Privacy Policy
Effective Date: February 19, 2026 · Last Updated: April 18, 2026
At ScentWise ("we," "our," or "us"), we respect your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using our website at scent-wise.com (the "Service"), you agree to the practices described here.
1. Information We Collect
We collect the following information to provide and improve the Service:
— IP address: Used for rate limiting, free trial tracking, abuse prevention, and user profile identification (for free users). Stored in our server infrastructure (Upstash Redis) with automatic expiration.
— Subscription details: Order ID, customer ID, and email address from Lemon Squeezy when you subscribe. Email is stored in your authentication cookie.
— Email address (newsletter / free-pick unlock): If you submit your email to unlock additional free AI picks or to subscribe to our newsletter, we store it (a) in our server infrastructure (Upstash Redis) keyed by your device identifier so we can deliver the unlock, and (b) with our newsletter provider (Beehiiv) and transactional email provider (Resend) so we can send you fragrance updates and a welcome email. You can unsubscribe at any time via the link in any email or by emailing scentwise.com@gmail.com.
— AI inputs: Text queries and uploaded photos sent to our AI features. These are sent to Google's Gemini API for processing. Google may retain this data for up to 30 days for abuse detection per their policies.
— Scent profile data: Your fragrance preferences (liked/disliked notes, favorite brands, occasions, skin chemistry, etc.) are automatically extracted from your AI interactions and stored in our database to personalize future recommendations. See Section 5 for retention details.
— Analytics data: We use Google Analytics (GA4) to collect page-view and usage data, which includes cookies and may associate data with your Google account. We also use Vercel Analytics and Speed Insights for performance monitoring.
— Advertising data: Google AdSense displays personalized ads on our site and may set cookies for ad targeting and behavioral advertising. See Section 2 for details.
We do not collect names, physical addresses, or phone numbers beyond what is listed above. We do not use browser fingerprinting.
2. Cookies We Use
ScentWise uses the following categories of cookies:
Essential cookies (required for the Service to function):
| Cookie | Purpose | Duration |
|---|---|---|
sw_free | Tracks free trial query count for anonymous users | 32 days |
sw_device | Device-bound identifier used to enforce free trial limits across browsers and incognito windows | 32 days |
sw_email | Marks that the user has shared their email to unlock extended free recommendations | 32 days |
sw_sub | Authenticates premium subscribers | 30 days |
sw_usage | Tracks monthly query count for premium users | 32 days |
sw_owner | Authenticates site administrators | 30 days |
sw_revalidated | Throttles subscription re-verification checks | 24 hours |
Our essential cookies are HttpOnly (inaccessible to JavaScript), SameSite=Lax, and Secure (HTTPS-only in production). Each cookie is cryptographically signed with HMAC-SHA256 to prevent tampering.
Analytics cookies (used to understand how visitors use the site):
| Provider | Purpose | More Info |
|---|---|---|
| Google Analytics (GA4) | Page views, user engagement, traffic sources. Sets persistent cookies (_ga, _ga_*) for visitor identification. | Google Privacy Policy |
| Vercel Analytics | Web vitals and performance monitoring. No personally identifiable information collected. | Vercel Analytics Privacy |
Advertising cookies (used to display relevant ads):
| Provider | Purpose | More Info |
|---|---|---|
| Google AdSense | Displays personalized ads. Sets cookies for ad targeting, frequency capping, and behavioral profiling across websites. | Google Ads Privacy |
You can manage your cookie preferences via our cookie consent banner. Analytics and advertising cookies are only loaded with your consent. You can also opt out of Google's personalized ads at Google Ad Settings.
3. How We Use Your Information
We use the information we collect to:
— Provide and improve the Service, including AI-powered fragrance recommendations personalized to your scent profile.
— Build and maintain your scent preference profile for increasingly personalized recommendations.
— Enforce usage limits and prevent abuse (rate limiting, free trial enforcement).
— Process and verify subscription payments through Lemon Squeezy.
— Send a welcome email and (if you opt in) a periodic fragrance newsletter. Legal basis: your consent, which you gave by submitting your email. You can withdraw consent at any time via the unsubscribe link in any email.
— Analyze usage patterns and site performance to improve the Service.
— Display relevant advertisements via Google AdSense.
— Respond to your support inquiries.
4. Data Sharing
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share data with the following service providers, strictly as needed to operate the Service:
— Google (Gemini API): Processes AI queries. Your text queries, uploaded photos, and scent profile data are sent to Google's Generative AI API for processing. Subject to Google's Privacy Policy and Generative AI Terms.
— Google Analytics & AdSense: Collects analytics and advertising data. Subject to Google's Privacy Policy.
— Lemon Squeezy: Processes subscription payments and stores billing details. Subject to Lemon Squeezy's Privacy Policy.
— Vercel: Hosts the Service and provides analytics/speed insights. Subject to Vercel's Privacy Policy.
— Upstash: Provides server-side data storage (Redis) for rate limiting, usage tracking, and user profiles. Subject to Upstash's Privacy Policy.
— Amazon Associates: Affiliate product links. Clicking "Shop on Amazon" links may set Amazon tracking cookies. Subject to Amazon's Privacy Notice.
— Beehiiv: Newsletter subscription management. When you submit your email to unlock free picks or subscribe to the newsletter, we share your email with Beehiiv so they can deliver our newsletter and manage your subscription preferences. Subject to Beehiiv's Privacy Policy.
— Resend: Transactional email delivery (welcome email). Your email is passed to Resend solely to deliver a single welcome message. Subject to Resend's Privacy Policy.
5. Data Retention
We retain data only as long as necessary:
— Scent profile data: Stored for up to 1 year from your last interaction. Includes your fragrance preferences, liked/disliked notes, and AI recommendation history. You can delete your profile at any time from the Settings menu or by contacting us.
— AI inputs (text and photos): Not stored on our servers beyond the request. Google may retain data for up to 30 days per their API terms.
— Cookies: Expire automatically as listed in Section 2 above.
— Subscription data: Retained while your subscription is active and for a reasonable period afterward for billing purposes.
— Free trial usage data: IP-based usage records are stored in Redis with a 33-day automatic expiration.
— Gate / newsletter email: Stored in Redis for up to 1 year so we can honor your unlock. Stored with Beehiiv until you unsubscribe. Email us at scentwise.com@gmail.com at any time to have your email removed from all systems.
— Rate-limit data: Automatically purged after 10 minutes (in-memory) or at end of the rate-limit window.
6. Your Rights
Depending on your jurisdiction, you may have the following rights:
For all users:
— Access the personal data we hold about you.
— Request deletion of your data (including your scent profile — use the "Reset Profile" option in Settings, or contact us).
— Withdraw consent for analytics and advertising cookies at any time via the cookie consent banner or by clearing cookies in your browser.
— Object to processing of your data.
For EU/EEA residents (GDPR):
— Right to data portability.
— Right to restrict processing.
— Right to lodge a complaint with your local data protection authority.
— We process your data on the basis of: (a) consent for analytics and advertising cookies, (b) legitimate interest for security and abuse prevention, and (c) contract performance for subscription services.
For California residents (CCPA/CPRA):
— Right to Know: You may request details about the categories of personal information we collect, the purposes for collection, and the categories of third parties with whom we share it.
— Right to Delete: You may request deletion of your personal data. Use the "Reset Profile" option or contact us.
— Right to Opt-Out of Sale: We do not sell your personal information in the traditional sense. However, the use of Google AdSense may constitute a "sale" or "sharing" under CCPA. You can opt out of personalized ads via Google Ad Settings or by declining advertising cookies in our consent banner.
— Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, contact us at scentwise.com@gmail.com. We will respond within 30 days (45 days for complex CCPA requests).
7. International Data Transfers
Your data may be transferred to and processed in the United States and other countries where our service providers operate (Google, Vercel, Upstash, Lemon Squeezy). These transfers are necessary to provide the Service. Where required, we rely on appropriate safeguards including standard contractual clauses.
8. Security
We implement industry-standard security measures to protect your data, including HMAC-SHA256 signed cookies, HTTPS enforcement, Content Security Policy headers, CSRF protection, rate limiting, and timing-safe token comparisons. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Data Breach Notification
In the event of a data breach that affects your personal information, we will notify affected users and relevant authorities as required by applicable law (within 72 hours under GDPR). Notification will be provided via email (for subscribers) or through a notice on the Service.
10. Children's Privacy
ScentWise is not intended for users under 16 years of age. We do not knowingly collect information from children under 16 (or under 13 under COPPA). If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service and, where required, we will seek renewed consent. The "Last Updated" date at the top indicates when this policy was last revised. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
12. Contact
If you have questions about this Privacy Policy or how we handle your data, please contact us at scentwise.com@gmail.com.