Who we are
Without Fragrance is part of Raspberry Penguins LLC. Our website address is https://withoutfragrance.com.
Contact form
When you use our contact form, we collect the name, email address, selected topic, and message that you provide. The server also uses the request IP address in memory to apply an anti-abuse rate limit. We use this information to read and respond to the message, investigate corrections, and handle the request you selected.
Contact messages are delivered through Brevo's transactional email service to our receiving mailbox. This means the submitted information is processed by Brevo and may appear in Brevo's transactional logs and in our mailbox. You can read Brevo's privacy policy. Please do not submit medical or other sensitive information through the form.
Comments
When you submit a comment or reply, we collect the display name, private email address, and comment that you provide. The display name, comment, and submission date become public only if an editor approves the comment. Your email address is not published.
We send a one-time confirmation link through Brevo before a comment enters the moderation queue. The link expires after one hour. Confirmation does not publish the comment automatically. All new visitor comments are reviewed first.
The comment system encrypts the email address stored with the comment. It also creates keyed, non-public fingerprints from the normalized email address, request IP address, and comment text. These fingerprints help enforce rate limits and identify repeated submissions without putting the raw IP address in the comments database. Our hosting infrastructure may still process IP addresses in ordinary security and access logs.
Comments use Cloudflare Turnstile to distinguish visitors from automated submissions. Turnstile processes browser and device signals needed for that security check. It does not receive the name, email address, or comment text from our form. You can read Cloudflare's privacy policy.
We do not create public commenter accounts, accept visitor image uploads, use Gravatar, or automatically approve later comments from a previously approved email address.
Cookies
The public comment form does not store your name or email address in a Without Fragrance cookie. The private Editorial Studio uses a necessary, signed session cookie for its administrator. It is not a public account or visitor-tracking system.
Embedded content from other websites
Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
WithoutFragrance does not sell personal information for monetary consideration.
Brevo's transactional email service processes contact messages and comment-confirmation emails. Cloudflare processes Turnstile security checks. The site and comments database run on infrastructure operated for Without Fragrance. We do not have a public password-reset or user-account service.
How long we retain your data
Published comments are normally retained with the article so that replies and the discussion remain understandable. Pending, rejected, and spam submissions, verification records, encrypted contact details, and anti-abuse fingerprints are retained only for moderation, security, recordkeeping, and handling privacy requests. We may delete or anonymize them when they are no longer needed.
Contact messages may remain in our receiving mailbox and Brevo's transactional logs while we handle the request and maintain normal business records.
What rights you have over your data
If you have sent us a message or submitted a comment, you may ask for a copy of the personal information we hold about you or ask us to delete it. This does not include information we must retain for legal, administrative, fraud-prevention, or security purposes. Use the contact page and include the email address used for the relevant message or comment so we can locate it.