Privacy policy

Data controller

Jean Baptiste, publisher of Pimp My Scent — contact@pimpmyscent.com

Data collected

When creating an account: email, username, password (stored hashed, never in plain text). Depending on your use of the site: gender preferences, bio, profile picture, perfume collection, ratings and comments, bottle photos. IP addresses are briefly kept in server technical logs for security purposes (abuse prevention, rate limiting).

Purposes

This data is used to operate your account and related features (collection, recommendations, reviews), to moderate published content, and to secure the service. When requesting a password reset, your email is passed to our email delivery provider (Brevo) solely to send that email.

Cookies

A session cookie (technical, required) keeps you logged in. Preference cookies (theme, language, cookie choice) remember your settings. If you accept it via the dedicated banner, an audience-measurement cookie (Google Tag Manager) is set; without consent, it is not loaded. You can change your choice at any time via the "Manage cookies" link in the footer.

Retention period

Your account data is kept as long as the account is active. You can request its deletion at any time by contacting us.

Recipients

Data is hosted with OVH SAS (France). No data is sold or transferred to third parties for commercial purposes.

Your rights

Under the GDPR, you have the right to access, rectify, erase, object to and port your data. To exercise these rights, contact us at contact@pimpmyscent.com. You may also file a complaint with the CNIL (www.cnil.fr).

Security

Passwords are hashed (bcrypt) and never stored in plain text. The session cookie is marked httpOnly to limit script-based access.