Privacy
Policy
Welcome to the legal zone. Here is a plain-language account of what information we collect, why we collect it, who we share it with, and what rights you have over it.
Last updated: October 14, 2026
What We Collect and Why
We collect the following categories of personal information, for the purposes described.
Information You Provide Directly
- →Email list and marketing: Email address when you sign up for our email list. Used to send product news, new releases, restock notices, and other marketing communications. You can unsubscribe at any time using the link in any email we send. Managed via Kit (formerly ConvertKit).
- →Orders and purchases: Name, shipping address, email address, and payment information when you place an order. Used to process, fulfill, and communicate about your order.
- →Customer service: Any information you include in emails or messages you send to us. Used to respond to your inquiry and keep a record of the correspondence.
Collected Automatically When You Visit
- →IP address and approximate location: Collected when you access the site. Used for security, fraud prevention, and regional traffic analysis. We do not collect precise geolocation.
- →Device and browser information: Device type, browser version, operating system, and screen resolution. Used to optimize site performance and diagnose technical issues.
- →Cookies and analytics identifiers: Session cookies, analytics cookies (via Google Analytics), and advertising cookies set by the Meta (Facebook) pixel. Used to understand traffic patterns, improve the site, and measure our advertising. See Section 05 for opt-out options.
- →Usage data: Pages visited, time on page, referral source, and in-page interactions. Collected via Google Analytics and the Meta pixel.
Received From Third Parties
- →Payment processors: Tokenized transaction records and fraud-prevention signals. We do not receive or store your full card number — that is handled entirely by our payment processor.
- →Shipping and fulfillment providers: Delivery records, address validation, and tracking information shared with and received from carriers in connection with fulfilling your order.
- →Email engagement data: If you are on our email list, our email platform may collect data on whether you open emails or click links. This helps us understand what content is useful.
Retention: We retain personal information for as long as necessary to fulfill the purposes described above, comply with legal obligations (including applicable tax and transaction record requirements), resolve disputes, and enforce our agreements. Analytics data is subject to the retention settings configured in the applicable platform.
We Do Not Sell Your Data
We do not sell your personal information to third-party data brokers for monetary consideration.
We do share data with service providers who help us operate — our payment processor, shipping provider, and email platform. These providers are contractually limited to using your information only to perform services on our behalf.
We also use Google Analytics, which involves transmitting usage data and identifiers to Google, and Meta (Facebook) advertising tools to measure our ads:
- →On this site (www.smelldos.com): the Meta pixel reports the pages you view, the products you look at, items you add to your cart, and email list sign-ups, along with your IP address, browser information, and Meta's own advertising cookies. It does not send your name or email address.
- →At checkout (checkout.smelldos.com): checkout is run by our commerce platform, BigCommerce, whose Meta integration reports checkout visits and purchases from your browser and from BigCommerce's servers (Meta's Conversions API). When you place an order, it sends Meta a one-way encrypted (hashed) version of your email address, name, and phone number, along with your IP address, browser type, a hashed BigCommerce visitor ID, and Meta's advertising cookies, so Meta can tell us which ads led to purchases. If you sign in to a customer account, the same hashed details are sent with your other checkout events.
We never send Meta your email address, name, or phone number in readable form, and never your payment details. Under California law (CPRA), sharing personal information with a third party for cross-context behavioral advertising purposes may constitute “sharing” even if no money is exchanged — which is a distinct category from selling but still triggers opt-out rights for California residents. See Section 03 and Section 05 for how to exercise that right.
Your CPRA Rights
Since we are based in California, we respect the California Consumer Privacy Act (CCPA/CPRA). If you are a Golden State resident, you have the right to:
How We Protect Your Information
We use reasonable administrative, technical, and organizational safeguards appropriate to the information we process. No transmission or storage system can be guaranteed completely secure.
- ✓Payment information is handled by our payment processor using tokenized processing. Your full card number is never transmitted to or stored on our systems.
- ✓If you believe your information has been involved in a security incident, contact us immediately at privacy@smelldos.com.
New York residents and residents of other states with applicable data privacy laws may exercise the same rights described in this policy by contacting us at privacy@smelldos.com with the subject line “Data Request.”
How to Turn Them Off
If you do not want us collecting analytics data about your visit, or sharing it with Meta for advertising measurement, you can opt out below. On www.smelldos.com this switches off both Google Analytics and the Meta pixel, and stops this site sending any advertising events about your visit, from your browser or from our servers. Your preference is stored as a browser cookie — it persists unless you clear your cookies or switch browsers. You can also browse in Incognito/Private mode at any time. We won't take it personally.
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of sharing and keep the Meta pixel off on www.smelldos.com automatically.
This switch and GPC do not yet reach our checkout at checkout.smelldos.com, which is run by BigCommerce: its Google Analytics and Meta integrations described in Section 02 run there for every shopper.
Analytics & Advertising Tracking
Google Analytics and the Meta pixel are currently active on this browser.
How to Exercise Your Rights
To access, correct, delete, or opt out of sharing of personal information we hold about you, contact our privacy inbox:
privacy@smelldos.comUse the subject line “Data Request.” We will verify your identity and respond within the timeframe required by applicable law.
TL;DR
- ✓ We collect email list sign-ups, order data, analytics, and related information described above.
- ✓ We do not sell your data to brokers. Google Analytics and Meta advertising may involve data sharing under CA law — you can opt out in Section 05.
- ✓ When you order, our checkout sends Meta a hashed (unreadable) version of your email, name, and phone so we can measure our ads. Never your payment details.
- ✓ CA residents have full CPRA rights, including opt-out of data sharing for advertising.
- ✉ Data requests: privacy@smelldos.com