Who is responsible

This notice covers the free SCENTIKI website at scentiki.com and related support. The data controller and service operator is Khalid Hatif, Runebergsgatan 2, 416 58 Göteborg, Sweden. Privacy questions and data-rights requests can be sent to support@scentiki.com.

Information SCENTIKI handles

  • Account and security: email address, encrypted authentication credentials handled by Supabase, one-time-code requests, authentication events, account identifiers and session information.
  • Profile and account activity: display name, username, biography, location, private or approved profile photo, saved scents and recent Find results when those features are used.
  • Community contributions: ratings, review text, structured scent answers, Similar Scents votes and suggestions, uploaded review photos, moderation status, reports, blocks and the version and time of accepted contribution terms.
  • Support: the sender address, message and information needed to answer a support, safety, privacy or deletion request.
  • Operations and security: request metadata, IP address, timestamps, response status, authentication events and error details made available by the hosting and database providers.
  • Optional product analytics: analytics is not active at launch. If it is activated later after consent, it may process page path, referral and campaign source, broad device and browser information, country-level location and coarse events for Find progress, result counts, search outcomes, public scent or house views, registrations, affiliate clicks, error categories and performance buckets. Search text, email addresses, account IDs, review text and exact Find answers will not be sent.

Public catalogue browsing, Search and Find do not require an account. Current Find answers are processed in the browser. An account is required only for features such as syncing saved scents, profiles and community contributions. SCENTIKI asks users not to include sensitive personal information in profiles, reviews or photos.

Why information is used

  • Provide sign-in, profiles, saved scents, recent discoveries, reviews, photos and Similar Scents contributions as part of the service you request.
  • Moderate community content and enforce the Terms and Community Guidelines.
  • Protect accounts, prevent abuse, maintain service reliability and establish or defend legal claims where necessary.
  • Answer support, privacy and deletion requests and meet applicable legal obligations.
  • With your consent, understand aggregate traffic, discovery funnels, unsuccessful searches, popular public catalogue pages and technical reliability so SCENTIKI can improve the service.

Legal grounds

  • Contract: account access, profile and collection features, and contributions you choose to submit under the Terms.
  • Legitimate interests: service security, abuse prevention, reliability, support and proportionate community moderation. SCENTIKI balances these interests against users' rights.
  • Legal obligation: valid data-protection, legal or regulatory requests.
  • Consent: optional Plausible Analytics and any future affiliate technology that requires access to browser information. Optional categories remain off until you choose them and can be withdrawn in Cookie settings.

Service providers and sharing

SCENTIKI uses Cloudflare to deliver and protect the website and Supabase for authentication, database functions, account data and private file storage. Messages sent to support@scentiki.com are forwarded by Porkbun to a mailbox operated by Google. These providers receive only the information needed for their relevant service. Plausible Analytics is not active at launch.

If Plausible Analytics is activated later, this notice and the Cookie policy must remain accurate and the service will load only after Analytics consent. Plausible states that visitor data is processed and stored in the EU on European-owned infrastructure, does not use cookies or persistent identifiers, does not retain raw IP addresses or user-agent strings, and applies a DPA automatically to customers. No analytics event will be deliberately linked to a SCENTIKI account.

Providers may process information outside Sweden or the EEA. Where GDPR requires a transfer safeguard, SCENTIKI relies on the provider's applicable adequacy mechanism, standard contractual clauses or another lawful safeguard. Information about the applicable safeguard can be requested from support.

SCENTIKI does not sell personal information or use it for behavioural advertising. Information may be disclosed when reasonably necessary to comply with law, protect users or the service, or complete a business transfer subject to appropriate safeguards.

What other people can see

Your email address, saved scents, profile photo, individual Similar Scents vote and account identifier are not public. A submitted rating, review text and review photo are normally shown to other visitors immediately. Similar Scents totals may include your vote without identifying you. The current website does not publish profile fields or profile photos to other visitors.

Retention and deletion

  • Account, profile, saved scents and active contributions: kept while the account or contribution remains active, then removed through the applicable deletion workflow.
  • Photos: review photos remain while the related review is active and are deleted with that review. Account-private profile photos remain until replaced or the account is deleted. Limited moderation or legal records may be retained separately where necessary.
  • Moderation and abuse records: a limited record may be kept for up to 12 months after removal to prevent repeated abuse, handle an appeal or establish legal claims. It may be kept longer only while a specific dispute or legal duty requires it.
  • Support and privacy correspondence: normally deleted within 24 months after the matter is closed, unless a shorter period is appropriate or a legal dispute requires longer retention.
  • Security and diagnostic information: kept according to the configured provider log period and only as long as needed to investigate reliability, fraud or security events. SCENTIKI does not create a separate permanent browsing history.
  • Analytics: SCENTIKI's launch configuration targets a rolling 14-month reporting period. Analytics will not be activated until that period, or an equivalent deletion routine, is confirmed in the selected Plausible plan. Site statistics can be deleted from Plausible at any time.
  • Consent record in this browser: the consent notice version, last-updated time and selected categories remain in local storage until you clear browser data or replace the choice in Cookie settings.
  • Provider backups: deleted information may remain inaccessible in rotating backups until the provider's normal backup cycle overwrites it. It is not restored to active use except for disaster recovery, after which the deletion request will be reapplied.

See Delete your SCENTIKI account for the signed-in and support request paths. You can also delete individual reviews, similarity votes and saved scents without deleting the whole account.

Browser storage and tracking

The website stores an authenticated session in browser sessionStorage so signed-in features work. It also stores your consent notice version, timestamp and category choices in localStorage. Plausible Analytics is blocked until Analytics consent. The launch configuration does not enable behavioural advertising or individual marketing profiling. Read the Cookie and browser storage policy for the complete current inventory and use Cookie settings in the footer to change or withdraw a choice.

Your rights

Depending on the situation, you may have rights to access, correct, erase, restrict or receive your information, and to object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing. SCENTIKI may need to verify that a request concerns your account. Send requests to support@scentiki.com. SCENTIKI normally responds within one month, subject to the extensions permitted by GDPR. You also have the right to complain to Integritetsskyddsmyndigheten or the supervisory authority where you live.

Security and children

SCENTIKI uses access controls, row-level security, private upload areas and narrow server functions to protect account data. No online service can promise absolute security. SCENTIKI is not directed to children under 13. If you believe a child has provided personal information, contact support.