Home › Privacy Policy
Last updated 10 September 2026
Enigma Fashion Wear & Accessories is a shopping guide. We pick clothing, jewellery, accessories, footwear and spiritual-energy items, and link each pick to Amazon. The site is built and run by Catscape Technologies, and this page sets out exactly what it records about the people who read it.
यह साइट एक शॉपिंग गाइड है। इसे पढ़ने के लिए न अकाउंट चाहिए, न नाम, न ईमेल, न पता। हम पेज-व्यू का एक रिकॉर्ड रखते हैं जिसमें आपके IP पते का सिर्फ़ एक वन-वे हैश होता है, और साइट पर Google Analytics चलता है। पूरा विवरण नीचे अंग्रेज़ी में है।
Each time a page of this site is loaded, one row is written to a log on our own server. It holds:
?. If you use the search box, the words you searched for form part of that
address and are therefore in the log.Requests for images, stylesheets, scripts, fonts, the admin area and the outbound link redirects are not logged this way. The log is a record of pages read, not of every file a browser fetches.
We use it to answer the questions a small shop has to be able to answer: which pages are worth writing more of, which sites and social posts actually send readers, whether a store we have opened is being found by anybody, and how much of the traffic is automated. Under UK and EU data-protection law our basis for keeping it is legitimate interests — running and measuring our own website. We do not use it to build a profile of you, and we do not sell it, rent it, or share it with anyone.
The log does not store your IP address as it stands. It stores a salted hash of it: the address is combined with a secret key held on our server and put through a one-way function, which yields a fixed string of letters and digits. The same address always yields the same string, so we can count how many separate people read a page and follow a single visit from page to page — but the string cannot be turned back into an address.
We are not going to pretend that makes it anonymous. It is derived from your address, so we treat it as personal data, and the rights set out further down this page cover it.
Our admin panel has a switch to keep the full address as well. It is off, and the log holds only the hash.
The country, region and city in the log come from a geographic database installed on our own server as part of the site. Your address is looked up in that local file. Nothing is sent to an outside service to do it, and no request leaves our server.
It is an estimate, and frequently a coarse one, which is why the accuracy radius is stored with it: a city name carrying a radius of a thousand kilometres is not a city, it is the middle of a country. Addresses that cannot be placed — private and local network addresses among them — are recorded with no location at all rather than a confident guess.
Every product link on this site points at an address on this site first, which then redirects you to Amazon. At that moment we record which product was clicked, the time, the page you clicked from, and the same one-way hash of your address. No name is attached to it. We use it to see which picks readers actually find useful.
The redirect passes the referring page on to Amazon, so Amazon can see that you arrived from here, and the link carries our Associates tag so a qualifying purchase is credited to us. From the moment you arrive there you are on Amazon's site and Amazon's own privacy policy applies — we have no part in, and no sight of, what you browse or buy. Amazon reports earnings to us in aggregate, never who bought what.
No prices appear on this site. Price, availability and delivery are whatever Amazon shows you when you get there.
We store the article, the date, and the one-way hash of your address — enough to hold the count to one per reader per day, and nothing more. No name, no message, and no way to work out who left it.
If you sign up for the newsletter we keep your email address, the store you were browsing (India, the UK, Italy or the US), when you signed up and confirmed, the exact wording you agreed to, and the same one-way salted hash of your IP address described above — never the address itself. Nothing is sent until you click the link in the confirmation email, and every newsletter has an unsubscribe link that works in one click, with no login.
Your address is passed to Brevo, the email service that delivers the newsletter for us, and to nobody else — it is never sold or shared, Amazon included. Unsubscribing stops the emails at once; we keep the address marked as unsubscribed so it is never mailed again by mistake. To have it removed entirely, write to us at the address at the end of this page. The site remembers in your browser (local storage, not a cookie) that you closed or completed the sign-up box, so it does not keep asking.
When you tap through to Amazon from a card, this site notes which item it was, against a random code kept in your browser — not your name. When you come back, it asks whether that became an order. Answering is optional, and the answer is yours: it is shown to you at My orders, and it tells the shop which picks people actually found useful.
If you mark something as ordered we ask for an email address, so the list is still yours on another device. We keep that address, what you said about each item, the dates, and the store you were browsing.
A password is optional and only worth setting if you want the list on more than one device. You choose it yourself after we email you a six-digit code; the code is single-use, expires in fifteen minutes and is void after five wrong guesses. We store passwords as bcrypt hashes — nobody here can read yours, and if you forget it the only route is the same emailed code. Setting or changing it signs out every other device. There is still no profile of any kind.
What we never have: your Amazon account, your order numbers, what you actually paid, your address or your card. Amazon does not tell us who bought what — only totals, a day later — and nothing you enter on this site is sent to Amazon. Nothing is offered in return for marking an order.
Delete the whole list, and the email with it, with one button on the My orders page. It is immediate.
This site sets three cookies of its own. None of them follows you to other websites.
_ga) to recognise a returning browser and group a visit together. Those are
set by Google rather than by us, and Google's own defaults govern how long they last.You can delete or block any of them in your browser. Blocking enigma_country
costs you nothing beyond having to pick your store again on each visit.
The site uses Google Analytics 4 (measurement id G-7D6LJWHXVV). Google's script is
loaded from googletagmanager.com and is the only third-party script this site
runs. Loading it gives Google your IP address, the page you are on, and the information any
browser sends with any request.
We ask Google for IP anonymisation, and we send two extra details with each page view: which country's store you were shown, and how that was decided. When you click through to Amazon we send one further event recording the product, its name, the shelf it sits on, and the page you clicked from. That is the whole of what we ask Google to collect. There is nothing in it about you beyond the visit itself.
Once the data is with Google it is processed under Google's privacy policy, which we do not control. You can stop it reaching them with Google's opt-out add-on, a tracker-blocking extension, or your browser's own blocking. The site behaves identically either way — our own log is what we actually rely on, and it records the people who block Google too.
fonts.googleapis.com and fonts.gstatic.com. Fetching them tells
Google your IP address and which page asked for them, in the way any image loaded from another
site would.There are no advertising networks on this site, no social media tracking pixels, no embedded videos, no comment system, and no chat widget.
The country menu offers to detect where you are. It does nothing until you press it, and your browser asks your permission before anything happens. If you agree, your browser hands us the coordinates and we pass them to Google's geocoding service to find out which country they fall in.
We use the answer for exactly one thing: setting the enigma_country cookie to
that country. The coordinates themselves are not stored — not in the
visitor log, not anywhere else. If you would rather not use it, pick your country from the
list instead; the result is identical.
Rows in the page-view log are kept for 90 days. Clearing out the older ones is done from our admin panel rather than by an automatic timer, so in practice a row may survive a little past that window until the next clear-out. Once deleted it is gone from the database entirely.
Outbound-click records and article hearts hold nothing but a product or article, a date, and a hash. They have no automatic expiry and are removed by hand.
If you are in the United Kingdom or the European Union, the UK GDPR and the EU GDPR give you the right to ask what we hold about you, to have it corrected or deleted, to object to our using it, to ask us to restrict how it is used, and to receive a copy. We answer within one month. We extend these rights to everyone: we are not going to answer somebody in Delhi differently from somebody in Manchester.
One practical note. Because we hold no name and no email address, there is nothing to look you up by — the only handle on your rows is the hash of your IP address. To find them we would need you to tell us the address you were browsing from, so we can hash it and match it. If you do not know it, or would rather not say, we can still confirm what the site collects in general, which is everything on this page.
If you think we have handled your data badly, please write to us first and give us the chance to put it right. You also have the right to complain to your data-protection authority: the Information Commissioner's Office in the United Kingdom, the Garante per la protezione dei dati personali in Italy, or the equivalent body where you live.
This site sells nothing and is not aimed at children. Some shelves carry clothing and accessories for boys and girls, but they are written for the adult doing the buying. We do not knowingly collect anything from a child, and there is no account, no profile and no message box through which a child could give us anything.
When the site begins collecting something new, this page is updated in the same change that adds it, and the date at the top moves. There is no mailing list to notify you, so that date is how you can tell.
Enigma Fashion Wear & Accessories is operated by Catscape Technologies, which is also the data controller for everything described on this page.
Put Privacy in the subject line and we will know what it is about.
The Enigma letter
An occasional email when there is something worth knowing — festive picks, new Fashion Talk and the week’s offers. Unsubscribe in one click.
Your orders list
Tell us and it goes on your own list at My orders. Enigma cannot see your Amazon account — and nothing you say here is sent to Amazon.
Asked once per item. See my orders →