Privacy Policy
At smell100, we take your privacy seriously. This policy explains what personal data we collect, why we collect it, and your rights under the General Data Protection Regulation (GDPR).
1. Who We Are
smell100 is a social media platform for fragrance discovery and community tracking.
- Operator: AMPD d.o.o. (trading as 2null1)
- Location: Šnoflova ulica 15a, SI-2000 Maribor
- Contact: weare@smell100.com
2. Data We Collect
We collect only the data necessary to provide you with the smell100 service.
A. Information You Give Us
- Account Data: When you sign up, we collect your email address and a username (which acts as your display name). We also store a securely hashed version of your password.
- Profile Information: If you choose to add them, we store details like a profile picture, bio, or signature scent.
- User Content: Any reviews, lists, comments, or ratings you post on the platform.
B. Information Collected Automatically
- Usage Data: With your consent, Google Analytics collects cookie identifiers, device and browser information, pages viewed, and interactions to help us improve the site. This information is not anonymous.
- Technical Logs: Server logs may record your IP address, browser type, and timestamp for security purposes (e.g., to prevent spam or DDoS attacks).
3. Why We Process Your Data (Legal Basis)
Under the GDPR, we rely on the following legal bases:
- Contractual Necessity: We need your email and username to create your account and let you log in.
- Legitimate Interest: We use data to moderate the community, prevent fraud, and maintain smell100.
- Consent: Optional analytics cookies require your consent before Google Analytics loads. You can withdraw consent at any time using Manage cookies in the footer, without affecting the lawfulness of processing before withdrawal.
4. Sharing Your Data
We share data with service providers that help us run the platform and, where your privacy choices permit, advertising partners:
- Hosting: Hetzner hosts our application and database.
- Email: MailerSend delivers service emails, including password resets and notifications.
- Advertising: Google AdSense and the ad partners identified in Google’s consent message may process cookie identifiers, device information and ad interactions to deliver and measure advertising. Some disclosures may constitute sale or sharing under US state privacy laws. Where applicable, use Google’s Do Not Sell or Share link to opt out. We also suppress ads when your browser sends Global Privacy Control.
- Analytics: Google Analytics, only with your consent, to measure visits and interactions. Google Signals and advertising personalization are disabled for this analytics integration.
If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards (like Standard Contractual Clauses) are in place.
5. Data Retention
- Account Data: We keep your data for as long as your account is active.
- Deleted Accounts: If you delete your account, your personal data (email, username) is removed from our live database immediately (or anonymized). Copies may remain in backups until those backups expire under the configured retention schedule.
6. Your Rights
As a user in the EU/EEA, you have the following rights:
- Right to Access: You can ask for a copy of the personal data we hold about you.
- Right to Rectification: You can update inaccurate data via your settings.
- Right to Erasure ("Right to be Forgotten"): You can delete your account at any time, which erases your personal identifiers.
- Right to Portability: You can request an export of your reviews and data in a machine-readable format (e.g., JSON/CSV).
To exercise any of these rights, please contact us at weare@smell100.com.
7. Cookies
We use cookies (small text files) to keep you logged in.
- Essential Cookies: Required for the site to function (e.g., session tokens).
- Analytics Cookies: Google Analytics cookies (_ga and _ga_*) measure visits and session activity. We set their lifetime to 180 days without extending it on each visit. They are optional and are only set after you agree.
Cookie choices and Google services
Where our analytics preferences are shown, the consent cookie (cc_cookie) remembers your categories, consent date, and notice revision for 180 days. Rejecting optional cookies does not restrict access. You can change your choice below or in the footer. Withdrawing analytics consent stops further collection and clears the site's analytics cookies; it does not erase data already received by Google.
Read how Google uses personal data. Google’s regional privacy messages provide advertising purposes, partner information, consent records, and available choices. In Europe, they also collect analytics consent. Use Manage cookies to reopen the European consent message. Where US state privacy rules apply, use Google’s Do Not Sell or Share link on the page. Elsewhere, Manage cookies opens our analytics preferences. Analytics consent alone does not authorize personalized ads. Advertising is shown only when the applicable privacy choices permit it. Premium members do not receive ads.
8. Changes to This Policy
We may update this policy as smell100 evolves. If we make significant changes, we will notify you by email or a prominent notice on the site.