ScentSpinLegal
Privacy Policy
Effective date: September 22, 2026
1. What we collect
ScentSpin ("we", "us") is a small service operated from San Francisco, California. We collect only what we need to run it.
If you join the waitlist
- your email address;
- optionally: your name, which platforms you buy on, your approximate monthly buying volume, and how you heard about us;
- your browser's user-agent string and the time you signed up.
If you have beta access
- a sign-in cookie (a signed HMAC token) so we know you're logged in;
- the actions you take on listings in the app, such as tapping Got it or Pass, and the price you paid if you choose to enter it;
- standard server logs: the pages and API routes requested, timestamps, your IP address and user-agent. Our hosting provider generates these automatically.
What we don't collect
We don't use advertising trackers or third-party analytics scripts. We don't ask for or store payment card numbers (when paid plans launch, a payment processor will handle those). We don't connect to your marketplace accounts and never see your purchases on eBay or anywhere else unless you tell us about them with a Got it tap.
2. How we use it
| Data | Why we use it |
|---|---|
| Waitlist email and details | To invite you when a seat opens, to tell you about ScentSpin access and product updates, and to understand who's interested so we build the right thing. |
| Sign-in cookie | To keep you logged in and keep everyone else out. |
| Got it / Pass actions and price paid | To improve deal scoring (for example, learning which listings people actually buy and at what price) and to keep your own feed relevant. |
| Server logs | To keep the service running, debug problems and detect abuse. |
We don't sell your personal information, and we don't share it with third parties for their own marketing. We share data only with the service providers below, when the law requires it, or to protect the Service and its users.
3. Cookies
ScentSpin sets one cookie, ss_auth, when you sign in. It holds a signed token that proves you're logged in and contains no personal information. It's strictly necessary for the app to work, so there's no cookie banner to click. Clearing your browser's cookies signs you out.
We may use your browser's local storage to remember interface preferences (like a filter you picked). That data stays in your browser and never reaches our servers.
4. Who processes it
We rely on a few providers to run ScentSpin. Each processes data on our behalf under its own privacy and security terms.
| Provider | Role | Location |
|---|---|---|
| Vercel | Hosts the web app and generates server logs. | United States |
| Turso | Hosts our database, including waitlist entries and your in-app actions. | United States |
| Anthropic | Provides the AI model (Claude) that reads marketplace listing photos and titles. See section 5. | United States |
| Payment processor (future) | When paid plans launch, a third-party processor will handle billing and card details. We'll name it here before we charge anyone. | To be announced |
5. Marketplace listings and AI
ScentSpin's core job is reading public listings. To identify bottles and spot problems, we send listing photos and titles to Anthropic's Claude model. These are public marketplace images and text posted by sellers on eBay, HiBid, Craigslist or Reddit. They are not your data: we never send your email, your actions, your logs or anything else about you to the AI model.
We cache the model's answers so we don't pay to analyze the same listing twice.
6. How long we keep it
- Waitlist entries: until you ask us to remove you, or until we shut down the waitlist and no longer need it.
- In-app actions: for as long as you have an account, because they feed the scoring model. Deleted on request.
- Server logs: kept by our hosting provider for a short rolling window (typically days to a few weeks) and then discarded.
- Sign-in cookie: lives in your browser until you sign out or clear it.
7. Your rights
You can ask us at any time to:
- tell you what personal data we hold about you;
- correct it;
- delete it, including removing you from the waitlist;
- stop emailing you (every product email will also have an unsubscribe option).
Email coleseifert@icloud.com from the address you signed up with, so we can confirm it's you. We'll respond within 30 days, usually much sooner.
California residents
Under the California Consumer Privacy Act (CCPA/CPRA) you have the right to know what personal information we collect and how we use it, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising those rights. We do not sell or share your personal information as those terms are defined in the CCPA, so there is nothing to opt out of. To exercise any right, use the contact above.
Visitors from the EU, UK and elsewhere
ScentSpin is operated from and hosted in the United States, and the providers listed above process data there. If you use the Service from outside the US, your data will be transferred to and processed in the US, where privacy laws may differ from your own. By using the Service you agree to that transfer. Where the GDPR or UK GDPR applies, our legal basis is our legitimate interest in running the service you asked to join and, for product emails, your consent, which you can withdraw at any time.
8. Children
ScentSpin is for adults. We don't knowingly collect data from anyone under 18. If you believe a minor has given us personal information, email us and we'll delete it.
9. Security
We use encrypted connections (HTTPS) throughout, signed cookies for sign-in, and access to our database is limited to the operator. No system is perfectly secure, so we can't promise your data can never be accessed or disclosed, but we'll tell you promptly if we learn of a breach affecting you.
10. Changes to this policy
We'll update this policy as ScentSpin changes, for example when paid plans launch and we add a payment processor. We'll change the effective date at the top and, for material changes, email everyone on the waitlist or with an account before they take effect.
11. Contact
ScentSpin is operated from San Francisco, California, USA. For privacy questions or requests, email coleseifert@icloud.com.