Privacy Policy

Effective and last updated 18 July 2026.

This notice explains how FragSearcher handles personal information. You can compare prices without creating an account. This version reflects U.S. state privacy laws, including the CCPA/CPRA for California residents.

Who is responsible

FragSearcher site operator operates FragSearcher and is the controller or business responsible for the personal information described here. Use our privacy request form.

Information we collect

Category	Examples and source	Purpose
Identifiers and account data	Username, display name, avatar, public account code, and a salted password hash. Password accounts do not require an email address. Existing operator accounts may retain their verified contact address and platform identifier.	Create and secure the account; provide profiles and account features. Passwords are never stored in plain text.
Profile content	Optional bio, location, favorite scent, uploaded images, direct messages, friends, follows, notifications, contact messages, bug reports, moderation records and appeals.	Provide, moderate, and support account features.
Saved information	Watchlist and price alerts.	Provide requested fragrance tools; prevent fraud.
Network and security information	At sign-in we record IP address, a salted IP/device signal, browser user-agent, and time. We receive this automatically from your device and network.	Secure accounts and investigate abuse.
Optional analytics information	After you accept analytics: a random first-party browser identifier and 30-minute session identifier; page paths; searches; browser, operating system and device class; referring-site hostname; approximate country from CDN or language headers; whether the visitor is signed in; structural link/button and form identifiers; outbound retailer hostname; section views; scroll depth and time on page; navigation timing; state-changing endpoint name and response status; and JavaScript error type, script path, line and column. We do not put an IP address or account ID in analytics.	Measure audiences and sessions, understand feature use and retailer referrals, improve search and navigation, diagnose performance and reliability, and prioritize product work.
Analytics consent records	Your accepted, notice-enabled, rejected, or withdrawn choice; consent-policy version and time; where the choice was made; approximate country code and policy mode applied; and whether a Global Privacy Control header was present. A withdrawal record may retain the former random browser identifier after its event history is erased.	Honor and demonstrate privacy choices.
Email preferences and records	Whether you opted into optional marketing, the legal version and time you accepted, and delivery/suppression records.	Honor choices, demonstrate consent, and deliver requested or opted-in email.

Please do not post sensitive personal information in public profiles. FragSearcher does not intentionally collect government identifiers, payment-card data, precise geolocation, health data, biometric data, or other sensitive personal data.

Purposes and legal bases

We process personal information for the following purposes, and where a privacy law requires a specific legal basis we rely on the one noted:

To provide the service - to create your account and provide the watchlist and alerts, messaging, and other features you request.
Security and abuse prevention - to secure the service, prevent fraud and abuse, moderate content, and keep limited security logs. These interests are balanced against user privacy through minimization, short retention, and access controls.
Consent - for optional first-party analytics, optional promotional email, and where law otherwise requires it. Each choice is separate, optional, and can be withdrawn at any time without affecting earlier lawful processing.
Legal compliance - when information must be preserved or disclosed to comply with law, valid legal process, or safety obligations.

How we disclose information

We do not sell personal information, share it for cross-context behavioral advertising, or use targeted-advertising trackers. We disclose only what is needed to:

hosting, database, security, and email providers that process information for FragSearcher;
the hosting platform for necessary account sessions;
other users, when you intentionally publish profile content, send a message;
professional advisers, a successor operator, or authorities when reasonably necessary for legal compliance, fraud prevention, safety, or protection of rights.

FragSearcher Assistant

When you start a browser-assisted search, supported retailers receive your search terms and the ordinary network information that accompanies the request. The assistant sends the search terms, product names, prices, availability, listing and image URLs, and retailer status back to FragSearcher to display and cache your results. A FragSearcher account is required to run these searches.

For supported retailers that require a rendered search page, the assistant may briefly open and close a retailer tab for that search. It reads product listings in tabs opened for your search. Search data is used to provide and troubleshoot the comparison service. Contact us through the support form with questions or privacy requests.

FragSearcher shows the prices your assistant reports to other visitors for up to 24 hours, as ordinary search results and without naming your account. Only prices independently checked against retailers enter the verified search cache, and reports from an account whose prices repeatedly disagree with the retailer are withheld. For abuse prevention, administrators can review the search, submitting account, and a protected identifier derived from the request IP. Submission records are visible to administrators for 30 days. An identifier used to block Assistant submissions is kept while the block is active.

Cookies and browser signals

We use first-party cookies necessary for sessions, security, remembering your choice, and fair search limits. We use a coarse country code supplied by a trusted CDN/hosting header to select the applicable analytics notice; we do not store that code as precise location. Detailed regional behavior is in the Cookie Notice. Because you appear to be in the United States, optional first-party analytics is enabled under a clear notice and you can opt out at any time - this applies only because analytics remains first-party and is not sold or shared for advertising. You can change the choice at any time with “Cookie settings” in the footer.

We honor Global Privacy Control everywhere by disabling optional analytics. “Do Not Track” is not a standardized legal opt-out signal and does not change processing. If sale, sharing, or targeted advertising is introduced, applicable universal opt-out signals will be honored before those activities begin.

Retention

Account information is kept while the account exists, then deleted through the self-service deletion flow unless a limited record is legally required.
Login security events, including IP address and user-agent, are deleted after 180 days.
Raw page-view, search, and interaction analytics is deleted after 12 months. Withdrawing analytics consent deletes that browser identifier's raw analytics immediately. Minimal consent records are deleted after 24 months.
Signed-in sessions expire after 30 days. Signing out revokes that session; changing a password revokes previous password sessions. Password recovery by email is currently unavailable.
Handled contact, bug, privacy, copyright, and intimate-image removal submissions are deleted after 24 months. Unhandled requests remain until reviewed. Moderation, suppression, and legal records are kept only as long as reasonably needed for security, compliance, or a dispute.
Product prices and price history are not personal information and may be kept for the comparison service.

Your privacy rights and choices

Depending on your state, you may have the right to know/access, correct, and delete your personal information, obtain a portable copy, opt out of the sale or sharing of personal information and of targeted advertising and qualifying profiling, and to receive equal service without discrimination for exercising these rights. FragSearcher does not sell or share personal information or serve targeted advertising.

Download an account copy or change optional email from Privacy & email.
Reject or withdraw analytics with “Cookie settings” in the footer. Withdrawal stops collection, removes the analytics cookies, and deletes raw events associated with that browser identifier.
Correct profile information from your dashboard, or permanently delete the account with “Delete my account.”
Submit any other request through the privacy request form. We may verify the request using the account or email concerned. An authorized agent may submit a request, but we may require proof of authority and identity as permitted by law.

We will respond within the period required where you live. If we deny a request, the response will explain why and, where your state provides an appeal right, how to appeal by replying or submitting a new request marked “Privacy appeal.” You may also complain to your state attorney general.

California residents: during the preceding 12 months FragSearcher collected the identifier, internet/network activity, commercial preference, and user-content categories described above, for the listed business purposes. It did not sell or share those categories, use sensitive personal information for an inferrable purpose, or offer a financial incentive for personal information.

Automated processing

Automated controls may rate-limit searches, detect search bots, rank price results, or flag activity for staff review. They do not make decisions that produce legal or similarly significant effects.

Children

FragSearcher is a general-audience service and is not directed to children. A person must be at least 16 to create an account. We do not knowingly collect personal information from a child under 13. If we learn that we have done so, we will delete it. A parent or guardian can contact us through the privacy request form.

International processing

FragSearcher is operated from the United States. Providers may process information in the United States or other countries. Where required, transfers use an applicable legal mechanism and contractual or organizational safeguards.

Security and incidents

We use HTTPS, HttpOnly and SameSite-restricted session cookies, CSRF protection, access controls, rate limits, input sanitization, and image re-encoding. No system is completely secure. If a breach triggers a legal notification duty, affected people and regulators will be notified as required.

Changes

We will update the effective date when this notice changes. Material changes will be presented before they take effect, and fresh consent will be requested where consent is the applicable basis.