Privacy and cookies

Websko sp. z o.o., ul. Morelowa 8, 55-010 Święta Katarzyna, Poland, entered in the register of entrepreneurs kept by the District Court for Wrocław-Fabryczna in Wrocław, IX Commercial Division of the National Court Register under KRS 0000831013, VAT ID PL8961593407, share capital PLN 7,500. Contact: hello@frag.watch.

• Account data (email address, sign-in provider identifier), your watchlist, collection, ratings, review texts and alerts: to provide the features you use (GDPR Art. 6(1)(b)).
• In the app, before you sign in: an anonymous account identifier with no name, email or phone attached, so your ratings and lists work on that device. Signing in with Apple or Google links the email they provide to that account so it follows you across devices and to the site.
• Price alerts: the bottles, sizes and prices you watch, your email address, and, when you allow notifications in the app, a push token for each device, so the alert can reach you (Art. 6(1)(b)). You choose the channels in the app and can stop any alert from the email or the watchlist.
• Your market (country) from your IP address, your device's region setting or your own choice, your settings and technical data: to show the right prices and keep the service working and secure (Art. 6(1)(f)). We never access GPS or precise location.
• Basic product events tied to your account identifier (for example a session start or which cards were shown) and aggregated usage counts: to improve the service (Art. 6(1)(f)). No third-party analytics or advertising SDKs, no tracking across other apps or sites.

We do not sell personal data and do not use it for advertising.

Data is processed on our behalf by these providers, each bound by a data processing agreement:

• Supabase (database, authentication, file storage; EU region) for your account and everything in it;
• Netlify (hosting of the website);
• Resend (sending the price alert emails);
• Expo (delivering push notifications to the app; Expo holds a device push token, never your email or lists);
• Apple or Google, only if you sign in with them; the sign-in happens on their systems under their own policies.

Some may process data outside the EEA under the European Commission's standard contractual clauses or another lawful safeguard. The app contains no advertising or analytics SDK and does not track you across other apps or websites.

The app asks for permission before it sends any push notification; you can withdraw it any time in your phone's settings or under Profile → Notifications in the app, and choose there whether alerts come by push, by email or both. Every alert email has an unsubscribe link. We send no marketing messages.

We use only cookies and browser storage needed for the service to work: sign-in, your market and settings, and a referral code if you arrived through a partner link. We use no advertising or third-party analytics cookies. Shops and affiliate networks you visit through our links may set their own cookies under their own policies.

We keep data while your account exists and delete it when the account is deleted, with backups removed within their normal rotation (up to 30 days). The numeric scores you gave fragrances stay in anonymised form, with the link to your account permanently removed. You can delete the account yourself in the app (Profile → Delete my account) or by email; see Delete your account. You may request access, correction, deletion, restriction, portability or object to processing at hello@frag.watch, and lodge a complaint with a supervisory authority (in Poland: UODO).

frag.watch is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has been using it, contact us and we will delete the account.

We may update this policy; the date above shows the current version.