24 hours while a device is offline; that queue is removed on sign-out and is never replayed to a different account. It may also retain the last six retailer offers viewed for up to 30 days, a non-personal retailer directory cache for up to seven days, and non-personal currency rates for up to 24 hours. Google may use its own storage when you choose Google Sign-In. We do not currently use advertising cookies or a site analytics tracker.

4. How We Use Information

We use information to operate and secure accounts, provide favorites and preference features, personalize catalog results, answer support requests, prevent abuse, troubleshoot reliability issues, and comply with legal obligations.

5. Service Providers and External Sites

We use service providers to operate the site, including Cloudflare for hosting, database, security, and request processing; Google for optional sign-in and hosted font assets; and Resend for account-verification, password-reset, watch-notification, and contact email delivery. Product data and outbound retailer links may be provided through affiliate networks such as CJ. The catalog page requests currency rates from open.er-api.com, with Frankfurter as a fallback; those services receive ordinary network request information such as your IP address. These providers process information under their own terms and privacy practices.

Fragrance Collect may earn a commission from qualifying purchases made through some outbound links. Linked retailers receive information directly from you only when you visit or transact on their sites. We do not sell personal information.

6. Retention

We retain account information while an account is active or until a verified deletion request is completed. Sessions expire after 24 hours. Rate-limit records cover short abuse-prevention windows and expired rows are removed on a scheduled basis. Password-reset and email-verification tokens expire after 30 minutes and are single-use. Attributed retailer visits are retained for up to 13 months, and catalog price observations for up to 18 months. Deal watches remain until removed or completed. Contact emails may be retained as needed to resolve the request, maintain support records, or meet legal obligations.

7. Security

We use measures such as encrypted transport, HttpOnly cookies, salted password hashing, hashed session and reset tokens, origin checks, rate limits, and restricted data access. No internet service can guarantee absolute security.

8. Your Choices

You can update your name and fragrance preferences, remove favorites, change or reset your password, sign out, and download a copy of your account data through the Privacy & Data area. To request account deletion, use that area or email support@fragrancecollect.com from the account email address. You may also contact us to request access or correction. We may retain limited records where required for security, fraud prevention, dispute resolution, or law.

9. Children

Fragrance Collect is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information.

10. Changes and Contact

We may update this policy as the service changes. The date above shows the latest revision. Questions or privacy requests can be sent to support@fragrancecollect.com.