Privacy Policy
1. Data controller
Fragrance Finder is published by NexCode, represented by Thomas Scarpa, Grasse, France.
Contact: contact@fragrancefinder.fr
2. Data collected and purposes
User account (if created): email address, and if applicable name and profile photo from your Google account. These are necessary to create and manage your account. Legal basis: contract performance.
Newsletter: if you subscribe, your email is sent to Brevo (formerly Sendinblue) to send the monthly selection. Legal basis: consent. You can unsubscribe at any time via the link at the bottom of each email or by contacting us.
Quiz recommendations: your quiz answers are sent to the Groq API (AI infrastructure, United States) to generate fragrance recommendations. They are not retained beyond processing time. Your answers are also stored locally in your browser (localStorage) to display your olfactive profile in the "My Account" page.
Internal analytics: a random anonymous identifier (UUID, key ff_sid) is stored in your browser. It is used to measure site traffic (pages visited, features used) with no link to your identity. No personal data is associated with this identifier.
Server logs: Vercel (hosting provider) collects anonymised access logs for security and performance purposes.
3. Cookies and local storage
Strictly necessary cookies (consent-exempt):
— sb-*: Supabase session tokens, required for authentication.
— NEXT_LOCALE: language preference, 1-year duration.
Local storage (localStorage, not regulated as cookies):
— ff_sid: anonymous analytics identifier.
— ff_quiz_history, ff_quiz_profile: quiz history and profile, stored locally only.
— ff_battle_votes, ff_exit_popup_v2, bp_*: UI state, stored locally only.
No advertising cookies, no third-party tracking pixels.
4. Sub-processors and transfers outside the EU
Supabase Inc. (authentication) — United States / EU. Policy: supabase.com/privacy
Brevo SAS (newsletter) — France / EU. Policy: brevo.com/legal/privacypolicy
Groq Inc. (AI inference) — United States. Policy: groq.com/privacy
Vercel Inc. (hosting) — United States. Policy: vercel.com/legal/privacy-policy
These transfers are governed by standard contractual clauses (SCCs) or equivalent GDPR-compliant mechanisms.
5. Retention periods
Account data: retained while your account is active, then 30 days after deletion.
Newsletter data: until unsubscription.
Analytics identifier (ff_sid): stored in your browser until manually cleared.
Vercel server logs: per Vercel's policy (typically 30 days).
6. Your rights (GDPR)
Under the GDPR (EU Regulation 2016/679), you have the following rights:
— Right of access: obtain a copy of your data.
— Right of rectification: correct inaccurate data.
— Right to erasure: delete your account from the "My Account" page, or by contacting us by email.
— Right to data portability: receive your data in a structured format.
— Right to object and restriction: for processing based on our legitimate interest.
To exercise your rights: contact@fragrancefinder.fr. Response within 30 days.
You may also lodge a complaint with your national data protection authority.
7. Contact
Fragrance Finder / NexCode — Thomas Scarpa
contact@fragrancefinder.fr
Ultimo aggiornamento: 31 maggio 2026
