Rotation

Privacy Policy

Last updated: 16 July 2026

What we collect

Account information. When you create an account with email and password, we receive your email address. The password is never visible to us — Supabase, our authentication provider, stores it in hashed form. If you sign in with Google, Google shares your email address and basic profile name with us instead; no password is involved.

Your collection data. The fragrances you add — name, brand, price and purchase date if you choose to enter them, and a product photo (either one you provide a link to, or one we look up automatically via Fragella, a fragrance product database — see "Who we share data with" below).

Your wear history. Which bottle you mark as worn, on which date, and which bottles you've tagged as worn together (layered). This is the core of what the product does — without it, there's nothing to reflect back to you.

Usage data. We use PostHog, an analytics tool, to understand how Rotation is used so we can improve it. Before you sign in — for example while you're on the landing page — we capture anonymous, aggregate events only: which pages are opened, when visitors arrive and leave, and how they got here (for example, the referring link or campaign). These events are not tied to a person and no analytics identifier is stored on your device. Once you sign in, and only then, this activity is linked to your account — including your email address — so we can understand product events like adding bottles, logging a wear, opening insights, or using search and filters per person as well as in aggregate. We don't record sessions and we don't run in-product surveys.

Error and diagnostic data. If something breaks while you're using the product, our error-monitoring tool automatically captures what went wrong — including your browser, device type, the page you were on, and an approximate location derived from your IP address (city-level, not precise). This exists purely to help us fix real bugs.

Cookies and local storage. Rotation doesn't use cookies. Your sign-in session is stored in your browser's local storage so you stay signed in between visits. Analytics keeps nothing on your device — no cookie, no analytics identifier — with one exception: if you use the "Don't track me" control in the footer, we store a single preference flag locally so we can remember your choice on future visits. That flag exists only to honour your opt-out.

Who we share data with

We don't sell your data, and we don't share it with advertisers. We do use a small number of service providers to actually run the product:

  • Supabase — hosts our database and handles authentication. Holds everything described above.
  • Google — if you choose to sign in with Google, Google shares your email address and basic profile information with us as part of that authentication. This is governed by Google's own Privacy Policy and your Google account settings.
  • Fragella — a third-party fragrance product database. When you search for a fragrance by name or ask us to find a product photo, we send the brand and fragrance name you typed to Fragella to get a match. We don't send your wear history, prices, or any account information to Fragella.
  • PostHog — our analytics provider. Receives the anonymous aggregate pageviews and, once you're signed in, the per-account product events described above.
  • Sentry — our error-monitoring provider. Receives error reports as described above.

Each of these providers may process data outside your home country as part of running their service; none of them are permitted to use what we send them for their own advertising or resold for other purposes.

Your choices

  • You can see all of your own data by using the product itself — your collection, wear history, and account details are all visible in the app.
  • You can delete everything at any time from Settings → Danger zone → Delete account. This permanently removes your account, your collection, your wear history, and everything connected to it. It cannot be undone.
  • You can turn off analytics at any time with the "Don't track me" control in the footer of every page. Your choice is remembered on this device.
  • You can ask us a question about any of this by contacting milesbaker08@gmail.com.

How long we keep data

For as long as your account exists. If you delete your account, the deletion is immediate and permanent — we don't keep a hidden copy "just in case." Routine database backups (kept for a short, limited period for disaster-recovery purposes only) may briefly retain deleted data until they age out, but they aren't used to recover or view anyone's data outside of restoring the whole service after a genuine failure.

Changes to this policy

If what we collect or who we share it with changes, we'll update this page and reflect the new "last updated" date above.