Privacy policy
Written for a European audience against the GDPR’s structure. Have it reviewed before launch.
What we collect
- Account: email, a hashed password, display name, optional country, optional profile photo.
- Sellers: shop handle, headline, bio, payment instructions you choose to publish, listing content and photographs.
- Orders: delivery name, address, email, phone number, the messaging app you ask to be contacted on and your handle there, and any note you write.
- Operational: a session cookie, an age-confirmation cookie, and an internal action log of moderation events.
- Signup checks: the IP address you signed up from, a signed cookie identifying your browser, and a one-way hash of ordinary browser traits (screen size, time zone, language, processor count, and how your device renders a test image).
The signup checks, in plain terms
We limit how many accounts one person can open. To do that we record three things at signup: your IP address, a cookie we set in your browser, and a hash of the browser traits listed above.
The browser trait hash is one-way and salted with a key only we hold. It cannot be reversed, it identifies nothing about you outside this site, and it is useless to anyone who obtained it. We never sell or share it. It is used for one purpose: refusing a fourth or fifth account from the same device.
Lawful basis: our legitimate interest in preventing fraud and abuse on a marketplace where strangers exchange money and home addresses. If you object to this processing, write to us — but understand that opening an account is what triggers it, and we cannot run the account limit without it.
These signals are kept for as long as the account exists, and for the counting window (currently 90 days) for attempts that did not become accounts. They are never used for advertising, analytics or tracking you across other websites.
We do not run third-party analytics, advertising trackers, or third-party fonts. Nothing about your visit is sent to another company.
Photographs and metadata
Every uploaded image is decoded and re-encoded on arrival. All embedded metadata — camera details and GPS coordinates in particular — is discarded before the file is written. The file stored is one we generated, not the one you sent.
Who sees what
- Your delivery address is visible to the seller shipping your order, and to moderators. Never to other users.
- Listing photos and your shop profile are public — that is their purpose.
- Your email address is never shown publicly.
Why we hold it (lawful basis)
- Contract: account and order data, to run the marketplace you asked to use.
- Legitimate interest: moderation logs and signup checks, to keep the marketplace clean and prevent abuse.
- Legal obligation: records we are required to keep.
How long
- Account data: until you delete the account.
- Listings and photos: deleted with the account or the listing.
- Order records: retained after account deletion, because historic disputes commonly surface afterwards.
Your rights
You may request access, correction, deletion, restriction, portability, or object to processing. Email support@scentofher.com from your registered address. Deletion requests are honoured except where an order record must be retained as above.
Cookies
Three, all first-party and all functional:
- a session cookie that keeps you signed in;
- an age-confirmation cookie so the 18+ notice does not reappear on every page;
- a signed browser marker used only to count how many accounts have been opened from this browser.
No advertising or cross-site tracking cookie is set, and no third party can read any of them.
Security
Passwords are hashed with bcrypt. Uploads are validated by extension, declared type, magic bytes and a full re-encode before storage, and every image is stripped of its metadata.