PRIVACY POLICY

Last Updated: August 6, 2026

This Privacy Policy explains how SniffAIR collects and uses your information when you use our website and purchase our products through shop.sniffair.eu (WooCommerce). It also covers our use of cookies and similar technologies.

1. Information We Collect

When you place an order:

  • Name, email, phone number
  • Shipping address
  • Order details and special requests

Website usage:

  • Analytics and first-party attribution (with your consent): When you allow Statistics cookies, we use Google Analytics 4 and limited SNIFFAIR attribution labels to measure traffic, ecommerce steps, and which SNIFFAIR page, placement, creative, or campaign assisted a visit or order. These labels do not contain your name, email, phone number, address, or payment details. If you complete an order, the labels may be stored privately with that order for up to 24 months. Temporary attribution data expires after 24 hours and is cleared after checkout. Google Signals, remarketing, advertising audiences, and personalized advertising are disabled and are not used.
  • Your theme preference and game progress (stored in your browser only)

2. Legal Bases for Processing (GDPR Art. 6)

  • Performance of a contract – to process and fulfill your orders (Art. 6(1)(b))
  • Legal obligation – to retain transaction records for tax and accounting (Art. 6(1)(c))
  • Legitimate interests – to secure and improve our site, e.g. fraud prevention (Art. 6(1)(f))
  • Consent – for Google Analytics, first-party attribution, and optional marketing services (Art. 6(1)(a)); you may change or withdraw consent at any time

3. How We Use Your Information

  • Process and fulfill your orders
  • Send order confirmations and shipping updates
  • Customer service
  • Improve our website experience and measure performance

4. Data Sharing

We only share your data with:

  • Revolut – for secure payment processing
  • Shipping companies – for order delivery
  • Google Analytics – consented, measurement-only website and ecommerce statistics. Google Signals, remarketing audiences, and personalized advertising are disabled. SNIFFAIR first-party attribution labels remain private in WooCommerce and are not exported to Google Ads.

We never sell your personal information to third parties.

Some providers (e.g. Google) may process data outside the EEA under appropriate safeguards (EU Standard Contractual Clauses).

5. Data Security

Your data is protected with SSL encryption and secure servers. Payment information is processed by Revolut and is never stored on our servers.

6. Your Rights

Under GDPR, you have the right to request access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time.

7. Cookies

We use cookies and similar technologies. Essential cookies required for the site, cart, checkout, security, and payment remain active. Google Analytics and SNIFFAIR first-party attribution are activated only after Statistics consent. Optional newsletter or campaign services are activated only after Marketing consent. Advertising storage, advertising user data, and advertising personalization remain denied.

You can change or withdraw your choice at any time via the “Manage consent” link on the site.

Main cookies and similar technologies:

  • Essential – WooCommerce cart, checkout, session, and security technologies required to shop.
  • Statistics – Google Analytics 4 cookies (_ga, _ga_<ID>) used to distinguish visits and measure site and ecommerce performance, for up to 13 months.
  • First-party attribution (Statistics consent) – short-lived SNIFFAIR page, placement, creative, and campaign labels held in the WooCommerce session for up to 24 hours and cleared after checkout.
  • Marketing (optional) – newsletter or campaign services such as MailerLite, only after Marketing consent.

8. Data Retention

Order information is kept for 7 years where required by applicable accounting and tax laws. Google Analytics event data is retained for up to 14 months. Temporary SNIFFAIR attribution data expires after 24 hours and is cleared after checkout. Private attribution labels stored with an order are deleted after 24 months without deleting the order, invoice, customer, payment, or tax record. You may request deletion of other data where legally permissible.

9. Contact & Supervisory Authority

For privacy-related questions or requests, contact us at:

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): azop.hr.

Data controller: Biro 167 – Obrt za marketing i savjetovanje, Bihaćka 1, 51000 Rijeka, Croatia (OIB 33775618811).

10. Policy Updates

We may update this Privacy Policy occasionally. Changes will be posted on this page with an updated date.