Privacy
Version 2026-08-17
Short version: we collect what we need to sell you a bottle and get it to you, we do not sell it to anybody, and there are no trackers on this site. The longer version is below, and it describes what the code actually does rather than what a template says.
What we collect
- When you buy something: your name, email address, and — if it is being shipped — a delivery address. A phone number only if you give one.
- When you have an account: the same, plus which fragrances you have saved and which you have asked to be told about.
- When you sign in: the six-digit codes we send are stored only as a one-way hash, never as the code itself, and they are useless after ten minutes.
- Automatically: the IP address a sign-in request came from, kept so that somebody cannot ask for ten thousand codes to be sent to your inbox.
- A count of how often each fragrance is added to a cart. It records that a bottle was picked up, not that you picked it up — there is no name, no account and no session attached to it, and it cannot be traced back to anybody.
What we do not collect
- Your card details. Payment happens on Stripe's own page — the card number never reaches this website, and we could not store it if we wanted to.
- Anything from advertising or analytics trackers. There are none on this site.
- Your browsing history anywhere other than here.
Cookies
- Two, both strictly necessary, neither used for advertising. One remembers what is in your cart. One keeps you signed in.
- Both are httpOnly, meaning no script running in your browser can read them.
- There is no cookie banner because there is nothing to consent to — we set nothing you did not ask for by using the shop.
Who else sees it
- Stripe processes payments and receives what it needs to take one.
- Postmark sends our email — order confirmations, sign-in codes, and stock alerts you asked for.
- Railway hosts the site and Neon stores the database.
- Nobody else. We do not sell your information, we do not share it for advertising, and we have no interest in doing either.
Marketing
- We only send offers if you ticked the box asking for them. Buying something is not consent to be marketed at.
- That box is separate from agreeing to the terms, deliberately, and it is unticked by default.
- Every marketing email has an unsubscribe link and it works immediately.
- Alerts you asked for — back in stock, price drops on something you saved — are not marketing and are controlled separately in your account.
How long we keep it
- Orders are kept as long as the business exists. They are our accounting records and we are not free to delete them.
- Sign-in codes stop working after ten minutes; the record that one was requested is kept so abuse can be spotted.
- Everything else goes when you ask us to delete your account.
Getting it deleted
- Email us and say so. We will remove your account, saved items and alerts.
- Orders you actually placed stay, because they are financial records — but they stop being connected to an account you can sign into.
- You can also ask for a copy of what we hold. It is a small shop; a person will read your message and answer it.
Children
- This shop is run by a teenager, but it sells to adults and is not aimed at children under 13, and we do not knowingly collect their information.
- If you believe a child has given us information, tell us and we will remove it.
Who we are
This shop is operated by FRAGRIVO LLC, a limited liability company organised in Indiana on August 17, 2026. Write to [email protected] about anything on this page.
The business is in the process of being formally registered. This document will be updated with the registered address and the governing jurisdiction once that is complete. Nothing about what we collect or who sees it changes at that point — only the details of who “we” are, stated more precisely.