Back

Privacy policy

Last updated: 6 August 2026. Under Art. 13 GDPR we inform you about the processing of your personal data.

Important: This policy is a starting template. Please have it reviewed by a lawyer / data protection advisor or a certified generator before launch.

1. Controller

Felix Gerber
Wagrianstraße 73A
70378 Stuttgart
Germany
Email: getlayr@gmx.de

2. Data we process

  • Account data: email address, encrypted password, and (if used) Google/Apple ID. Legal basis: Art. 6 (1)(b) GDPR (performance of a contract).
  • Profile data: username and (optional) avatar URL you set in your profile. Legal basis: Art. 6 (1)(b) GDPR.
  • Community ratings: your star votes for fragrance combinations and cocktails, linked to your account. Legal basis: Art. 6 (1)(b) GDPR.
  • Skin & preference data: answers from the "Your Signature" quiz (skin type, durability needs, climate, vibe) used to personalize recommendations. Legal basis: Art. 6 (1)(a) GDPR (consent, saved locally until you sign up).
  • Server logs: IP address, timestamp, page requested. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in operational security).

3. Cookies and local storage

We use only essential cookies and browser storage necessary to run the service:

  • Authentication: Supabase session cookies and localStorage entries keep you signed in.
  • Preferences: localStorage holds guest-only choices such as gender preference, guest ratings, and Signature quiz progress. These are never sent to our servers unless you sign in.
  • Analytics: we do not use Google Analytics, Meta Pixel, or any third-party tracking scripts at launch.

4. Recipients and sub-processors

LAYR runs on Lovable Cloud / Supabase infrastructure (database, authentication, and storage). A data processing agreement (DPA) under Art. 28 GDPR is in place. Affiliate links redirect you to partner shops; those shops process your data under their own privacy policies. Details are in the Affiliate disclosure.

5. Affiliate links

When you click a "Buy now" link, you are redirected to a partner shop. The shop receives standard technical information (referrer, IP, its own cookies). Details in the Affiliate disclosure.

6. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to lodge a complaint with the competent supervisory authority. Contact: getlayr@gmx.de. You can also download or delete your account data in your profile.

7. Retention

Account and profile data are deleted as soon as you delete your account (via Profile). Community ratings you created are deleted together with your account or anonymized on request. Server logs are anonymized after 30 days at the latest.

8. Changes

We may update this policy as the app grows. The latest version is always linked from the footer and the auth page.