Privacy Policy

Last updated: 9 August 2026

Brisella is a small, independent project. This page explains, in plain language, what we store about you and what you can ask us to do with it. If anything here is unclear, write to us and we will explain it properly.

Who we are

Brisella is operated by an individual developer and is available at https://brisella.app. For anything in this policy, including requests about your own data, contact privacy@brisella.app.

What we collect

Your account. An email address and a password. The password is never stored in a readable form — it is hashed by our authentication provider and we cannot see it.

Your city, if you set one. The city name and its approximate coordinates. We use this only to look up the weather for recommendations. We do not track your device location, and nothing here identifies your address.

What you do with fragrances. Which fragrances you mark as owned or as past, the days you record wearing them, your personal ratings, and whether you found a recommendation useful. This is the data that makes the service work: without it there is nothing to recommend from.

What you add to the catalog. If you add or edit a fragrance, that entry is stored with a reference to your account. The entry itself is public; your email address is not shown next to it.

Technical records. Our hosting and database providers keep standard server logs, which include IP addresses and browser information, for security and troubleshooting. We do not use advertising trackers, and we do not build a profile of you across other websites.

Why we are allowed to hold it

Your account and your fragrance activity are processed to provide the service you asked for — that is, to perform our agreement with you. Server logs are kept on the basis of our legitimate interest in keeping the site working and secure. We do not rely on consent for anything except optional features you switch on yourself, and we do not send marketing email.

Who else sees it

We do not sell your data, and we do not share it for advertising. We use a small number of providers to run the service, and they process data only on our instructions:

Supabase hosts the database and handles sign-in. Vercel hosts and serves the site. When you use weather-based recommendations, the coordinates of your chosen city — not your device location, and nothing that identifies you — are sent to Open-Meteo to fetch a forecast.

We will also disclose data if the law genuinely requires it, and we will tell you unless we are forbidden from doing so.

Cookies

We use cookies only to keep you signed in. There are no analytics, advertising or third-party tracking cookies, which is why you are not being asked to dismiss a consent banner. Your light or dark theme choice is stored in your browser and never reaches our servers.

How long we keep it

Your account data stays until you ask us to delete it. Server logs are kept for a short period by our providers and then discarded. Fragrance entries you contributed to the public catalog remain after your account is deleted, since other people rely on them — but they are no longer linked to you.

What you can ask for

You can ask us for a copy of your data, ask us to correct it, ask us to delete your account and everything personal in it, or object to how we are using it. Write to privacy@brisella.app from the address on your account and we will act within one month.

You can also delete your account yourself, without asking us: it is at the bottom of your Profile page. That removes your collection, wear history, ratings and city immediately and permanently. If you are in the EU or the UK and you think we have handled your data badly, you also have the right to complain to your national data protection authority.

Where your data lives

Our providers operate servers in several countries, so your data may be stored or processed outside the country you live in. Those transfers are covered by the standard contractual protections our providers put in place.

Children

Brisella is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has created an account, tell us and we will remove it.

Changes to this policy

If we change anything that matters, we will update the date at the top of this page and, for significant changes, tell you by email before they take effect.

See also our Terms of Use.