Privacy
Short version: if you just read the site, we know roughly what pages get visited and nothing about you. If you make an account, we store your email, your username and the bottles you add. Our affiliate partners see the clicks that leave for their stores. Here's the detail.
Accounts
Accounts are optional and run on Supabase, which hosts our database and handles sign-in. When you sign up we store:
- your email address and password (Supabase keeps the password hashed; we never see it),
- your username,
- the bottles you mark as owned or wishlisted, plus your display settings (who you're shopping for, shelf style),
- whether you've opted in to email updates, when and where you chose.
Your username and your shelf are public: anyone can see them at thelastspritz.com/u/yourname. Your email address and your email choice are not. Signing in keeps a session token in your browser's local storage so you stay logged in.
You can clear your collection any time from your account. To delete the account itself, email us at thelastspritz@gmail.com from the address you signed up with and we'll remove it.
Email updates
The sign-up form has a box, checked by default, that reads “Email me occasional updates from The Last Spritz.” Leave it checked and we may email you now and then. Untick it and we won't. Accounts that existed before the box was added were opted in.
Two ways out, both instant: the Email updates toggle on your account page, or the unsubscribe link at the bottom of every email we send.
Google Analytics
We use Google Analytics to see which pages get read and which links get clicked, including clicks out to retailers. It sets first-party cookies (named _ga and _ga_ followed by an ID) to tell a returning visitor from a new one, and Google receives your IP address and browser details to produce those reports. We see totals, not names. Google's own privacy policy covers what it does with the data, and Google offers a browser add-on to opt out of Analytics on every site.
We also use Vercel Analytics and Speed Insights from our hosting provider. Those are cookieless and count page views and load times.
Affiliate links
The Last Spritz is paid by commission. When you click through to Amazon and buy, Amazon credits the sale to us through its own cookie. FragranceNet links run through an affiliate network (currently Rakuten Advertising), which does the same for FragranceNet orders. Those companies see the click and the purchase on their side under their own privacy policies. We never see what you bought or anything about you, only that a sale happened. Blocking their cookies doesn't change the price you pay; it just means we don't get credit.
Other things your browser talks to
- Weather on the fragrance finder. If you allow location, your browser sends your rough coordinates to Open-Meteo to fetch the local forecast. We don't store them.
- Videos. Embedded YouTube videos only load when you press play, from YouTube's privacy-enhanced domain. Once playing, YouTube's policy applies.
Questions
Anything unclear, or anything you want removed, email thelastspritz@gmail.com.