Last updated: 23 October 2026

Privacy Policy

1. Who we are

Olfacta is the data controller for the personal information collected on this site and in the OLFACTA mobile app. This policy covers both.

Olfacta is run by an individual, not a company. The controller is Giulia Guimarães, Calle Princesa 31, planta 2, puerta 2, 28008 Madrid, Spain (tax ID Z1353208P).
Contact: hello@olfacta.app

2. What we collect

When you take the quiz, your answers and the result we derive from them (your identity, sub-vibe, and attribute scores) are stored on your device: in your browser on the site, and on the phone itself in the app. If you create an account (we sign you in with an email magic link), we also store, in our database, your email, your chosen public handle, your quiz results, the history of your past readings, the fragrances you save, react to, or add to your collection, and any comments you post (including anything you report), so they are durable and available across your devices. If someone sends you a “find their scent” gift, the result is stored in the gifter's account, not yours. When you subscribe or purchase, we collect your email and payment information via Stripe (we never see your full card details). When you join our newsletter, we collect your email and (optionally) your scent identity.

Some things are recorded with or without an account, and without anything that identifies you: the votes you cast on a fragrance page (how noticeable it is, how long it lasts, how it feels) and in the daily duel, searches that found nothing, and a short list of product events, such as starting or finishing the quiz, seeing the membership offer, or tapping through to a retailer. These records carry no name, no email, no account and no device identifier, and we do not store your IP address with them. Two small exceptions: so that changing a fragrance vote replaces it instead of counting twice, your device keeps a random code that is sent with your fragrance votes and is not linked to your account or to anything else about you; and if you are signed in and have taken the quiz, your duel vote carries your scent identity (never your account), so we can see how each identity splits.

To learn whether the quiz gets it right, we also record which fragrances a reading showed you and what you did with them next: opening one, tapping through to a retailer, adding it to a list, or marking it as loved, tried or not for you. These records use a one-way code made from your reading on our server, which cannot be turned back into the reading on your device and is not linked to your account, and they keep only the day, never the time.

If you choose a city on the app's today screen, the app sends that city, picked from a list, to our server to get its weather. We do not store it, and our server asks the Norwegian Meteorological Institute (MET Norway) for the forecast using only the city's coordinates. The app never asks for your location.

The diary. For each day you write it, the app keeps how you wanted to feel, the fragrance you wore (or that you wore none) and, the next day, how long it lasted and whether anyone noticed. It lives on your phone; if you have an account, it is also stored in our database so it follows you across devices.

Friends. If you have an account, other signed-in people can find you by your public @handle, and see your scent identity and how many friends and followers you have. You can add friends, which both of you must accept, and follow people, which needs no acceptance. We store these connections, pending requests, the people you block, and any reports you make.

3. How we use it

Your quiz answers, and your activity on the site such as the fragrances you like and add to your collection, personalize your fragrance recommendations (matched against the documented notes and families of each fragrance, not a chemical or skin analysis). Your email is used for transaction receipts, the monthly Issue (if you're a member), and occasional Latest dispatches (if you opted in). Marketing emails are only sent with your consent, and every one has an unsubscribe link you can use at any time. We never sell your data.

The anonymous records described in section 2 are only ever used in aggregate: to show how other people read a fragrance, to learn which fragrances people look for that we do not carry yet, to understand where the quiz and the site work or fail, and to improve the catalogue and the way recommendations are made. They never decide the recommendations shown to any one person.

What your friends see. Nothing from your diary or your shelf is shared until you choose to. In the friends tab you pick who sees your days: nobody (the default), your friends, or your friends and followers. They can see the fragrance you wore each day, from the last month at most, everything on your shelf, and what you mark as loved. They never see how you wanted to feel, how long a fragrance lasted, whether it was noticed, or what you marked as tried or not for you. You can change this at any time. Blocking someone removes any friendship or follow between you, and hides each of you from the other.

Reports are read only by us, to keep the app safe for everyone.

4. Cookies and analytics

On the site, the only cookies we set are the ones that keep you signed in to your account. Everything else we remember about you on the site, such as your reading and your unlock state, is kept in your own browser storage rather than in a cookie. We use Vercel Web Analytics for aggregate visitor counts: it does not use third-party cookies and does not track individuals across sites. The anonymous product events in section 2 are recorded on our own servers and use no cookie. See our Cookie Policy.

The app sets no cookies and does not track you across other apps or websites. It sends the same anonymous records as the site (fragrance and duel votes, searches that found nothing, product events, and what a reading showed and what you did with it), none of them linked to you. Everything else it keeps lives on your phone, and reaches our database only if you create an account.

5. Your rights

Under the EU GDPR, you have the right to access, correct, delete, or port your data, and to withdraw consent. The fastest route for deletion is to do it yourself, in your account settings (see section 6). For anything else, write to hello@olfacta.app and we answer within one month.

Olfacta is operated from Spain, so you may also lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos, or with the authority of the EU country where you live. If you are in Brazil, the LGPD gives you equivalent rights and you may complain to the ANPD.

6. Data retention

Quiz data stored on your device is deleted when you clear your browser storage, or when you delete the app. Account data (your profile, handle, saved lists, quiz results, reading history, diary, friends, follows, and comments) is retained while your account is active.

Anonymous product events, and the record of what each reading showed and what came of it, are kept for 13 months and then deleted. Vote and search totals are kept without a time limit, because they describe fragrances, not people. Since none of these records points to you, they are not tied to your account, and deleting your account does not change them.

You can delete your account yourself, at any time, from your account settings: the ME tab in the app, or your profile on the site. The deletion is immediate and it is not reversible. It removes your account, your profile and handle, your readings and their history, your saved lists, your diary, your friends, follows and blocks, your comments, and your newsletter subscription, and it clears what the app or the browser kept on your device. Subscriber billing records held by our payment processor are retained for 12 months after cancellation for accounting purposes, as the law requires.

7. Third parties and international transfers

We rely on the following processors, each under their own privacy terms: Stripe (payment processing), Supabase (account sign-in and database hosting for your profile, saved lists, and quiz results), Resend (transactional email and waitlist delivery when configured), and Vercel (hosting and privacy-friendly Web Analytics). Some of these providers process data on servers in the United States, so your data may be transferred outside the European Union; where required, those transfers rely on standard contractual clauses or equivalent safeguards.

If you install the app from the App Store, Apple also processes data about that download under its own privacy policy. We receive no personal data from Apple about you.

Bottle images come from Fragella, our fragrance data provider, and are loaded from their servers as you browse. Your device therefore connects to Fragella and they receive what any server receives from a request, including your IP address. We send them nothing about you: no account, no email, no reading.

8. Changes

We update this policy as our practices evolve. Material changes will be communicated via email to active members.

Questions? hello@olfacta.app