Privacy Policy

Information We Collect

• Account data: When you create an account, we collect your name, email address, and profile photo through Firebase Authentication.
• Listing data: Information you provide when creating listings, including product descriptions, photos, pricing, and fragrance details.
• Transaction history: Records of purchases and sales made through the marketplace, including order status and shipping information.
• Messages: Communications sent through our built-in messaging system between buyers and sellers.
• Device and browser information: Technical data such as your IP address, browser type, operating system, and device identifiers collected automatically when you use the platform.

How We Use Your Information

• Provide, maintain, and improve our marketplace services
• Process transactions and facilitate payments between buyers and sellers
• Communicate with you about orders, listings, and account activity
• Improve the platform experience through usage analysis
• Enforce our Terms of Service and community guidelines
• Detect, investigate, and prevent fraudulent or unauthorized activity

Payment Information

All payments on ScentResort are processed by Stripe. We do not store your credit card numbers, bank account details, or other sensitive financial information on our servers. When you make a purchase or set up a seller account, your payment data is transmitted directly to and handled by Stripe in accordance with their security standards. Stripe's privacy policy governs the collection and use of your payment data.

Information Sharing

We share your information only in the following circumstances:

• Public profile information: Your seller profile, display name, and reviews are visible to other users on the marketplace.
• Transaction counterparties: When you complete a purchase or sale, relevant order details are shared with the other party to facilitate the transaction.
• Service providers: We share data with trusted third-party services that help us operate the platform, including Firebase (authentication and database), Stripe (payment processing), and Vercel (hosting and analytics).
• Legal requirements: We may disclose information if required by law or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We do not sell your personal data to third parties.

Data Storage & Security

Your data is stored in Firebase, which runs on Google Cloud infrastructure. We protect your information using encryption in transit (HTTPS) and Firebase security rules that restrict data access to authorized users. While we implement industry-standard safeguards to protect your personal information, no system is 100% secure. We encourage you to use a strong, unique password for your ScentResort account.

Your Rights

You have the following rights regarding your personal data:

• Access: You can view the personal information associated with your account at any time through your profile settings.
• Update: You can update your profile information, display name, and account details directly within the platform.
• Delete: You can request deletion of your account and associated data by contacting us. We will process your request in a timely manner.
• Export: You can request a copy of your personal data by reaching out to us via email.

Cookies & Tracking

Firebase Authentication uses cookies to manage your login session and keep you signed in. We use Vercel Analytics to collect basic, anonymized usage metrics such as page views and visitor counts. We do not use third-party advertising cookies or tracking pixels, and we do not participate in ad networks.

Third-Party Services

ScentResort relies on the following third-party services, each of which operates under its own privacy policy:

• Firebase (Google) — Authentication, database, and file storage
• Stripe — Payment processing and seller payouts
• Vercel — Application hosting and analytics

We encourage you to review the privacy policies of these services to understand how they handle your data.

Children's Privacy

ScentResort is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a user under 18 has created an account, we will take steps to remove their information and terminate the account.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. If we make material changes, we will notify users through the platform or via email. Your continued use of ScentResort after any changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at scentresort@icloud.com.