Privacy policy
Last updated 9 September 2026
This describes what Daily Fragrance Scout collects, why, who else touches it, how long it is kept, and what you can do about it. We collect as little as the site can run on. We do not sell personal data, we do not build advertising profiles, and we load no third-party analytics unless you opt in.
What we collect
If you create an account: your email address, your display name, and what you make on the site: saved deals, follows, alert preferences, deal submissions, votes and reports.
If you subscribe by email without an account: your email address, which page you subscribed from, and, when you subscribed after a search that returned nothing, the words you searched for. That last one tells us which brands to chase. Subscribing is confirmed by email first, so an address cannot be added by someone else.
When you click through to a shop: we record the click so we can tell which deals are useful. Your IP address is hashed before it is written down; the raw address is never stored.
When you search: the query is logged with no link to your identity, so we can see what people look for and cannot see who looked.
Why we collect it
To run the service: signing you in, showing your saved deals and sending the alerts you asked for, moderating submissions, measuring which deals are worth showing, and preventing abuse such as vote manipulation.
Where the law asks for a basis: account and email data are processed to provide something you asked for, and click and search records to operate and improve a service we have a legitimate interest in keeping useful. Analytics runs only on consent, which you can withdraw at any time.
Cookies and analytics
One strictly necessary cookie keeps you signed in. Your cookie choice is stored in your browser rather than in a cookie we send. Nothing else is set unless you allow it.
If you accept analytics, we load two tools. Vercel Web Analytics is served from this site's own domain rather than a third-party host, is cookieless, counts page views in aggregate, and does not assign you an identifier. Google Analytics is loaded from Google and sets cookies (names beginning _ga) that recognise your browser on return visits to this site; we run it with Google's advertising signals switched off in code, so it is not used to build advertising profiles or follow you to other sites. If you decline, neither is ever loaded. You can change your mind whenever you like on the cookie preferences page.
If you accept analytics we also store, in your browser and not in a cookie, a random visitor identifier (a value beginning dfs_, kept for up to 400 days) and the source that first brought you here: the referring site, any campaign tag on the link, and the page you first landed on. It exists for one purpose, and it is worth stating plainly. If you find us through an AI assistant today and buy through a retailer link a week later, that identifier is what lets us see that the AI answer earned the sale. It is a random number, not your name, and it is never sent to another site.
If you decline, none of that is written. We still record which site referred your current visit, for the length of that visit only, and it disappears when you close the tab.
We do not track you across sites and set no advertising cookies of our own, so a browser opt-out signal such as Global Privacy Control has nothing of ours to switch off; analytics is already off unless you opt in. Cookies set by an affiliate network after you leave are covered under Affiliate links and tracking below.
Who else processes your data
Running a site means other companies handle some of this. These are all of them, and what each one sees:
| Company | Role | What it sees |
|---|---|---|
| Vercel | Hosting and content delivery | Requests to this site, including IP address and browser, in server logs |
| Neon | Database | Everything stored: accounts, saved deals, alerts, subscriptions, hashed click records |
| Resend | Sending email | Your email address and the contents of messages we send you |
| Sentry | Error monitoring | Technical details of errors, which can include the page, the request, and your account id |
| Vercel Web Analytics | Analytics, only if you consent | Page views without cookies and without any identifier that follows you |
| Google Analytics | Analytics, only if you consent | Page views and site interactions, with _ga cookies that recognise your browser across visits to this site |
These providers operate in the United States and elsewhere, so your data may be handled outside your own country. None of them are permitted to use it for their own purposes.
Shops and the affiliate networks that carry their links are not in this table, because they are not our processors; they are separate companies you are handed off to when you follow an outbound link, each with its own privacy policy, which applies once you leave us. What passes between us and them is covered next.
Affiliate links and tracking
The site is funded by affiliate commissions. When you follow a buy or outbound link to a shop, the link routes through an affiliate network before it reaches the shop, currently Rakuten Advertising and CJ (Commission Junction), and for some merchants their own program. The network sets its own cookies on its own domain and receives a one-time click identifier so that, if you buy, the sale can be credited to us.
We do not hand the network your name, email, or account. The identifier ties the click to a possible commission, not to you, and the price you pay is exactly the same either way. These networks and shops are independent companies with their own privacy policies and cookie controls, which govern once you have left this site.
What you can do
Export or delete, yourself. Both live in Settings with no email to send and no support queue. Deleting removes your account and personal data. Records with no identity in them, such as hashed click counts, remain as statistics.
Unsubscribe from any email using the link in it, without signing in.
You can also ask us to correct data, object to how we use it, or complain to your local data protection authority. Write to contact@dailyfragrancescout.com and we aim to reply within two business days.
How long we keep it
Account data lasts as long as the account and goes when you delete it. Email subscriptions last until you unsubscribe. Hashed click records and identity-free search logs are kept while they are useful for the statistics described above, then deleted or further aggregated.
Children
This site is meant for adults buying fragrance and is not directed at children under 13. We do not knowingly collect their data; if you believe a child has given us some, write to us and we will remove it.
Changes
If this policy changes in a way that affects what we collect or who sees it, we will change the date at the top and say so on the site rather than quietly editing the page.