Privacy policy

Sign-in and Google account information

WorkOS handles sign-in by email code or Google. It provides this site with your email address, whether that address is verified, your first name when available, and WorkOS user and session identifiers. I store these to recognise your account, show your name, sync your lists, and manage sign-out.

Google sign-in requests your email address and basic profile. This site does not receive your Google password, request access to your Gmail messages or Google Drive files, or store Google access or refresh tokens. Google account information is used for account and alert features, not sold or used for advertising.

Saved lists and preferences

When you save a fragrance, the site stores a subscriber identifier and your wishlist or collection, including any scores, rankings, and notes you add. It also stores account preferences, such as your email alert mode, timezone, currency, and a handle if you choose one. Device lists can be merged into your account when you sign in.

Public sharing is off by default. If you turn it on, the lists you choose to share, their scores and notes, and your handle become visible at your public profile link. Your email address is not included in that public profile.

Alerts and delivery records

Email alerts use the verified email address from your account. Push alerts use a browser notification endpoint and encryption keys, linked to your subscriber identifier, along with browser information and delivery status. Delivery and bounce records help avoid duplicate messages and stop sending to addresses that cannot receive mail.

The site has an optional email inactivity setting, off by default. If enabled, it records clicks on product links in alert emails to decide whether to offer fewer emails. This uses link redirects, not email-opening pixels.

Cookies, browser storage, and requests

Cookies identify your device or signed-in account and protect the sign-in process. Browser storage remembers preferences such as a chosen currency when that feature is enabled. These support site features rather than advertising.

Cloudflare processes web requests, which include an IP address and browser information. The site also passes those details to WorkOS during sign-in. Product photos are loaded from the image hosts used by Montagne; those hosts receive the normal request details when your browser loads an image.

How you found the site

On your first visit, browser storage keeps a note of the page you first opened, the site that linked you here, and any campaign tags in the link (the utm_ values). It stays in your browser and is not sent anywhere while you only browse.

If you later save a fragrance, that note is stored with your subscriber record, and the first time you save anything the site records one anonymous event with the same details in PostHog (EU). This tells me which pages bring people who find the site useful. It is not used for advertising or to follow you to other sites.

Services that process information

Cloudflare hosts the site and its database. WorkOS handles sign-in and sends email codes. Google authenticates you if you choose Google sign-in. Amazon SES sends restock emails when configured, PostHog (EU) receives the first-save event described above, and your browser push service delivers notifications. These services process the information needed for those functions. I do not sell your personal information.

Your choices and deletion

You can change email preferences, unsubscribe from email, turn off push alerts, edit or remove saved fragrances and notes, and make shared lists private. Account data is kept while your subscriber or account remains on the service.

Use Delete my data in the account controls to remove your subscriber record, saved lists, push subscriptions, and linked delivery and click records. For a signed-in account, deletion also requests removal of your sign-in account from WorkOS. Email bounce history is stored separately and may remain after account deletion. Copies of previously public lists may remain in other people’s messages or search caches.

You can also contact me about access, correction, or deletion using the email address below.