Privacy Policy

Noseblind ("we", "us", or "our") operates noseblindblog.com (the "Site") as a fragrance blog and catalog. This policy explains what information is collected when you visit, how it is used, your rights regarding that information, and the legal basis on which we process it. We do not sell your personal information.

Data Controller: Noseblind is the data controller for personal information collected through this Site. You can reach us at anosmic@noseblindblog.com.

When you use the contact form on this Site, we collect the name, email address, and message content you provide. This information is transmitted via EmailJS directly to our inbox and is not stored in any database. It is used solely to respond to your inquiry.

We use Vercel Analytics and Vercel Speed Insights, services provided by Vercel, Inc., our hosting provider. These tools collect:

• Pages visited and navigation paths
• Referring website that brought you here
• Country derived from IP address (IP address is not stored)
• Browser type, operating system, and device category
• Core Web Vitals and page load performance metrics (Speed Insights only)

Vercel Analytics and Speed Insights are cookieless — they do not place any cookies in your browser. Your IP address is used only to derive a country-level location and is not retained. This data is aggregated and used solely to understand site traffic patterns and identify performance issues.

For security purposes, your IP address is temporarily processed when you submit a request to our login endpoint. This is used solely to enforce rate limiting and protect the site against automated login attempts. Your IP address is not linked to any browsing activity or content you view on the Site.

This Site does not use tracking or analytics cookies. No cookies are placed in your browser for advertising, retargeting, or identification purposes.

Vercel Analytics and Speed Insights are cookieless and do not require consent under the ePrivacy Directive.

A session cookie is used solely for the admin area of this Site and is never set for ordinary visitors.

If you are located in the European Union or European Economic Area, we process your personal data under the following legal bases as defined in Article 6 of the General Data Protection Regulation (GDPR):

• Legitimate Interests (Article 6(1)(f))— We use Vercel Analytics to understand how visitors use the Site, identify technical issues, and improve content. As these tools are cookieless and do not retain IP addresses or create individual profiles, we have assessed that this use does not override your rights and freedoms. You have the right to object to this processing at any time (see "Your GDPR Rights" below).
• Contract Performance (Article 6(1)(b)) — When you submit the contact form, we process the information you provide in order to respond to your inquiry.

Information collected through this Site is used exclusively to:

• Respond to inquiries submitted through the contact form
• Understand which content is most valuable to readers
• Identify technical issues such as broken pages
• Improve the overall experience of the site

We do not use any data collected for advertising, retargeting, or any form of profiling.

We work with the following third-party services that may receive data about you:

• Vercel, Inc.— hosts this Site and provides Vercel Analytics and Speed Insights. As our hosting provider, all web traffic passes through Vercel's infrastructure. Vercel Analytics collects cookieless, aggregated page-view data; Speed Insights collects Core Web Vitals performance metrics. Neither service stores your IP address or places cookies. Vercel is headquartered in the United States; for transfers from the EU/EEA, Vercel relies on Standard Contractual Clauses as an approved transfer mechanism under GDPR Article 46. Vercel's privacy policy is available at vercel.com/legal/privacy-policy.
• EmailJS — processes contact form submissions to deliver your message to our inbox. EmailJS does not retain your message content after delivery. Their privacy policy is available at emailjs.com/legal/privacy-policy.
• Upstash, Inc. — provides a serverless Redis database used exclusively for rate limiting on our login endpoint. When a login attempt is made, your IP address is transmitted to Upstash and stored for up to 15 minutes to enforce request limits. No other personal data is sent to Upstash, and this data is never linked to your browsing activity on the Site. Upstash is headquartered in the United States; for transfers from the EU/EEA, Upstash relies on Standard Contractual Clauses as an approved transfer mechanism under GDPR Article 46. Their privacy policy is available at upstash.com/trust/privacy.

If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) grants you the following rights with respect to your personal data:

• Right of Access (Article 15) — You may request a copy of the personal data we hold about you and information about how it is processed.
• Right to Rectification (Article 16) — You may request correction of inaccurate personal data.
• Right to Erasure / "Right to Be Forgotten" (Article 17) — You may request deletion of your personal data where there is no compelling reason for its continued processing. Contact form data is not retained by us beyond email delivery.
• Right to Restriction of Processing (Article 18) — You may request that we restrict how we use your data in certain circumstances.
• Right to Data Portability (Article 20) — Where processing is based on consent or contract, you may request your data in a structured, commonly used, machine-readable format.
• Right to Object (Article 21) — You have the right to object at any time to processing of your personal data based on our legitimate interests, including analytics tracking. To exercise this right, contact us directly.
• Right Not to Be Subject to Automated Decision-Making (Article 22) — We do not make any automated decisions about you, including profiling, that produce legal or similarly significant effects.

To exercise any of the above rights, please contact us at anosmic@noseblindblog.com. We will respond within 30 days. You will not be charged for making a request.

Right to Lodge a Complaint: If you believe we have not handled your personal data in accordance with the GDPR, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information:

• Right to Know — You may request details about the categories of personal information we collect and how it is used.
• Right to Delete — You may request deletion of personal information we have collected. Contact form submissions are not retained by us beyond email delivery.
• Right to Opt Out of Sale — We do not sell personal information. There is nothing to opt out of.
• Right to Non-Discrimination — Exercising any of the above rights will not affect your access to this site.

Contact form messages are received directly in our inbox and are retained only as long as reasonably necessary to respond to your inquiry. We do not store them in any separate database.

IP addresses processed for rate limiting purposes are retained for a maximum of 15 minutes, after which they are automatically deleted by Upstash.

This site is not directed at children under 16 (or under 13 where applicable law permits a lower age). We do not knowingly collect any information from children. If you believe a child has provided information through this site, please contact us at anosmic@noseblindblog.com so we can address it promptly.

We may update this policy as the site evolves or as legal requirements change. When we do, the effective date at the top of this page will be updated. Material changes will be noted here. Continued use of the site after any change constitutes acceptance of the updated policy.

If you have questions or concerns about this privacy policy, would like to exercise any of your rights, or have a complaint about how we handle your data, please contact us at anosmic@noseblindblog.com. We will respond within 30 days.