How we handle your information.

When you place an order, our payment provider Stripe collects your name, email, shipping address and payment details to process the order. We see the order details and your contact information, never your full card number.

If you arrived through a link that names one of our ads or campaigns, your order also records that link's campaign labels, so we can tell which adverts lead to sales. This uses no cookie, is kept only for that visit, and is never sent to Meta.

We use Resend to send purchase confirmations and internal order alerts and a single optional feedback request after delivery is confirmed, and Neon to store the order email and its delivery status. These records include your email address, order reference, items, amounts paid and delivery address. They help us send your confirmation reliably and prevent duplicate emails. They do not contain your full card number.

Feedback requests do not subscribe you to marketing. If you reply, we use your feedback to understand your experience and help with your order. We ask for separate permission before publishing your words or chosen display name. We do not publish your email address.

When you join our letter list, our email provider Beehiiv stores the email address you give us. You can leave the list at any time using the link in any letter.

If you play The Scent of Play, we store your round and score in Neon. If you claim a reward, we also store your email, verification and reward records. Resend sends the verification and reward emails, and Stripe restricts your discount to your customer record. We use a hashed email identifier and short-lived request limits to prevent duplicate claims and abuse.

The site itself is hosted by Vercel, whose servers keep the short-lived technical logs any host needs to run a website.

We use your information to fulfil orders, to tell you about dispatch, and, if you have joined the list, to send occasional letters. We do not sell your information. We share advertising measurement data with Meta only if you choose to allow it, as described below.

Receiving an order confirmation does not subscribe you to marketing. If you choose to receive launches, scent stories and private offers when claiming a game reward, we record that choice and subscribe your verified email through Beehiiv. You can unsubscribe using the link in any marketing email.

Your basket uses essential browser storage to remember the scents and quantities you choose. It contains no contact or payment details. Its items are cleared after their matching payment is confirmed; edits made during checkout are kept.

Optional advertising cookies are set only with your permission. You can reject them or withdraw permission at any time through Cookie settings. Stripe sets the cookies it needs to process payment securely during checkout.

The game uses essential session cookies to keep your round and verified reward attached to your browser. These expire after 24 hours.

We count visits and actions with Vercel Web Analytics without cookies or an event log in your browser storage. We do not send email addresses, order references or payment-session URLs to analytics. If your browser sends Do Not Track or Global Privacy Control, we do not send analytics events.

If you allow advertising measurement, we send Meta the pages and products you view, basket actions, checkout starts and confirmed purchase totals. We send your IP address, browser information and Meta browser or ad-click identifiers so Meta can match actions to Facebook and Instagram ads and help us measure and improve them. We do not send names, email addresses, delivery addresses, payment details or Stripe checkout references to Meta.

Your choice is remembered for 180 days. After acceptance, the _fbp browser identifier and _fbc ad-click identifier, when present, can remain for up to 90 days. Rejecting or withdrawing permission removes these identifiers and stops future advertising sends. Do Not Track and Global Privacy Control override permission. Withdrawal does not erase data already sent to Meta.

Meta processes data under its own privacy policy, which includes information about international processing and retention. Read Meta’s privacy policy.

Under UK data protection law you may ask us what information we hold about you, ask us to correct it, or ask us to delete it. Write to hello@elixyr.uk and we will act on it promptly.