Privacy Policy
Last updated 21 September 2026.
NotePyramid is a reference site for fragrances: what they are made of, who made them, and what people think of them. This page explains what the site collects, why, and what you can do about it. It is written to be read rather than to be survived.
The short version
You can read the whole site without an account and without telling us anything beyond what any web server sees. If you make an account, we keep your email address, your username and your display name, and nothing else about you. Everything you post is public. We do not sell your data, and we never will. We use Google Analytics to see which pages get read, and Google AdSense to show ads, and both of those are third parties with their own policies, which we link to below.
If you only read the site
Our web server keeps an access log, as every web server does. It records the address you connected from, the page you asked for, the time, and what browser reported itself. We use it to keep the site up and to look into abuse. It is not joined to anything else and it is not used to build a profile of you.
Pages are served from a cache, which does not set any cookie that identifies you.
If you make an account
An account holds four things: the email address you signed up with, your username, the display name you choose, and your password. The password is stored as a hash, which means nobody here can read it, us included.
We send you email for the things you would expect: confirming your address, resetting a password, and anything you ask to be notified about. We do not send marketing email.
If you sign up and never confirm your email address, the unconfirmed account is deleted automatically after seven days.
To stop one person opening hundreds of accounts, we briefly hold a one-way hash of the address you signed up from. It is a hash rather than the address itself, it is not stored with your account, and it expires on its own.
Failed sign-in attempts are logged, with the address they came from, so that repeated guessing can be locked out. That is a security measure and it is not used for anything else.
What you post is public
Your votes, your reviews and your forum posts are public, shown under your display name, and visible to anyone including search engines. Please treat anything you type into them as published, because it is. Attaching files to forum posts is turned off.
Cookies
The site sets cookies when you sign in, which is what keeps you signed in. If you never sign in, the site itself sets no cookies that identify you.
Google Analytics and Google AdSense set cookies and read device identifiers of their own. Those are described in the two sections below.
Google Analytics
We use Google Analytics to count visits and see which pages people read. It tells us things like how many people looked at a fragrance this week and which site sent them. We use it to decide what to work on.
Google processes that data on its own terms. You can read how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites, and you can opt out of Analytics entirely with Google’s browser add-on at tools.google.com/dlpage/gaoptout.
Google AdSense
This site carries ads served by Google AdSense. Google and its partners use cookies and similar identifiers to serve those ads and, depending on your settings, to personalise them based on your previous visits to this and other sites.
You can turn personalised advertising off, and see what Google thinks it knows about you, at myadcenter.google.com. There is more about how Google uses cookies in advertising at policies.google.com/technologies/ads.
We do not receive your personal information from Google in exchange for showing ads, and we do not give Google anything about you beyond your visit to this site.
Search Console and Bing Webmaster Tools
We use Google Search Console and Bing Webmaster Tools to see how the site performs in search results. These do not collect anything from your browser and set no cookies here. They report to us from the search engines’ own records: which search terms led to this site, and which pages were shown. What we see is counts, never individual people.
What we do not do
- We do not sell your personal information, and we do not accept money for passing it on.
- We do not send marketing email, and we do not pass your address to anybody who would.
- We do not build a profile of you beyond what is described on this page.
- We do not ask for, or want, anything sensitive: no payment details, no identity documents, no health or biometric data.
One thing we want to be straight about: some privacy laws, California’s in particular, define “selling” or “sharing” broadly enough to include showing personalised ads through a network like AdSense, even though no money changes hands for your data and none of it reaches us. If you would rather that did not happen, turn personalised ads off using the Google link above, and use any consent choices the site offers you.
How long things are kept
- An unconfirmed account: deleted automatically after seven days.
- Your account, votes, reviews and posts: kept until you ask us to remove them.
- Server access logs and failed sign-in records: kept for a short period for security and then rotated away.
- Analytics and advertising data: kept by Google on its own retention terms, not ours.
Getting your data, or getting rid of it
Write to us at [email protected] and we will:
- tell you what the site holds about you,
- send you a copy of it,
- correct anything that is wrong, or
- delete your account.
Deleting your account removes your email address, your username and your display name. Tell us in the same message if you want your votes, reviews and forum posts taken down as well, and we will remove those too. If you do not say, we will remove them.
Depending on where you live you may have further rights, such as those under the UK and EU General Data Protection Regulation or the California Consumer Privacy Act. Ask and we will honour them.
Children
This site is not aimed at children and we do not knowingly collect anything from anyone under 16. If you believe a child has made an account here, write to the address above and we will remove it.
Changes to this page
If we change what we collect or who we share it with, we will change this page and update the date at the top of it.
Contact
Questions about any of this go to [email protected].