Privacy Policy

You can browse, search, compare and follow retailer links without signing in. In that mode we do not create a profile for you. Your saved shoes, comparison list and recent searches are written to your own browser's local storage and are removed when you clear your browser data or use the “Clear all” buttons in the app.

• Your email address and a password, so you can sign in. Passwords are never stored by us in readable form — the authentication service stores a one-way hash and we never see the password itself.
• A display name, only if you enter one.
• Your saved shoes, comparisons, recently viewed shoes and shoe alerts, so they follow you between devices.
• Your Shoe Match answers and past match results, so you can reopen a previous match.
• ShoeScan history — the identification result and a small thumbnail of the photo you submitted. We do not keep your original full-size photos.
• Anything you send us — a product correction, a deal submission or a message — including a contact email if you provide one.

We do not collect your card number, bank details, home address, phone number, date of birth, government ID or location. We do not buy personal data about you, and we do not sell, rent or share your personal information with anyone for marketing.

We record simple counts so we can see which parts of the site are useful: which shoes are viewed, which brands are searched, which features are used and which retailer links are clicked. These records store the event, the shoe or search term and the date. They are not tied to your account, and they contain no IP address, no device fingerprint and no advertising identifier. We run no advertising pixels and no cross-site trackers.

Some outbound links may carry a partner tracking code, in which case the retailer can tell that the visit came from ShoeMatch and may pay us a commission. We do not receive your order contents, your cart or your payment details. Which links are affiliate links is labelled on the link itself and explained on the affiliate disclosure page.

If you turn on price or deal alerts, we email you when a verified change is found on a shoe you saved. Account emails — confirmation and password resets — are sent by the authentication provider. You can turn alert emails off in your account settings at any time.

• Hosting and content delivery for the website itself.
• A managed database and authentication service, which stores your account data.
• An email delivery provider, for alert and account emails.
• An AI provider, which processes ShoeScan photos to identify a shoe.
• Retailers whose servers host the product photos shown here — your browser requests those images directly, so the retailer can see that request. We do not control what they log.

Standard web-server logs (IP address, browser type, requested page) are processed by the host to serve pages and block abuse.

Account data is kept while your account exists. Usage counts are kept per day so limits reset correctly. Analytics counts hold no personal data and are kept as aggregate history. Delete your account or ask us to delete it, and the data tied to it goes with it.

Traffic is encrypted in transit. Every table of personal data is protected by row-level security so a signed-in account can only read and write its own rows, and server code re-checks who you are on every request — the browser is never trusted to decide. API keys, database credentials and payment secrets live only on the server and are never sent to the browser. No system is perfect, so we keep the amount of data we hold small on purpose.

There is no minimum age to use ShoeMatch or to create an account. If you are under 18, please check with a parent or guardian before signing up. Accounts only ask for an email address and a password — we never ask for your age, date of birth or other personal details.

If you are a parent or guardian and would like a child's account or personal information removed, contact us through the contact page and we will delete the account and the information associated with it.

You can view and delete your saved shoes, alerts, matches, recently viewed list and scan history from inside your account at any time. To request a copy of your data or full deletion, contact us through the contact page. We answer privacy requests from the account's own email address so we do not hand your data to someone else.

This policy describes how the site actually behaves today. It has not been reviewed by a lawyer, and it does not claim certification or compliance with GDPR, CCPA, COPPA or any other specific regime. The operator should obtain professional legal review before advertising the site widely.