recommendmeafragrance

Privacy Policy

Last updated July 11, 2026. The short version: we store as little as possible, and most of your game data never leaves your device.

What stays on your device

Your game progress, streaks, daily puzzle history, discovered-fragrance shelf, and game preferences are stored in your browser's local storage. We do not receive this data unless you create an account and it syncs (see below). Clearing your browser data deletes it.

What we store if you sign in

Accounts are optional and sign-in is via Google. When you sign in we store your Google account identifier, your email address, and your first name for display, plus a login session identifier and a copy of your game progress so it can follow you across devices. We never see your Google password and request no access to your Gmail, contacts, or anything beyond basic profile info.

Account data lives in a managed Redis database (Upstash). You can stop syncing at any time by logging out.

The Concierge chat

Messages you send to the Concierge are forwarded to an AI model provider (Groq, or Google if you supply your own Gemini key) to generate a reply. Do not include personal information in chat messages. We track daily token usage counters per account to keep the shared chat budget fair; the counters reset daily and we do not keep chat transcripts.

If you optionally add your own Gemini API key, it is stored only in your browser's local storage, sent along with your own chat requests, and used transiently to call Google on your behalf. We never store or log it on our servers, and removing it in the chat settings deletes it from your browser.

Cookies

We set two cookies: a login session cookie if you sign in (essential, HTTP-only), and an anonymous random identifier used to meter the Concierge's daily budget. Neither tracks you across other websites, and we use no third-party analytics or advertising cookies.

Affiliate links

Buy links may go through Commission Junction (CJ), an affiliate network. If you click one, CJ may set its own cookies to attribute a purchase, governed by CJ's privacy policy. We may earn a commission at no extra cost to you.

Rate limiting

To protect the service, our servers keep short-lived request counters keyed by IP address. They expire automatically within a day and are not used for anything else.

Deleting your data

Local data: clear your browser storage for this site. Account data: contact us at ibrahimawab06@gmail.com from any channel and we will delete your account and synced progress.

Changes

If this policy changes, the date at the top changes with it. Material changes will be noted on the site.