Privacy Policy

What we collect

We only collect the minimum data needed to run the site and keep it secure.

• Account data: your email, stored as a one-way SHA-256 hash, and a password hash
• Security and abuse prevention: signup and login timestamps, IP address, user agent
• Your collection data: which perfumes you add, plus any personal notes and ratings
• Hosting: we use Contabo to store and serve your data

Why we collect it

• To provide your account and keep you logged in
• To prevent abuse, fraud and automated attacks
• To let you manage, export or delete your data
• To improve the site based on how people use their collections

Legal basis under the GDPR

We process your data based on your consent when you create an account, and on legitimate interests for security and site improvement. You can withdraw consent or object at any time by contacting us or deleting your account.

Retention

Security logs are kept for up to 90 days. Account and collection data are stored until you delete your account, and we remove it within 30 days of a deletion request.

Data transfers

Your data is hosted with Contabo. If it is stored outside the EU or EEA, we rely on appropriate safeguards such as standard contractual clauses.

Your rights

• Export your data from the Account page
• Delete your account from the Account page
• Request access to your data, or object to processing, by contacting us

Contact

For any privacy question or request, email privacy@lurking.xyz.