Privacy notice
Last updated:
This notice explains what Daydresser collects, why, and what you can do about it. We keep it short because we collect little: there are no ads and no tracking cookies. We measure only how fast pages load, how many visits pages get, and how many people come back or follow a link to a brand, in aggregate, without identifying you.
The service is run by Niels ESCARFAIL, who is responsible for your data. Contact: niels.escarfail@gmail.com.
What we keep, and why
When you use Daydresser, even without signing in, we create a guest account and keep:
- your Likes, Skips and Dislikes, and the pieces we showed you, so we can show you pieces that suit your taste and avoid repeating ourselves;
- your Cart (pieces, colours, sizes, quantities);
- your choices: Country, Shopping for, sizes and filters, whether you have seen the introduction, and how you answered our suggestions to create an account.
If you create an account, we also keep your email address. If you continue with Google, Google shares your email address, your name, a link to your profile photo and an account identifier with us, and our sign-in system keeps them with your account. We use your email address only to let you sign in, recover your account and send the sign-in codes you ask for; we do not use your name or photo. We do not send marketing.
The first time you visit, we may use the country your connection comes from (worked out by our host from your IP address) to suggest a country. We do not store it; nothing is set until you choose.
If a page fails in your browser, it sends us a short error report: which page failed and a technical error code, with no message text, account or address. It is kept only in our hosting logs.
To limit abuse of sign-in, we count requests per email address and per network address. We store only a one-way fingerprint of each, never the address itself, and delete it after one hour.
In your browser, Daydresser stores:
- a sign-in cookie that keeps you signed in, as a guest or with your account (necessary for the site to work);
- short-lived cookies used while you sign in or link an account, which expire within 15 minutes;
- in your browser’s local storage: your browsing position, changes still being saved and Recently viewed (up to 200 pieces), and, while you continue with Google, a note of where you were so you come back to it (used for up to 15 minutes);
- in your browser’s session storage, which ends with the tab: whether we have already suggested creating an account from your Cart.
Recently viewed is kept only in your browser: we look its pieces up to show them, without storing the list.
We use this data to provide the service you ask for, to keep it secure and, as totals that identify no one, to see how the service is used. We do not sell it, share it for advertising or build profiles for anyone else.
Recommendations
Daydresser chooses which piece to show next from your Likes, Skips and Dislikes, the pieces you have already seen, your filters and your Country. This only decides the order of pieces; it has no other effect on you. Start over clears your Likes, Skips, Dislikes and this history.
Who else processes data
We use a small number of providers, each only for what they do for us:
- Supabase (database and sign-in) and Vercel (website hosting), both in Frankfurt, Germany;
- Vercel Speed Insights, which measures how fast pages load across all visitors. It sets no cookie and keeps no identifier that could recognise you;
- Vercel Web Analytics, which counts page visits in aggregate: the page, the site that linked to it, the country and region, and the kind of device and browser. It sets no cookie; a visit is counted with a code derived from the request that is discarded after 24 hours and cannot identify you;
- Cloudflare Turnstile, for the quick security check that keeps automated abuse out;
- Resend, to send sign-in codes by email;
- Google, only if you choose Continue with Google.
These providers keep technical logs, such as IP addresses, browser details and request times, for security and to run their service. Some may process data outside the European Union under their own legal safeguards.
Photographs are loaded directly from each brand’s own servers. Like any website you visit, those servers receive your IP address and browser details. When you follow a link to a brand’s site, the brand’s own privacy policy applies there.
How long we keep it
We keep your data for as long as your guest or full account exists. A guest account that has not been used for 30 days is deleted, with everything in it. When you delete your account, we delete your Likes, Cart, choices and history straight away, and your sign-in identity within about a day. Start over clears your taste history but keeps your Cart and choices. So that a deletion still holds if we ever restore a backup, we keep a record that an account was deleted, with an internal identifier and never your email or data, for 35 days, and an encrypted daily copy of that record for 14 days.
Your rights
You can see and change your choices on the Account page, download a copy of your data there with Download my data, and delete everything with Delete account. You can also ask us to access, correct, export or delete your data, or object to how we use it, by writing to niels.escarfail@gmail.com. If you are not satisfied with our answer, you can complain to your data protection authority — in France, the CNIL.
Daydresser is for people aged 15 and over.
Changes
If we change this notice in a way that matters, we will say so on the site. The date at the top shows the latest version.
See also our Terms of use.