The short version: I collect as little as I can. An email address if you ask for the digest, an account if you want a Sniff List, and anonymous page counts. Nothing is sold, nothing goes to advertisers, and there is no tracking cookie anywhere on this site.
What I collect, and why
- Your email, if you hand it over. The waitlist and the weekly digest run on an email address and nothing else — no name, no IP address stored with it. I use it to send the digest, and for nothing else. Every digest carries an unsubscribe link; one click and the address is gone.
- Your account, if you sign in. Signing in with Google hands Snifflist your email address, your name and your avatar picture. That is what runs the account — it is how I know which Sniff List is yours. There is no password to lose, because Snifflist never sees one.
- Your Sniff List. The fragrances you save, and when you saved them. They are stored against your account so they are still there on your next visit. The public pages show how many people are watching a fragrance; they never show who.
- Anonymous analytics. Vercel Analytics counts page views without cookies, without fingerprinting and without following you to any other site. I see that a page was read, not who read it.
- Ordinary server logs. Every request to any website produces logs at its host, and this one is no exception: IP address, page, timestamp, kept briefly by Vercel to keep the site standing and to stop abuse. I do not mine them and I do not join them to your account.
What I don’t do
I don’t sell your data. There are no ad networks, no retargeting pixels and no third-party marketing trackers on this site. I don’t build a profile of you, and I don’t hand anything to a company whose business is advertising. If that ever changes, it changes on this page first — and the digest will say so.
Cookies
Only functional ones: a session cookie once you sign in, so the site knows it’s you, and a small cookie remembering which country you picked, so offers show what actually ships to you. Neither follows you anywhere. There is no advertising or analytics cookie, which is why there is no consent banner — asking permission for cookies I don’t set would be theatre.
Affiliate links
Some buy links earn Snifflist a small commission, which is what keeps the servers running. It never influences what gets tracked, what status a fragrance is given, or what makes the Canon. Following one takes you to the shop’s own site, where the shop’s cookies and the shop’s privacy policy apply — those are theirs, not mine. What comes back to me is whether a sale happened, never who you are or what else you bought.
Who else touches the data
Snifflist runs on Vercel (hosting and analytics, servers in Frankfurt) with the database at Neon (EU, Frankfurt). Google handles sign-in, and only if you choose to use it. When the weekly digest starts going out it will need an email provider; that provider will be named here before the first digest lands. All of them process data to run Snifflist — none of them get it for purposes of their own.
How long I keep it
The digest address stays until you unsubscribe. Your account and your Sniff List stay until you close the account or ask me to delete it. Server logs are short-lived and rotate at the host. Analytics are counts, with nothing personal to keep.
Your rights
Under the GDPR you can ask for a copy of what I hold about you, have it corrected, or have it deleted — and you can object to a use of it or ask me to restrict it. Write to hello@snifflist.com and I will do it. One person reads that inbox, so expect a couple of days rather than a couple of minutes. Every digest also carries its own unsubscribe link, which needs no email to me at all. If you think I have handled your data badly, you can complain to your national data-protection authority — mine is the Czech Office for Personal Data Protection (ÚOOÚ).
Changes to this page
If what I do with data changes, this page changes with it, and the date below moves. Nothing here is applied retroactively to data you gave me under an older version.
Effective 2 August 2026.