Privacy Policy

Cool Girl Outfit is a subscription styling service at coolgirloutfit.com. We decide what data is collected here and why, which makes us the controller of it. Contact: hello@coolgirloutfit.com.

Your account. Your email address, and a password you choose. If you sign in with Google instead, we receive your email address from Google and never see your Google password. Authentication is run by Amazon Cognito.

Your membership. Which plan you are on, whether it is active, when the current period ends, and identifiers for your customer and subscription records at Stripe.

Payment details. None. Card numbers are entered on Stripe’s own checkout page and are held by Stripe. They never reach our servers, so we cannot lose them.

Photos you upload for virtual try-on. The photo of yourself you upload, the outfit you picked, and the optional scene you typed, plus the generated image that comes back.

What you save. The drops you bookmark.

Where you came from. If you arrive by clicking an ad, the ad network puts an identifier in the link (fbclid for Meta, ttclid for TikTok, and similar for others), along with any campaign labels. We read those, store them in your browser’s local storage, and remove them from the address bar. We also record which page you landed on and the site you came from.

How you use the site. Our own, first-party analytics: which pages you open, which outfits you view or open, and steps like pressing “Load More”, opening the signup form or reaching the pricing page. Each is stored with an approximate location (country, region, city — never a street or coordinates of you), the type of device and browser, the site you came from and any campaign labels, and a random visitor identifier that this browser makes for itself and keeps in its local storage. That identifier is not your IP address and is not shared with anyone; it lets us tell a returning visitor from a new one and see where people give up. If you create an account, your activity is linked to it. No third-party analytics script runs on the site.

Technical data. Your IP address and browser user-agent, seen by our servers and hosting providers as part of serving any request on the internet. Our analytics never store the IP address: it is turned into an approximate location at the edge and then discarded, and the user-agent is reduced to a device type, browser and operating system.

We do not buy data about you, we do not sell data about you, and we do not run third-party advertising on this site.

This is the most personal thing we handle, so it gets its own section.

When you generate a try-on, your photo is sent to OpenAI, which produces the image. OpenAI processes it to perform that generation on our behalf. As soon as the job finishes — successfully or not — we delete your uploaded photo from our storage. We keep it only for as long as it takes to make the picture.

The generated image is stored in our own storage on Amazon S3, and it stays there until you delete it or close your account. You can delete any try-on from your gallery at any time, and the image is removed when you do. We never post your try-ons anywhere, never show them to other members, and never use them to train any model.

Please upload photos of yourself. Do not upload photos of other people, particularly not children.

To run your account and let you sign in. To take payment and give members the access they paid for. To generate your try-ons and enforce the monthly allowance your plan includes. To keep the service working and secure. And to measure whether our advertising is working, which is the subject of the next section.

Where the law requires a legal basis: account, membership and try-on data are processed to perform our contract with you. Security and fraud prevention, and measuring our own advertising, rest on our legitimate interest in running a viable service — an interest we have weighed against your privacy, which is why the advertising section below is as narrow as it is.

We advertise, and we need to know which ads bring in members rather than guessing. That means telling the ad network when one of its clicks became a paying member. Here is exactly what that involves.

In your browser. On coolgirloutfit.com we load Meta’s pixel, which records that a page was viewed. It is not loaded on development or preview versions of the site.

From our server. When a subscription is paid for, our server tells the relevant ad network that a purchase happened, its value, and the click identifier that brought you here. This uses Meta’s Conversions API, and the equivalent APIs at TikTok and Snapchat if you arrived from one of those.

Your email is never sent in readable form. It is converted to a SHA-256 hash before it leaves our servers — a one-way fingerprint the network can compare against its own hashes to recognise an existing account, and which cannot be turned back into your address. Your IP address and browser user-agent are sent as well, because the networks use them to match the purchase to the click.

We send a purchase event. We do not send what you browsed, what you saved, or anything at all about your try-ons or the photos in them.

To limit this: browser-level ad and tracker blockers stop the pixel outright. Meta’s own controls are in Accounts Center → Ad preferences, including “Activity information from ad partners”. You can also email us and ask us to stop sending events tied to you.

We use these companies to run the service. Each gets only what its job needs.

• Stripe — payments, card details, billing records.
• Amazon Web Services — our servers, database, file storage and sign-in, in the US East (Ohio) region.
• Vercel — hosting and delivery of the website itself.
• OpenAI — generating try-on images, as described above.
• Google — only if you choose to sign in with Google.
• Meta, and TikTok or Snapchat where relevant — advertising measurement, as described above.

We may also disclose data if the law compels us to, or to protect the service and its members from fraud or abuse. If the business is ever sold, member data would transfer with it, and we would tell you first.

On servers in the United States. If you are in the UK, the EEA, or Brazil, that is an international transfer, made under the standard contractual clauses our providers offer.

Your account and membership records last as long as your account does. Billing records are kept longer where tax and accounting law requires it. Try-on images stay until you delete them or close your account. Uploaded photos are deleted within minutes, as soon as the generation finishes. Ad-origin data lives in your own browser until you clear it, and the campaign that brought you in is kept alongside your account so we can tell which advertising worked.

You can ask for a copy of your data, ask us to correct it, or ask us to delete it — including your account and every try-on in it. Depending on where you live you may also be able to object to processing, ask us to restrict it, or complain to your local data protection authority.

Email hello@coolgirloutfit.com from your account address and we will action it within 30 days. There is no fee and no form.

We keep your sign-in session, the ad-origin data described above and our own analytics visitor identifier in your browser’s own storage — that is what keeps you logged in and lets us count you once. Clearing your browser’s site data removes all of it. Meta’s pixel sets its own cookies on coolgirloutfit.com. We do not use any other analytics.

This service is not for people under 16, and we do not knowingly collect anything from them. If a child has given us data, email us and we will delete it.

If we change this policy we will update the date at the top, and we will tell members by email before anything material takes effect.