Privacy
Last updated 11 October 2026.
The short version. Signed out, wonbee stores nothing about you. Signed in, it keeps your email address and whatever fragrance lists you choose to import. That is never sold, never shared, never published, and deleting your account deletes it. Some links to shops are affiliate links, which an outside network tracks when you follow one; that is explained below, and you can turn it off.
wonbee is an independent side project run by one person in the United States. It is not a company and has no staff.
Everything on this page — a question, a correction, a copy of what we hold, or deletion — goes to wonbee support at wonbee-support@googlegroups.com, which is read by that person. If you need to know who they are for a legal reason, ask there and you will be told.
The public price feed needs no account and sets no cookie. Your theme choice is kept in your browser's own storage and never sent anywhere. There is no analytics and no tracking pixel on this site. The one thing that can follow you off it is an affiliate link, described next.
Most shop banners you may see are drawn by us and built into the page itself. They load nothing from anyone else and cannot see you. While affiliate links are on, some ad slots instead show a shop's own banner, loaded from its affiliate network, which can see your IP address and counts the view. With affiliate links off, you only get our own banners.
Some links to shops are affiliate links. If you follow one and buy something, the shop may pay us a commission. It does not change what you pay, and it does not change which shops or prices we show you.
An affiliate link sends your browser briefly through an affiliate network — such as Rakuten Advertising, CJ or Awin, depending on the shop — on its way to the shop. The network sets a cookie on its own site, and the shop may use similar technology on its site, to record that the visit came from wonbee. That lets the network and the shop receive:
They handle that under their own privacy policies: Rakuten Advertising, CJ, Awin. What comes back to us is a report of sales and commission amounts. It does not tell us who you are, and it is never joined to a wonbee account.
The same choice covers the shops' own banners described above: they load from the affiliate network only while affiliate links are on.
wonbee itself sets no cookie for any of this and does not record which links you click. Your choice below is kept in your browser's own storage.
Your choices.
Under some US state privacy laws, California's among them, a third party's tracking cookie can count as "selling" or "sharing" personal information even though nobody pays for the data itself. We treat affiliate tracking that way, so Reject all and GPC are your opt-out of sale, sharing and targeted advertising. A plain link is an ordinary link: nothing between you and the shop.
Your privacy choices are one click away on every page: the round shield button at the bottom left, or the link in the footer. The choice applies to this browser. Clearing its site data resets it.
Sign-in is Google only. Google sends us a signed token; we check it and keep two things from it:
| What | Why |
|---|---|
| Your Google account ID | An opaque number Google uses for you. It is how your account is identified here, because email addresses change and this does not. |
| Your email address | So the account is recognisable to you and reachable for support. Kept only if Google confirms you have verified it. |
Nothing else from Google is stored — not your name, not your profile picture, not your language.
Being signed in sets one cookie. It holds a random session identifier and nothing about you, cannot be read by scripts, is only sent over HTTPS, is not sent to other sites, and expires after 30 days. Signing out deletes the session on our side, not just the cookie.
You can import a collection, wish list or watch list exported from Parfumo. The PDF is read in your browser and never uploaded. What reaches us is the list of brand and fragrance names it contained, and nothing else — no file, no ratings, no notes, no Parfumo username or profile link.
We store those names, a normalised copy of each used for matching, which kind of list it was, and when you imported it. Re-importing replaces the previous version of that list rather than adding to it.
We do not log in to Parfumo, Fragrantica or any other site on your behalf, and we never ask for a password to one. Bringing your own export is the whole design.
Your list is matched against shop listings using only the fragrance names and an anonymous reference number, never your account ID, your email or anything else that identifies you.
If you turn alerts on, your browser gives us a push address: a web address at your browser maker's notification service (Google, Apple or Mozilla) and two keys that let only us write to it. We store that, how often you want alerts, your time zone (so a morning digest arrives in your morning), any price alerts you set on your lists, and the alerts waiting to be sent. The notification service sees that a message went to your device, but the message itself is encrypted so that only your browser can read it. Turn alerts off on the watch list, or in your browser's settings, and the address is deleted; sent alerts are kept 30 days, then deleted.
Using the site means your browser contacts these, and each of them can see your IP address as a result:
| Who | What for |
|---|---|
| Cloudflare | Hosts the site and the database. |
| Sign-in, on the account page only. The fonts are served by wonbee itself. | |
| GitHub | Serves the public price feed the front page reads. |
| Google, Apple or Mozilla | Only if you turn alerts on: your browser maker's notification service delivers them to your device. It cannot read them. |
| jsDelivr | Serves the PDF reader, on the import page only. |
| The shops | Product photographs on your list page load directly from the shop selling the item, so that shop can see that somebody viewed it. It does not learn who, or what else is on your list. |
| Affiliate networks | Only while affiliate links are on: when you follow an affiliate link, or a page shows a shop's own banner. See shop links. |
Once you reach a shop you are on their site, under their privacy policy, not ours.
Until you delete it. There is no archive, no backup copy kept separately, and nothing retained "for analytics". Expired sessions are cleared automatically.
Go to your account and choose Delete account. It removes your account, your sessions, every list you imported, every match stored against them, and your alert devices, settings and queue, immediately and permanently. There is no recovery, and no copy kept.
You can also just ask us at wonbee-support@googlegroups.com — for a copy of what we hold, for a correction, or for deletion. Depending on where you live you may have a legal right to these; we will do it either way.
This is not intended for anyone under 13, and we do not knowingly keep data about anyone under 13.
The date at the top is the only record of when this changed, so it is worth a glance if you come back after a while. Nothing here is retroactive: data collected under this version stays governed by it.