Privacy Policy

Effective August 25, 2026

Stef's Closet is a personal space. What's in your closet, how you like to dress, and the looks we style for you are nobody's business but yours, and we built the service around that idea. This policy explains, in plain language, exactly what we collect, why, and what we will never do with it.

The short version

Your closet is private by default, forever. Nothing is public unless you choose to share an individual look to the Style Board, and even then it goes up under a made-up handle, never your name. A photo of you can never be shown publicly at all: there is no way to publish one.
We never ask for your photo. Your optional style avatar is an AI illustration generated from multiple-choice answers you give, not from a photograph of you.
You don't need to use your real name. An email address and any display name you like are enough.
No ad trackers, no data sales. Ever. Some shop links earn us a commission, and they are marked where they appear. We count visits to our public pages (this site's front page, the free color analysis page, our blog pages, the twelve season pages, the palette pages, the two free tools, the about page, these policies, and looks shared to the Style Board) with analytics we run on our own server. The signed-in app, where your closet actually lives, is not measured at all.
One cookie. A single, essential login cookie. That's the whole list. The visit counting sets none.
You can leave completely. Export your data anytime, and delete your account, with every photo and record, right from Settings.

Who we are

Stef's Closet (stefscloset.com) is the operator of this service ("we," "us"). For anything in this policy, contact us at privacy@stefscloset.com or by mail at Stef's Closet, PO Box 304, Thornburg, VA 22565, United States. Stef's Closet is a trading name of Mount Brands LLC, a Virginia limited liability company, and that company is the data controller for personal information handled through the service.

What we collect

Account details. Your email address, a password (stored only as a modern salted hash that we cannot read), and an optional display name of your choosing.
Your style profile. Self-described preferences you choose from menus: coloring, contrast, silhouette and neckline preferences, general build descriptors, style goals, climate. These are your own words about how you like to dress. There are no body measurements, and nothing is verified or inferred beyond what you tell us.
Your wardrobe. The clothing items you catalog (names, colors, categories, notes, prices if you add them) and the photos you attach. Wardrobe photos are photos of clothing.
Generated content. Outfits, styling notes, magazine issues, and images our AI creates for you, including your optional avatar illustration.
Billing status. Your plan, subscription state, and a customer reference at our payment processor. We never see or store your card number.
How you found us. How you heard about us, if you chose to tell us, and a short note of how you arrived: the address of the site that sent you here, whichever site that was, and the campaign name if the link you followed carried one. We use both to work out which of the things we make are worth making. Neither is shown to anyone else and neither is ever sold or shared.
Technical basics. Standard server logs (IP address, browser type, timestamps, and the address of the page requested) kept briefly for security and debugging, and per-feature usage records so we can meter AI credits.

What we deliberately don't collect

No photos of you are ever required. The service never requests one for any feature, and a photo of you can never be published to the Style Board. If you choose to keep one on a look for your own reference, it stays private.
No real-name requirement, no phone number, no contacts, no address book access.
No precise location, no advertising identifiers, no cross-site tracking of any kind.

How we use your information

Only to run the service: keeping you signed in, storing and displaying your closet, generating styling suggestions and imagery you ask for, sending the account emails the service needs (confirming your email, resetting a password), notifying you about your own closet (new looks unlocking, an issue being ready), billing paid subscriptions, metering AI usage, and keeping the service secure. We do not use your data for advertising, we do not build marketing profiles, and we do not sell or share your email address with anyone for their own marketing.

The closet-activity notifications are optional and on by default. Turn them off anytime from Settings, or with the unsubscribe link at the bottom of any such email. The account emails (confirming your email, resetting a password) always send, since the service can't work without them. Our emails contain no tracking pixels and no read receipts, so we can't tell whether you opened them, and that's intentional.

Everything else in this policy is the default, and the default is private. The Style Board is the one place your content can become public, and that only ever happens when you choose it, one look at a time. You are never opted in, there is no switch that makes your closet public, and your closet stays private by default for as long as you have an account.

When you publish a look, the public card shows only:

AI-rendered imagery only, meaning the look's flat-lay or your avatar illustration. Never a photograph of you, and never the item photos you uploaded;
the look's name and a short styling note written by our AI stylist;
the name, color, and category of each item in the look;
a pseudonymous handle you invent for the board.

A public card never shows your real name, your email, prices, purchase dates, retailers, which pieces you own versus wish for, your private notes, or any account detail. The handle you pick for the board is kept separate from your login identity.

You can un-share a look at any time. When you do, we remove the public copy immediately. The card and its images come down straight away, with no waiting period. We cannot recall a screenshot someone already took, so please share only what you are comfortable being seen. Deleting your account removes all of your public board content along with everything else.

AI processing

The styling features are powered by AI providers acting on our instructions:

Anthropic processes wardrobe details and garment photos to produce styling advice and outfit suggestions.
Google (Gemini API) generates imagery: outfit flat-lays, magazine artwork, and your optional avatar illustration. If you have an avatar, it may be reused as a visual reference so future imagery stays consistent.

Both providers process this data solely to deliver the feature you requested. Under our API agreements, neither provider uses your data to train their AI models. Your account identity is not shared with them. Requests carry wardrobe and styling context, not your email or name.

Cookies and local storage

What	Purpose	Lifetime
Session cookie	Keeps you signed in. Strictly necessary; set only when you log in.	Up to 30 days
Browser local storage	Remembers small interface preferences on your device (dismissed tips, scroll position), and a short note of how you arrived: the address of the site that sent you here, whichever site that was, and the campaign name if the link you followed carried one. The preferences are never sent to us. The arrival note is sent to us in two situations, so we can tell which pages, videos and links actually reach people: whenever you submit one of the email forms on the free color analysis or palette pages, and when you create an account. If you do both, it is sent both times. It records that site's address and the campaign name and nothing else: never the address of the page you were reading there, never a search you typed, and never anything about you. Creating an account deletes it; otherwise it stays until you clear it.	Until you create an account, or until you clear it
Browser session storage	Holds what you have typed but not yet saved, on your device only, so a reload or a phone switching apps does not throw it away. Five things use it: the answers you give while creating an account, an item you are part way through editing, the five answers you give on the free color analysis page, a one-word note on the two free tools saying which tool you just pressed the button on, and, while we are testing what a paid color kit might cost, which of the prices being tested your browser was shown, so that reloading the page does not change the price in front of you. The signup answers are cleared when you finish signing up, when you leave the questions, and when you log in. The color analysis answers are kept so that signing up does not ask you the same five questions again: they are cleared the moment signing up reads them, and otherwise when you close the tab. The tool note holds the tool's name and never an answer, and the result page erases it the moment it reads it, which is how the count knows you took the test rather than followed a link. The price note holds three things and nothing else: a number between zero and two saying which price you were shown, the moment it was written, and a version number. The moment is there so the note expires on its own after a day rather than living as long as the tab does.	Only in that browser tab, and never more than 24 hours for the color note and the price note, which each carry the moment they were written

That is the complete list. There are no third-party cookies, no analytics cookies, and no advertising cookies, which is why you don't see a cookie banner here. The visit counting described in the next section is deliberately cookieless, and stores nothing on your device.

One more thing about the free color analysis, because it is visible and we would rather name it than let you notice it. When your colors appear, the address in your browser bar changes to the page for that palette, and that address names your season, your eye color and your hair color. It is a real page you can bookmark, print or send to someone. Like any other page you open here, that address is in your own browser history and in our server logs.

The free color analysis can also email you your palette, if you ask it to. That field is optional and it appears only after your colors are already on the screen, so you never have to give us an address to get the reading. If you ask us to email you your palette, we keep your email address and the palette your answers produced until we have sent it, and for thirty days after that in case you write back. Then we delete them. The palette is named the same way the page address above is, so what is stored alongside your email is your season and the broad categories your eye colour and hair colour fall into, which is what the email has to be built from. That email carries an unsubscribe link, and your mail app's own unsubscribe button works on it too. We store nothing else from that form: no name, no browser details, and none of the five answers as you gave them. We do keep a short note of how you arrived, of the kind the table above describes: the site that referred you or the campaign name on the link you followed, and never anything about you.

The box on that form asks for four short emails about wearing your colors, and nothing else. Four is the whole of it: they arrive one at a time, spaced a few days apart, and then they stop on their own, and every one of them carries an unsubscribe link if you want out sooner. We do not promise a date for any of them: they start once you have confirmed, and if we have paused sending they simply start when we start again. It works in two steps, because anyone can type anyone's address into a public form. Ticking it does not put you on any list: it asks us to send you one confirmation link. Opening that link shows you a page with a button, and only pressing that button signs you up. The link works once, and if you never open it, nothing further is ever sent. If you create an account with the same address, we drop the confirmation for these four emails rather than ask you to confirm two things at once. Once you have confirmed, we keep your address and season until you tell us to stop, and for thirty days after that so you can change your mind. Once those thirty days are up we delete them and keep one scrambled version of your address that cannot be turned back into it, so that we can be certain we never email you again.

People who agreed to the older wording, which offered occasional color and styling notes rather than these four, are not on this list. We asked them for something different, so we do not send them these.

Our email provider tells us when a message we sent bounced for good or was reported as spam. When that happens we record the address, what happened and when, and we stop emailing that address. That record exists so we can be sure we do not write to a dead address or to someone who told us to stop, and so that if the provider sends us the same report twice we do not act on it twice. We delete it within thirty days, and if the rest of your details go first it goes no later than that. The scrambled version of your address stays behind it the way it does after any unsubscribe, along with a note of whether it was the provider that told us to stop rather than you. That note is why a report of spam is not undone by clicking an old link of ours afterwards, and why unsubscribing yourself still leaves you free to come back.

We are working out whether anyone would pay for a fuller color kit, and while that test is running a block about it appears under your colors. It is honest about the kit not existing yet: pressing its button opens a note saying so in plain words, and that page will not take your card. Nothing on this site is for sale in one step today. If you ask us to email you when the kit is ready, we keep your email address and the same palette description as above, your season and the broad categories your eye and hair colour fall into, so that we can send you that one message. That is all it is for. It is not marketing consent, it does not put you on any list, and it does not license a second message. Thirty days after we send it, we delete them. Two things change that: if you ticked the box asking to hear from us occasionally, the paragraph above covers you instead, and if you have bought a kit with that address, the order itself keeps it so that your download keeps working. Write to privacy@stefscloset.com and we will delete them sooner.

What deletion leaves behind depends on how it happened, and we would rather be exact than reassuring. If you unsubscribe, we keep one scrambled version of your address that cannot be turned back into it, and nothing else, so that we can be certain we never email you again. If we delete your details for any other reason, the whole record goes and nothing of it is kept. Either way we do not keep the five answers as you gave them.

That form also runs the same Cloudflare Turnstile check the signup form uses, which is there to keep automated traffic from sending mail to other people's addresses. It sees the page you are on and your browser's own signals; it never sees your email address, your answers or your colors.

Counting visits to our public pages

So we can tell whether anyone is finding us, we count visits to our public pages only: this site's front page, the free color analysis page, our blog pages, the twelve season pages, the palette pages, the two free tools, the about page, these policy pages, and any look someone has chosen to share to the Style Board. The signed-in app is not measured at all. Your closet, your items, your looks and every page behind the login are excluded by design, not by setting.

Most of that counting is done with Plausible, open-source analytics software that we run ourselves on our own server, served from stefscloset.com. (The Style Board keeps a couple of counts of its own; those are described further down.) It is not a third-party service: no analytics company receives your visit, and there is no advertising network involved anywhere in it.

For a page view it records the page address, the site that referred you if any, and your browser, operating system and rough screen size. It also records how long the page was open and in front of you, and how far down it you scrolled. That is how we tell a page people actually read from one they bounce off. It also works out which country your visit came from, using an offline country database and your IP address. That is as precise as it gets: no region, no state, no city, and nothing closer. Your IP address is not stored in the process. See below.

It sets no cookie and stores nothing on your device, and it cannot follow you to any other website. It is not, however, completely blind to a repeat visit, and we would rather spell that out than imply otherwise. Your IP address is never stored. It is combined with your browser details into a one-way hash, using a secret that is thrown away and replaced every day, so that two page views a few minutes apart count as one visitor rather than two. Within a single day that hash does link your visits together; once the secret rotates, it cannot connect them to anything you do the next day. The hash cannot be turned back into an IP address.

We have turned off two of that tracker's optional extras: it does not record file downloads, and it does not record every link you click. It does count nine specific things on the free color analysis page, on the palette pages, on the season pages, on the two free tools, and on the buttons that start a signup: that someone began the questions, that they finished them, that a result was shown, that a signup button was pressed, that a palette was saved or printed, that a palette link was shared, that someone finished one of the tools, that someone asked us to email their palette, and that a season page was shown with someone's own colors on it. The result one carries one word, the season it showed, and the saving one carries one word for which of the three buttons it was. The tool one carries two words, which tool it was and which of its three results you landed on. The emailed-palette one carries one word for which page you asked from, and the season one carries one word, the season it showed. Nothing else.

While the paid-kit test is running it also counts three things about it: that the block was shown to someone, that someone pressed the button to look at it, and that someone asked to be emailed when it exists. Those three carry the price that was on the screen, because we are testing more than one, and nothing else. The first of the three is what tells us how many people saw the block at all, which is the only honest way to read the other two. None of them records your answers, and there is still nothing here that identifies you.

The Style Board keeps its own counts

Separately from the tracker above, the Style Board counts a few things itself, so that someone who shares a look can see it was seen. We would rather describe this plainly than let the section above imply it doesn't happen.

When you open a shared look through a share link, we record one deduplicated visit against that link, and add one to the visit count its author sees. As with the tracker, your IP address is not stored. It is combined with your browser details and the current date into a one-way hash, and only that hash is kept, purely so the same person opening a link twice counts once.

There is one honest difference from the tracker, and it is worth stating carefully rather than glossing. The tracker's daily secret is thrown away, which is what makes an old visit impossible to trace back. The secret behind these share counts is not thrown away. It is long-lived. The date is mixed into the hash, so each day produces a different value and these rows are never joined up across days in our analytics. But because we still hold that secret, the design does not make cross-day recognition impossible the way the tracker's discarded secret does: someone holding both the secret and a known address and browser could recompute the daily values. We don't do that, it isn't what the counter is for, and we would rather tell you the limit of the guarantee than imply one we can't back.

The board also has a "Recreate this look" feature that is currently switched off. While it is off, clicks on the shop links under a shared look are not recorded. If we switch it on, those clicks will be counted against the look, so that an author can see which pieces drew interest, and we will say so here before that happens rather than after.

These board counts are part of how the sharing feature works, so the tracker opt-out below does not disable them. If you would rather not be counted at all, don't open share links; the board itself is readable without one.

Turning the tracker off

We should be straightforward about one thing: because we host the tracker ourselves and serve it from our own domain, the blocklists used by tracker-blocking extensions generally will not catch it. If you would rather not be counted, you can switch it off permanently for your browser by opening your browser's developer console on this site and running localStorage.plausible_ignore = "true". Nothing on the site breaks if you do, and we will not try to detect or undo it. Note that this covers the page-view tracker only, not the board counts described just above.

We never sell personal information, and we never share it for advertising. Data goes only to the service providers that make the product work, under contracts limiting them to that job:

Provider	Role	What they handle
Anthropic	AI styling	Wardrobe details, garment photos, style-profile context
Google	AI imagery	Garment photos, styling prompts, your generated avatar
Stripe	Payments	Email, subscription status, payment details (card data stays with Stripe)
Resend	Email delivery	Your email address and the emails we send you
Cloudflare	Bot check on the signup form and the palette email form	Your browser's own signals for that check. Never your email address, your answers or your colors
Hostinger	Hosting	Runs our servers (United States)

Charges on your card statement appear as STEFSCLOSET.COM, the site name.

One thing sits outside that list, because you start it rather than us. If you follow a shop link, we put a search term in the address, and that term can be the name of a piece in your closet. We never add your name, your account, or anything else that identifies you.

Following the link is an ordinary visit to that shop. Like any site you visit, they can see things such as your IP address and browser, and their own privacy policy covers what they do with it. Most shop links go to Amazon; one you saved yourself can go to any shop.

Beyond those providers and that search term, we would disclose data only if legally required (a valid legal demand), or as part of a business transfer in which the new operator remains bound by this policy. If we ever received a legal demand for user data, we would notify the affected user unless legally prohibited from doing so.

Shopping links

As an Amazon Associate I earn from qualifying purchases.

Some links to products are Amazon affiliate links. If you buy something after following one, Amazon may pay us a commission. It costs you nothing extra, and it does not change which pieces the app suggests to you.

Some of these links carry a search term, and that term can be the name of a piece in your closet, such as "wine wrap romper". We never send Amazon your name, your account, or anything else that identifies you.

Following one of these links takes you to Amazon, where Amazon's own privacy policy applies.

Where your data lives

Our servers are located in the United States. If you use the service from outside the US (including the EEA, UK, or Switzerland), your data is transferred to and processed in the US. Our providers offer recognized transfer safeguards (such as EU standard contractual clauses) for data originating in those regions.

We offer this service to people in the United States and Canada. We do not direct it to the European Economic Area, the United Kingdom or Switzerland: we do not price it in euros or pounds, we do not offer it in any language other than English, and we do not advertise or target content at those markets. If you are in one of those places and have used the service, write to privacy@stefscloset.com and we will answer your request and delete your information if you ask us to.

How long we keep it

Your data is kept while your account exists. When you delete your account, your records and photos are erased immediately, and the encrypted backups they appeared in are rotated out within 14 days. Payment records are retained by us and by Stripe as long as tax and accounting law requires. Brief technical logs rotate daily and the last fourteen days are kept.

Your rights and controls

You don't need to email anyone to exercise the two big ones:

Export. Download a complete copy of your closet data from the app anytime.
Delete. Permanently erase your account, closet, photos, and profile from Settings. This is immediate and irreversible.

Depending on where you live, you also have legal rights to access, correct, delete, or receive a portable copy of your personal information, to restrict or object to certain processing, and to withdraw consent where processing is based on consent.

If you're in the EEA, UK, or Switzerland (GDPR): our legal bases are performance of our contract with you (running the service), legitimate interests (security and abuse prevention), and consent where we ask for it. You may lodge a complaint with your local supervisory authority, though we'd appreciate the chance to resolve concerns first.

If you're in California (CCPA/CPRA) or another US state with a privacy law: you have the rights to know, correct, and delete, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those laws define it, and we honor these rights for every user regardless of whether a particular law technically applies to us. We will never treat you differently for exercising them.

To exercise any right, use the in-app tools or email privacy@stefscloset.com from your account's email address (that's how we verify it's you). We respond within 30 days. If we decline a request, you may appeal by replying to our response.

Security

All traffic is encrypted in transit (TLS). Passwords are hashed with argon2. Your photos are served only to your own authenticated session, and there are no public photo URLs. Access to production systems is restricted and key-based. No internet service can promise perfection, but if a breach ever affected your data we would notify you promptly, as the law requires and because you'd deserve to know.

Age requirement

Stef's Closet is for adults. You must be 18 or older to use it, and we do not knowingly collect information from anyone under 18. If we learn we have, we delete it.

Changes to this policy

If we change this policy in a way that matters, we'll update the date above and, for significant changes, tell you in the app or by email before the change takes effect. We will never quietly weaken the commitments on this page.

Contact

privacy@stefscloset.com
Stef's Closet · PO Box 304, Thornburg, VA 22565, United States