ScentSpinLegal
Privacy Policy
Effective date: October 22, 2026
1. What we collect
ScentSpin ("we", "us") is a small service operated from San Francisco, California. We collect only what we need to run it.
If you make a free account
- your email address, when you created the account and when you confirmed it;
- the campaign link you arrived through (if any) and the find you were opening when you signed up;
- the finds you view, save and open while signed in, and how many store visits you've used this month;
- your visitor id from before you signed up (see "When you browse"), which we link to your account so we can see what led you to join.
If you joined our earlier email list (the waitlist)
- your email address;
- optionally: your name, which platforms you buy on, your approximate monthly buying volume, and how you heard about us;
- your browser's user-agent string and the time you signed up.
If you set an alert or get the daily email
- your email address and what the alert watches for (a house, a bottle, a price limit);
- which emails we sent you and when, so you never get the same find twice.
If you become a member
- your email address, your plan and its status, and a reference to your subscription at Stripe. Stripe collects your card details and billing address directly; we never receive them. When you upgrade from a free account we pass your email to Stripe's checkout, so the subscription matches your account;
- the finds you save, so they follow you to every device.
When you browse
- a random visitor id in a cookie, with the finds you view, save or open, so we can see which finds people find useful. While you're signed out it isn't linked to your name or email; if you make an account, we link it to that account.
If you have owner access
- a sign-in cookie (a signed HMAC token) so we know you're logged in;
- the actions you take on listings in the app, such as tapping Got it or Pass, and the price you paid if you choose to enter it;
- standard server logs: the pages and API routes requested, timestamps, your IP address and user-agent. Our hosting provider generates these automatically.
What we don't collect
We don't use advertising trackers or third-party analytics scripts. We don't ask for or store payment card numbers. We don't connect to your accounts on any marketplace and never see your purchases.
Some "Open listing" links may be affiliate links: if you buy after following one, the marketplace may pay us a commission at no cost to you, and it may set its own cookies under its own privacy policy.
2. How we use it
| Data | Why we use it |
|---|---|
| Account details and activity | To sign you in, apply plan limits, prevent abuse, and learn which finds and campaigns lead people to sign up and upgrade, so we can improve ScentSpin. |
| Email-list email and details | To send ScentSpin updates, and to understand who's interested so we build the right thing. |
| Alert and daily-email details | To email you matching finds and the daily digest. Every email has a one-click stop link. |
| Membership and saves | To give members instant finds and saves on every device, and to end access when a subscription ends. |
| Visitor id and views | To count visits and learn which finds are useful, in aggregate. |
| Sign-in cookie | To keep you logged in and keep everyone else out. |
| Got it / Pass actions and price paid | To improve deal scoring (for example, learning which listings people actually buy and at what price) and to keep your own feed relevant. |
| Server logs | To keep the service running, debug problems and detect abuse. |
We don't sell your personal information, and we don't share it with third parties for their own marketing. We share data only with the service providers below, when the law requires it, or to protect the Service and its users.
3. Cookies
ScentSpin sets only its own first-party cookies, none for advertising:
ss_member: set when you make an account or sign in with an email link; a signed token that keeps you signed in for 30 days;ss_auth: the operator's sign-in;ss_uid: a random visitor id used to count visits and views; not linked to your name or email unless you make an account.
Clearing your browser's cookies signs you out and resets the visitor id.
We also use your browser's local storage for conveniences such as finds saved on this device, recently viewed finds and when you last visited. That data stays in your browser; for members, saved finds are also stored with us so they follow you.
4. Who processes it
We rely on a few providers to run ScentSpin. Each processes data on our behalf under its own privacy and security terms.
| Provider | Role | Location |
|---|---|---|
| Vercel | Hosts the web app and generates server logs. | United States |
| Turso | Hosts our database, including accounts, email-list entries and your in-app actions. | United States |
| Anthropic | Provides the AI model (Claude) that reads marketplace listing photos and titles. See section 5. | United States |
| Stripe | Handles checkout, subscriptions and card details for memberships. | United States |
| Resend | Sends alert, digest and sign-in emails. | United States |
5. Marketplace listings and AI
ScentSpin's core job is reading public listings. To identify bottles and spot problems, we send listing photos and titles to Anthropic's Claude model. These are public images and text posted by sellers on marketplaces and auction sites. They are not your data: we never send your email, your actions, your logs or anything else about you to the AI model.
We cache the model's answers so we don't pay to analyze the same listing twice.
6. How long we keep it
- Accounts and account activity: for as long as you have an account. Deleted on request.
- Email-list entries: until you unsubscribe or ask us to remove you.
- In-app actions: for as long as you have an account, because they feed the scoring model. Deleted on request.
- Server logs: kept by our hosting provider for a short rolling window (typically days to a few weeks) and then discarded.
- Sign-in cookie: lives in your browser until you sign out or clear it.
7. Your rights
You can ask us at any time to:
- tell you what personal data we hold about you;
- correct it;
- delete it, including closing your account or removing you from our email list;
- stop emailing you (every product email will also have an unsubscribe option).
Email cole@scentspin.com from the address you signed up with, so we can confirm it's you. We'll respond within 30 days, usually much sooner.
California residents
Under the California Consumer Privacy Act (CCPA/CPRA) you have the right to know what personal information we collect and how we use it, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising those rights. We do not sell or share your personal information as those terms are defined in the CCPA, so there is nothing to opt out of. To exercise any right, use the contact above.
Visitors from the EU, UK and elsewhere
ScentSpin is operated from and hosted in the United States, and the providers listed above process data there. If you use the Service from outside the US, your data will be transferred to and processed in the US, where privacy laws may differ from your own. By using the Service you agree to that transfer. Where the GDPR or UK GDPR applies, our legal basis is our legitimate interest in running the service you asked to join and, for product emails, your consent, which you can withdraw at any time.
8. Children
ScentSpin is for adults. We don't knowingly collect data from anyone under 18. If you believe a minor has given us personal information, email us and we'll delete it.
9. Security
We use encrypted connections (HTTPS) throughout, signed cookies for sign-in, and access to our database is limited to the operator. No system is perfectly secure, so we can't promise your data can never be accessed or disclosed, but we'll tell you promptly if we learn of a breach affecting you.
10. Changes to this policy
We'll update this policy as ScentSpin changes. We'll change the effective date at the top and, for material changes, email everyone with an account or on our email list before they take effect.
11. Contact
ScentSpin is operated from San Francisco, California, USA. For privacy questions or requests, email cole@scentspin.com.