Privacy Policy

1. Introduction

Fragranova ("we", "us", "our") operates fragranova.com. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

2.1 Account Data (Google OAuth)

When you sign in with Google, we receive your name, email address, and profile picture from Google. This data is stored in our Supabase database to identify your account.

2.2 User-Generated Content

When you submit reviews, votes, fragrance suggestions, or collections, that content is stored in our database and associated with your account.

2.3 Cookies

• Authentication cookies — sb-access-token and sb-refresh-token are used to maintain your login session. These are HTTP-only, secure cookies.
• Theme preference — stored in localStorage (not a cookie) to remember your dark/light mode choice.
• Third-party cookies — Google AdSense may set cookies for personalized advertising (see Section 4).

2.4 Analytics

We use Vercel Analytics and Vercel Speed Insights to understand site performance and usage patterns. These collect anonymized page view data, web vitals, and basic device information. No personally identifiable information is collected by these services.

2.5 Error Reporting

Client-side JavaScript errors are reported to our server for debugging. These reports include the error message, page URL, and browser user agent — no personal data.

3. Data Storage

Your data is stored in Supabase (hosted on AWS). Authentication tokens are managed by Supabase Auth. We do not sell or share your personal data with third parties, except as described in this policy.

4. Google AdSense

We display ads through Google AdSense. Google may use cookies and web beacons to serve ads based on your prior visits to this and other websites. You can opt out of personalized advertising by visiting Google's Ads Settings or aboutads.info.

5. Affiliate Links

Some links on Fragranova are affiliate links (e.g., Amazon, FragranceNet). Clicking these links may set cookies on the retailer's site to track purchases for commission purposes. We do not receive any personal data from these retailers.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your personal data.
• Portability — request your data in a machine-readable format.
• Objection — object to processing of your data for certain purposes.
• Withdraw consent — withdraw consent for data processing at any time.

To exercise any of these rights, contact us at hello@fragranova.com.

7. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days. Anonymized analytics data may be retained indefinitely.

8. Children's Privacy

Fragranova is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

10. Contact

For questions or concerns about this Privacy Policy, contact us at hello@fragranova.com.