Olfact
Français

Privacy Policy

Last updated: 2 October 2026

1. Introduction

This policy explains which personal data is processed when you use the website olfact.me (the “Site”), for what purpose, on what legal basis, and what your rights are. It complies with the General Data Protection Regulation (GDPR) and the French “Informatique et Libertés” act.

Olfact has chosen data minimisation: the Site currently works without user accounts or forms. An additional audience measurement tool (Google Analytics) is only enabled after your explicit consent, collected through the banner shown at the bottom of the page.

2. Data controller

Fares Mekhalfa, sole proprietor (EI)
SIRET: 988 401 881 00012
28 rue de Cascina, 13200 Arles, France
Email: faresdevweb13@gmail.com

3. Data actually processed

To date, the Site only processes:

  • Technical connection data (IP address, browser and device type, pages viewed, date and time), generated automatically in our host’s logs, as for any website.
  • The content of an email that you voluntarily send us (your address and your message), solely to reply to it.
  • Questionnaire answers: to compute your recommendations, your answers are sent to our servers. An anonymous session is also stored in our database (answers, computed scent profile, recommended perfumes, perfumes you click on, duration of the journey, questionnaire version) so that we can measure and improve the questionnaire. It contains no name, no email address, no IP address, no cookie and no identifier that could be used to recognise you.
  • Anonymous audience statistics (page views, country, device type, traffic source), through a cookie-free tool that cannot identify you or track you from one site to another.
  • If you consent through the banner at the bottom of the page: additional audience statistics through Google Analytics (pages viewed, origin, device, anonymised IP), which sets cookies. This processing only takes place after your consent and never before.

What the Site does not do:

  • The questionnaire does not ask for your name or email address and creates no account: the sessions it stores are anonymous (see above).
  • No account, no sign-up form: no name or email address is collected without your knowledge.
  • Our database contains the perfume catalogue and these anonymous questionnaire sessions — no personal user data.
  • No selling or renting of data. Ever.

4. Purposes and legal bases

  • Providing, securing and maintaining the Site (connection logs, abuse prevention) — legal basis: the publisher’s legitimate interest.
  • Replying to your requests sent by email — legal basis: legitimate interest (handling your request).
  • Computing your recommendations, then measuring and improving the questionnaire from anonymous sessions — legal basis: legitimate interest.
  • Measuring audience anonymously to improve the Site — legal basis: legitimate interest, as the tool used is cookie-free and holds no identifying data.
  • Measuring audience through Google Analytics — legal basis: your consent, collected through the cookie banner and freely withdrawable at any time (see section 5).

5. Cookies and trackers

Basic audience measurement is provided by Vercel Web Analytics and Vercel Speed Insights (real loading-time measurement), two cookie-free and anonymous tools: no data that could identify you is collected, so no consent is required for them. Only cookies or data strictly necessary for the proper functioning and security of the Site may otherwise be used.

The Site additionally offers Google Analytics, which sets audience-measurement cookies. This tracker is never loaded by default: on your first visit, a banner asks for your consent.

  • If you click “Accept”, Google Analytics loads and your visit is measured (anonymised IP).
  • If you click “Decline”, or make no choice, Google Analytics is never loaded and no cookie is set for this purpose.
  • Your choice is stored in your browser (local storage); the banner does not reappear unless you clear it. To change your choice, clear the Site’s browsing data or write to us.

The Site’s fonts are hosted on our own domain: your browser makes no request to Google’s servers to display them, so your IP address is not transmitted to them for this purpose.

If other tools involving trackers were added in the future (e.g. Google AdSense advertising, affiliation), this policy would be updated and, if needed, the consent banner extended accordingly.

6. Recipients and processors

Technical data is processed by our infrastructure providers:

  • Vercel Inc. (hosting of the Site) — United States.
  • Supabase (database of the catalogue and of the anonymous questionnaire sessions) — which holds no personal user data.
  • Vercel Web Analytics and Vercel Speed Insights (audience and performance measurement, anonymous and cookie-free).
  • Google Ireland Limited (Google Analytics) — United States through its subsidiaries, only if you have consented through the cookie banner.

No data is sold or passed to third parties for commercial purposes.

7. Transfers outside the European Union

Our host (Vercel) may process technical data in the United States. The same applies to Google Analytics, if you have consented. These transfers are covered by appropriate safeguards within the meaning of the GDPR (the European Commission’s standard contractual clauses and/or participation in the Data Privacy Framework).

8. Retention periods

  • Technical logs: kept for a short period by the host, for security and diagnostic purposes.
  • Emails: kept for as long as needed to handle your request, then archived or deleted.
  • Anonymous questionnaire sessions: kept for 13 months at most, then deleted. They contain no identifier and cannot be used to recognise you.

9. Your rights

Under the GDPR, you have the following rights:

  • right of access to your data;
  • right to rectification;
  • right to erasure;
  • right to object;
  • right to restriction of processing;
  • right to data portability.

To exercise these rights, write to faresdevweb13@gmail.com. We reply within one month.

If you believe your rights are not being respected, you may lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr.

10. Third-party links and sites

Pages may link to third-party sites (for example brand or retailer sites). These sites have their own privacy policies, which we invite you to read; Olfact is not responsible for how they process data.

11. Minors

The Site is intended for adults or for minors over 15. No personal data is knowingly collected from children under 15.

12. Changes to this policy

This policy may change, in particular if new features are added (member accounts, audience measurement, advertising, affiliation). The date of the last update appears at the top of the page.

13. Contact

For any question about your data: faresdevweb13@gmail.com