Data controller
Data controller and privacy contact: Publisher identity pending configuration. Privacy contact pending configuration. The chatgpt.site version runs on Sites and its Cloudflare infrastructure; vestiaire.ryze.ovh runs on the publisher’s dedicated server.
Data we process
Vestiaire stores information required for the account and selected features: email address, adult profile, preferences, optional measurements, garments, photos and labels, outfits, trips, shared child profiles, votes and voluntary feedback. Optional geolocation is used to request weather; necessary coordinates are sent to the weather service. Session cookies and local theme and language preferences support the site’s operation. Passwords are derived with scrypt and are never stored in plain text.
Purposes and legal bases
Account data is processed to provide the requested service: wardrobe management, deterministic recommendations, authorized child-profile sharing, exports and erasure. Security, abuse prevention and aggregate statistics rely on the legitimate interest of operating the service. Optional product communications rely on consent, which can be changed in the profile or withdrawn from every message. Family sharing only runs when you choose to use it.
Recipients and transfers
When enabled, verification, recovery and consented product emails are sent via Resend, which receives only the destination address and service message, never wardrobe content. Your data is neither sold nor made public. Hosting and strictly necessary providers may process it to deliver the service. A second adult can only see a child profile you explicitly share.
Retention periods
Wardrobe data remains available until you delete it or close the account. User sessions expire after 7 days and admin sessions after 12 hours. Login limits use 15-minute windows. Verification links expire after 24 hours; recovery links after 30 minutes. They are single-use and stored as digests. Unverified accounts older than seven days are purged on new requests. Invitations have a type-specific expiry. Expiry invalidates access but does not imply immediate record deletion. The ten latest deployment backups are retained and rotated, so deleted data may temporarily remain in a protected backup until rotation.
Your rights
You can view, correct and remove information in the app, export a structured copy of your account, or request help at the address above. Where applicable, you also have rights of access, rectification, erasure, restriction, objection and portability, and may complain to the French data protection authority (CNIL).
Security and administration
Access controls are enforced server-side. Photos are private, and sensitive responses are not cached. Administration uses a separate account and session. The authorized administrator can view an email address and access status for support, suspend an account or issue a temporary password-reset link. Private wardrobe content remains excluded from this view.