Privacy.
Written to be read rather than to be defensible. Last updated 11 September 2026.
The short version
Your photographs are never written down. They are sent to Anthropic, read, and dropped — there is no folder of them anywhere, and there is no version of this site where there is. What is kept is a description of what you liked, filed against a random number in a cookie rather than against your name.
Nothing here is sold, and nothing is shared with anybody except the five services listed below that are needed to make it work. There is no advertising network, no tracking pixel, and no third-party analytics script on any page of this site.
Your photographs
They are resized in your browser, sent to our server, and passed straight to Anthropic’s API to be read. They are never saved to disk and never written to the database. When the request finishes they are gone.
Anthropic does not train models on what is sent through the API. What comes back to us is a description in words — “waxed cotton, olive, mid-length” — and that description is what the searches are built from.
If you catalogue clothes you own, the same is true: the photographs pass through, and only the written description of each piece is stored.
Who you are, as far as this site knows
If you have never signed in, you are a random identifier in a cookie called taste_id. It is not linked to a name, an address or an email, and it exists so that the second clozet you build knows what you thought of the first. Clearing your cookies ends it permanently — we have no way to reconnect you to it, which is the trade that makes it private.
If you do sign in, we store your email address and a scrypt hash of your password. A hash cannot be turned back into a password, by us or by anybody who takes a copy of the database. Your email is used to sign you in and to send you a digest if you ask for one. It is never sold, never rented, and never used to send you anything you did not ask for.
Counting visitors
We count how many people arrive and where from, because otherwise there is no way to know whether any of this is working. It is done without a tracking cookie and without a third party.
A visitor is counted as a one-way hash of the date, a secret, your IP address and your browser’s user-agent string. That hash is added to a structure which can answer “how many different people” and cannot answer “was this one of them”. The hash itself is never stored. Because the date is part of what is hashed, the same person tomorrow is a different number — so there is nothing that follows anybody between days, and nothing to hand over if somebody asked.
What is kept is counts: how many visits, which pages, which referrer, and how many people reached each step. That is the whole of it.
What is kept, and for how long
| What | How long | Why |
|---|---|---|
| A saved clozet | 90 days | The pieces, the price range and the note about why they suit you. |
| What you liked and turned down | 365 days | So the next clozet is better than the last one. Kept against the random cookie id, not against your name. |
| Pieces already shown to you | 60 days | So a second run doesn't hand you back the same jacket. |
| A signed-in session | 30 days | Renewed each time you use it, so staying signed in keeps it alive. |
| Your email address and password | Until you ask us to delete it | The password is stored as a scrypt hash and cannot be read back, by us or by anybody who takes a copy. |
| Traffic counts | 90 days | Numbers only - how many people, from where. Nothing that can be traced to a person. |
| A bug report you send | Until it is dealt with | The last 500 are kept; older ones fall off the end. |
Everything above expires on its own. Nothing needs a person to remember to delete it, which is the only kind of retention policy that survives contact with reality.
What leaves this server
Anthropic
The photographs you upload, and the text of your searches.
It is the model that reads your photographs and judges what comes back. Anthropic does not train on what is sent through the API.
eBay, Google Shopping, and the brands' own shops
The search words, which are written from your photographs and never contain anything about you.
They are where the listings come from. They do not learn that a search came from you.
Upstash
Everything in the table above, which is all of what is stored.
It is the database. Nothing is stored anywhere else.
Resend
Your email address, when there is an email to send you.
Sign-in links, and a digest if you have asked for one.
Railway
The ordinary record of a web request, including your IP address.
It is where the site runs.
That is the complete list. If it changes, this page changes with it.
Cookies
Three, all first-party, none of them for advertising. A random taste identifier; a session token if you are signed in; and a short-lived note of which quiz steps you have already seen. There is no cookie used to count visitors, which is why there is no cookie banner on this site.
Deleting your account
Email levoz.labs@gmail.com from the address you signed up with and we will delete the account, its email address, its password hash and its saved clozets within 30 days, usually the same week. You do not have to give a reason and you will not be asked for one.
If you have never signed in, there is no account to delete: clear your cookies and the random identifier is gone, along with our ability to connect anything to you.
You can also ask for a copy of what is held about you, or for something to be corrected, at the same address.
Children
This site is not for people under 13, and we do not knowingly keep anything about anybody under that age. If you believe we have, email us and it will be deleted.
Changes, and how to reach us
If this page changes in a way that matters, the date at the top changes and the change is described here rather than quietly absorbed.
LevoZ Labs is run by one person, not a company. levoz.labs@gmail.com reaches them directly.
See also the terms.