Rotation

Privacy Policy

Last updated: 18 October 2026

What we collect

Account information. When you create an account with email and password, we receive your email address. The password is never visible to us — Supabase, our authentication provider, stores it in hashed form. If you sign in with Google, Google shares your email address and basic profile name with us instead; no password is involved.

Your collection data. The fragrances you add — name, brand, price and purchase date if you choose to enter them, and a product photo (either one you provide a link to, or one we look up automatically via Fragella, a fragrance product database — see "Who we share data with" below).

Your wear history. Which bottle you mark as worn, on which date, and which bottles you've tagged as worn together (layered). This is the core of what the product does — without it, there's nothing to reflect back to you.

What to Wear suggestions. When you ask for options, Rotation records your request, the suggestions and any interrupted save so you can check it after a reload. Suggestion and request details are available for 90 days from the original suggestion. Checking, retrying or correcting a save does not restart that period. Details that are 90 days old or older are excluded from the app and downloads and removed by regular background cleanup. In Settings, you can download or delete suggestion history for your current profile and turn recommendations off. Deleting suggestion history keeps your recorded wears and whether they came from a suggestion. Minimal retry, removal and save-status records help prevent a retry from recreating a removed wear. They expire at the original 90-day deadline and are removed by regular background cleanup. Recorded wears chosen from suggestions stay separate from independent wear evidence.

Usage data. We use PostHog, an analytics tool, to understand how Rotation is used so we can improve it. Before you sign in — for example while you're on the landing page — we capture anonymous, aggregate events only: which pages are opened, when visitors arrive and leave, and how they got here (for example, the referring link or campaign). These events are not tied to a person and no analytics identifier is stored on your device. Once you sign in, and only then, this activity is linked to your account — including your email address — so we can understand product events like adding bottles, logging a wear, opening insights, or using search and filters per person as well as in aggregate. We don't record sessions and we don't run in-product surveys.

Daily usage counts. When you are signed in on the website, Rotation also keeps a daily record of account presence and counts of a small set of actions: recording a wear or no-wear, adding, editing or archiving a bottle, intentionally consulting your wardrobe, and answering an Observation question. As advisory features become available, these counts can also include accepting or dismissing a suggestion and completing a comparison. These first-party counts do not store the pages or content you viewed, search text, session details or time spent. Daily records are kept for 400 days and then combined into monthly counts. Temporary records used to prevent duplicate counting during retries are removed within 26 hours. The daily and monthly records are deleted with your account. The “Don't track me” choice also stops this measurement on this device. Actions through assistant tools are not included in these counts.

Error and diagnostic data. If something breaks while you're using the product, our error-monitoring tool automatically captures what went wrong — including your browser, device type, the page you were on, and an approximate location derived from your IP address (city-level, not precise). This exists purely to help us fix real bugs.

Cookies and local storage. Rotation doesn't use cookies for analytics or advertising. Our hosting provider sets essential security cookies that help tell people apart from automated traffic. Your sign-in session is stored in your browser's local storage so you stay signed in between visits. Analytics keeps nothing on your device — no cookie, no analytics identifier — with one exception: if you use the "Don't track me" control in the footer, we store a single preference flag locally so we can remember your choice on future visits. That flag exists only to honour your opt-out.

Who we share data with

We don't sell your data, and we don't share it with advertisers. We do use a small number of service providers to actually run the product:

  • Supabase — hosts our database and handles authentication. Holds everything described above.
  • Google — if you choose to sign in with Google, Google shares your email address and basic profile information with us as part of that authentication. This is governed by Google's own Privacy Policy and your Google account settings.
  • Fragella — a third-party fragrance product database. When you search for a fragrance by name or ask us to find a product photo, we send the brand and fragrance name you typed to Fragella to get a match. We don't send your wear history, prices, or any account information to Fragella.
  • PostHog — our analytics provider. Receives the anonymous aggregate pageviews and, once you're signed in, the per-account product events described above.
  • Sentry — our error-monitoring provider. Receives error reports as described above.

Each of these providers may process data outside your home country as part of running their service; none of them are permitted to use what we send them for their own advertising or resold for other purposes.

Your choices

  • You can see all of your own data by using the product itself — your collection, wear history, and account details are all visible in the app.
  • You can delete everything at any time from Account → Delete account. This permanently removes your account, your collection and your wear history. Product photos you added are not yet removed from our storage automatically, either when you delete your account or when you replace a photo, and anyone who already has a photo's link may still be able to open it. Contact us and we will remove them. If an email to you previously bounced or was marked as spam, we keep that address on a do-not-send list so we never email it again.
  • You can turn off analytics at any time with the "Don't track me" control in the footer of every page. Your choice is remembered on this device.
  • You can ask us a question about any of this by contacting milesbaker08@gmail.com.

Prepared bottle photos

This section effective: 16 October 2026

When you add or change a bottle photo, your browser prepares a version with the background removed. The preparation runs on your device, but the photo is not kept only on your device: we store the original photo and the prepared version on Rotation’s servers so they can appear in your collection and on share cards. Photos you already had are not prepared just because you open a page. An authorised Rotation admin can also prepare queued photos in their browser through the workbench.

Your browser needs to stay open while a photo is prepared. Occasionally it downloads a model file of about 88 MB from Hugging Face and may cache it for later use. Hugging Face receives your IP address and ordinary request details for that download, but never your photos. The download and preparation use your data allowance, battery and processing power.

A prepared version only replaces your photo after you choose it and save. Unaccepted prepared versions expire 24 hours after preparation finishes. Unsaved photo drafts also expire after 24 hours, extended when preparation finishes. Expired files are removed by regular background cleanup. Your original photo and any prepared version you chose are kept with your collection.

How long we keep data

The daily usage counts described above are kept for 400 days, then combined into monthly counts. Monthly counts are kept while your account exists. Other account and collection data follows the account retention period below.

For as long as your account exists. If you delete your account, your account and its records are deleted immediately and permanently — we don't keep a hidden copy "just in case." Routine database backups (kept for a short, limited period for disaster-recovery purposes only) may briefly retain deleted data until they age out, but they aren't used to recover or view anyone's data outside of restoring the whole service after a genuine failure.

Changes to this policy

If what we collect or who we share it with changes, we'll update this page and reflect the new "last updated" date above.