What we collect
We only collect the minimum data needed to run the site and keep it secure.
- Account data: email (stored as a one-way SHA-256 hash), password hash
- Security & abuse-prevention: signup/login timestamps, IP address, user agent
- Your collection data: which perfumes you add, optional personal notes/ratings
- Hosting provider: We use Contabo to store and serve your data.
Why we collect it
- To provide your account and keep you logged in
- To prevent abuse, fraud, and automated attacks
- To let you manage, export, or delete your data
- To improve the site based on how people use their collections
Legal basis (GDPR)
We process your data based on your consent when you create an account, and on legitimate interests for security and site improvement. You can withdraw consent or object at any time by contacting us or deleting your account.
Retention
Security logs are kept for up to 90 days. Account and collection data are stored until you delete your account, and we remove it within 30 days of a deletion request.
Data transfers
Your data is hosted with Contabo. If stored outside the EU/EEA, we rely on appropriate safeguards like standard contractual clauses.
Your rights
- Export your data from the Account page
- Delete your account from the Account page
- Request access to your data or object to processing by contacting us
Contact
For any privacy questions or requests, email privacy@lurking.xyz
Last updated: December 17, 2025