Privacy Policy

Last updated: July 2026

This policy explains what personal data Sniffish collects, why, and what rights you have over it, in accordance with the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The data controller responsible for processing on this website is:

Amer Zureigat
Kunkelstr. 11
13347 Berlin, Germany
Email: amer@zureigat.com

2. What we collect and why

Scent-match waitlist. When you take the fragrance quiz and choose to join the waitlist, we store your email address, the tags derived from your quiz answers, and the sample you were matched to. We use this to save your match and contact you when your sample is ready. Legal basis: your consent (Art. 6(1)(a) GDPR).

Brand pilot requests. When a brand submits the pilot request form, we store the brand name, contact name, email address, and website provided. We use this to respond to the inquiry and set up a pilot. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

Server log data. Like virtually all websites, our hosting infrastructure automatically records technical data for every request — IP address, browser/user-agent string, and timestamp — for a limited period, to keep the service secure and operational. Legal basis: our legitimate interest in the security and reliability of our website (Art. 6(1)(f) GDPR).

3. What we don't do

• We do not use cookies, analytics, or advertising tracking scripts of any kind.
• We do not use Google Analytics, Google Tag Manager, or any similar service.
• We do not use automated decision-making that produces legal or similarly significant effects on you within the meaning of Art. 22 GDPR — the quiz match is a simple recommendation, not an automated decision about you.
• We do not sell your data to third parties.

4. Who else processes your data

We use a small number of service providers (processors) to run this website, each bound by a data processing agreement under Art. 28 GDPR:

• Hetzner Online GmbH (Gunzenhausen, Germany) — our web hosting provider. All data is hosted on servers located in Germany.
• MongoDB, Inc. (MongoDB Atlas) — our database provider. Our database cluster runs in an EU region, so your data is stored within the EU/EEA.

5. How long we keep your data

We keep waitlist and brand pilot data for as long as needed to fulfill the purpose it was collected for, or until you ask us to delete it — whichever comes first.

6. Your rights

Under the GDPR, you have the right to:

• Request access to the personal data we hold about you (Art. 15)
• Request correction of inaccurate data (Art. 16)
• Request erasure of your data (Art. 17)
• Request restriction of processing (Art. 18)
• Receive your data in a portable format (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time, without affecting past processing (Art. 7(3))

To exercise any of these rights, email amer@zureigat.com. You also have the right to lodge a complaint with a supervisory authority — in Berlin, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

7. Changes to this policy

We may update this policy as the service evolves. The date at the top of this page reflects the last revision.

8. Contact

Questions about this policy or your data? Email amer@zureigat.com.