Privacy Policy
Updated
Who is responsible
Noselabo is an independently run hobby project operated by an individual. Noselabo is the project name, not a company or a separate legal entity. The individual operator identified below is the data controller responsible for personal information processed to run Noselabo. Hobby-project status does not remove the privacy responsibilities described in this notice. Contact the operator about access, correction, deletion, restrictions, objections, portability, or a concern about how information is used. You may also contact the data-protection authority that applies to your circumstances.
Information you provide
Account records include your username, email, profile information, and authentication details. Passwords are hashed rather than stored in readable form. Depending on your use, we also process shelf entries, private fragrance records and photos, reviews, Community contributions, saved items, preferences, support requests, and data-rights requests.
Sign-in and security
When you use Google sign-in, Google supplies a verified account identifier and permitted profile information. We use authentication cookies or native session credentials to keep you signed in. Security records can include login activity, IP addresses, and audit events. Verification and reset links contain temporary capabilities; do not share them. New verification, reset, and refresh secrets are hashed in authentication storage.
Private and public content
Private fragrance records are associated with your account and require authenticated owner access. Reviews and Community posts are public contributions. Check the destination before submitting content. Signed-in sample journeys, formulas, and pairings are saved privately to your account and included in account exports and deletion. Earlier device-only Lab notes have no reliable account owner and are not automatically displayed or imported into a signed-in account. Keep copies of important records and protect access to shared devices.
Decant discovery initially shows anonymous fragrance matches. Expressing interest authorizes sharing your username if the other member accepts; acceptance shares both usernames. It does not share email, contact details or location. Blocking or cancelling withdraws the in-app connection, but cannot erase information someone has already seen. Reports are private to the reporter and our operators. Decant updates appear in the app.
Why we use information
We process account and feature data to provide the services you request. Security, abuse prevention, troubleshooting, and necessary service operations support our legitimate interests, subject to applicable law and your rights. Optional analytics and direct marketing rely on the choices or consent required for those activities. We may retain information when a legal obligation or the handling of a claim requires it. Contact the operator if you need further information about the basis for a particular use of your data.
Newsletter and marketing
A newsletter request records an email address, subscription source, and temporary confirmation token. A confirmed subscription records the confirmation time and consent version. Registration and Ko-fi support do not subscribe you. Use the unsubscribe link in any journal email to stop those messages without signing in. We recheck subscription status before sending queued marketing mail. Withdrawal does not stop necessary account or payment-related messages.
Email delivery
We use an email provider to deliver verification, recovery, welcome, journal, and payment-related messages. A temporary delivery queue contains the recipient and message, including an action link when needed. Message content and recipient fields are removed after provider acceptance, expiry, or terminal failure. Delivery metadata is retained for troubleshooting. Click and open tracking are disabled in these templates. The email provider processes messages under its own contractual and operational arrangements.
Ko-fi support
Ko-fi supplies payment notification details such as the payer email, name, amount, currency, transaction reference, and visibility choice. We use the notification to record support and send a thank-you. We do not receive card numbers through this webhook. Matching a contribution to a Noselabo account requires that account to have verified its email. We do not add supporters to marketing lists automatically.
Service providers and international processing
Weather requests send your city or coordinates rounded to two decimal places to Open-Meteo. A shared weather cache keeps the rounded location and forecast for up to an hour; expired entries are removed when new forecasts are cached. Do not enter a street address.
Hosting, database, email, Google sign-in, and any AI service you deliberately use can involve external providers. These providers receive the information needed for the relevant service. For an AI feature, avoid submitting sensitive personal details in prompts. Contact the operator for the current providers, processing locations, retention arrangements, and safeguards applicable to international transfers.
Retention and deletion
Account information is kept while needed to provide the account and meet applicable obligations. Active-record deletion, support records, security logs, provider records, and backups can follow different retention requirements. We do not promise an unverified backup-erasure date. Deleting an account cannot remove copies of public content that other people independently saved. Contact the operator about retained information or a specific erasure request.
Your choices and rights
Use Your data rights and account settings for the available export and deletion controls. The export identifies its included categories; you can request additional information from the operator. We may need proportionate information to verify a request. You can object to direct marketing and withdraw optional consent. Where applicable, you can request access, correction, erasure, restriction, or portability, and lodge a complaint with a supervisory authority.
Updates and contact
This notice is dated above. Material changes will be brought to users' attention as appropriate. Use support or the operator contact below for privacy questions. Never send a password, live session token, or reset link in a support request.
Contact
Noselabo
help@noselabo.com