Your fit. Your privacy.
Here is what happens when you use ATE, in plain English.
Your photo is processed in memory
Your browser resizes the photo and removes EXIF metadata, including GPS location, before upload. Our server normalizes it again before sending it to OpenAI for outfit scoring. ATE does not save your photo to a database, file store, or application logs. The current and previous photos stay in the open tab’s memory for re-checks and optional sharing; leaving or reloading the tab clears them.
No training on your images
ATE does not use your images to train AI. We send scoring requests to the OpenAI API with storage disabled. OpenAI does not train on API data by default, but may retain data under its own abuse-monitoring and retention rules. In-memory processing at ATE does not mean zero retention by every service provider.
What we keep
We save a SHA-256 fingerprint of the normalized photo, its occasion, score and clothing feedback, garment attributes, timestamps, and a random device ID. Re-check records also link earlier results, selected fixes, and predicted and actual score changes. The fingerprint identifies repeated uploads; it is not a saved copy of the photo. We keep the first accepted score without an expiry to return the same score for the same photo and occasion.
Cookies and local storage
A cookie remembers your 18+ confirmation for up to a year. A device cookie and a backup device ID in local storage support daily limits and access to your results. If you sign in at the paywall, protected cookies hold your sign-in session. Clearing cookies may require confirming your age and signing in again; clearing browser data does not delete server records.
Accounts, payments, and limits
Supabase stores score records and, if you sign in, your email and account. Your payment provider handles checkout; ATE stores subscription identifiers and status, not your card details. Upstash stores temporary rate-limit, quota, and spend counters. IP addresses are hashed for rate-limit keys. Hosting and service providers may keep their own operational logs.
Product analytics
When analytics is enabled, PostHog receives the steps you take in the outfit-check flow, occasion, score band, predicted and actual score changes, timing, cache status, and share-card type. A random ID in session storage connects events within this tab’s visit; it is separate from your account and quota device ID. We do not send photos, image fingerprints, clothing feedback, email, payment details, page URLs, or form contents to analytics. We do not record sessions or automatically track clicks. We request that PostHog not create person profiles or enrich events with IP location. Requests still pass through the provider’s network. Analytics is skipped when your browser signals Do Not Track or Global Privacy Control.
You choose what to share
Share cards exclude photos by default. If you switch on “Include my photos”, ATE processes them in memory to make the card. A downloaded card is saved on your device, and an app you choose to share with receives it. That app’s privacy rules apply to the copy you share.
Adults and outfit-only feedback
ATE is for people aged 18 and over. We require your confirmation and decline photos that appear to feature a minor. Feedback is about clothing only. We do not use faces or body traits to judge an outfit.