1. What are cookies?
Cookies are small text files placed on your device when you visit a website. We also use related technologies such as local storage. This policy explains what we use them for.
2. Cookies we use
Strictly necessary
Used for sign-in sessions and core security (e.g. NextAuth session cookies). These cannot be turned off without breaking the service.
This also covers dba_tryon, set the first time you use the free try-on page. It holds a random identifier — not your name, email, or IP address — and exists so we can apply the free-try-on allowance and stop the page being used to run up costs at our expense. It is signed so it cannot be edited to grant extra try-ons, marked httpOnly so page scripts cannot read it, and lasts one year. It is not used for advertising or tracking you across sites.
Functional
Used to remember preferences such as your selected location.
Analytics
We use PostHog (EU hosting) to understand how the service is used. This also includes session replay — a reconstruction of your visit covering the pages you saw, mouse movement, clicks, scrolling, and what you type into forms. Replay is not masked, so on the try-on page a recording will show the photos you chose and the product links you pasted.
We would rather correct this page than let it flatter us: analytics and session replay currently run on every visit to the website, on every page including the try-on page. There is no consent banner in front of them today. Once you sign in, a recording is associated with your account and email address. If you would rather not be recorded, email support@dressedbyai.com and we will suppress and delete your recordings. None of this happens in the DressedByAI mobile app, which contains no analytics code.
Third-party
Subscriptions on the website are handled by Gumroad, whose checkout flow may set its own cookies during a purchase. Those are governed by Gumroad’s own cookie and privacy documentation, not ours.
3. Managing your preferences
There is currently no preference banner on the site. Until there is, your options are your browser’s own: most browsers let you view, block, manage, and delete cookies and site storage per site, and blocking third-party scripts will stop analytics and session replay from loading. To have recordings already made of your visits suppressed and deleted, email support@dressedbyai.com. Note that disabling strictly-necessary cookies will prevent the service from working correctly.
4. Do Not Track
We currently do not respond to "Do Not Track" browser signals because there is no industry-wide standard for them.
5. Changes
We may update this Cookies Policy from time to time. The "Last updated" date above will reflect any changes.
6. Contact
Questions: support@dressedbyai.com.