Privacy Policy

You can browse, search, compare and follow retailer links without signing in. In that mode we do not create a profile for you. Your saved shoes, comparison list and recent searches are written to your own browser's local storage and are removed when you clear your browser data or use the “Clear all” buttons in the app.

• Your email address and a password, so you can sign in. Passwords are never stored by us in readable form — the authentication service stores a one-way hash and we never see the password itself.
• A display name, only if you enter one.
• Your saved shoes, comparisons, recently viewed shoes and shoe alerts, so they follow you between devices.
• Your Shoe Match answers and past match results, so you can reopen a previous match.
• ShoeScan history — the identification result and a small thumbnail of the photo you submitted. We do not keep your original full-size photos.
• Daily usage counts for Shoe Match and ShoeScan, which is how the free and Pro limits are enforced.
• Membership status if you subscribe to Shoe Match Pro: plan, status and renewal dates.
• Anything you send us — a product correction, a deal submission or a message — including a contact email if you provide one.

We do not collect your card number, bank details, home address, phone number, date of birth, government ID or location. We do not buy personal data about you, and we do not sell, rent or share your personal information with anyone for marketing.

Shoe Match Pro is billed by Stripe. Your card details go directly to Stripe and never reach our servers. We receive only the subscription status, plan and renewal dates needed to unlock Pro features, and Stripe processes that payment data under its own privacy policy.

We record simple counts so we can see which parts of the site are useful: which shoes are viewed, which brands are searched, which features are used and which retailer links are clicked. These records store the event, the shoe or search term and the date. They are not tied to your account, and they contain no IP address, no device fingerprint and no advertising identifier. We run no advertising pixels and no cross-site trackers.

Some outbound links may carry a partner tracking code, in which case the retailer can tell that the visit came from ShoeMatch and may pay us a commission. We do not receive your order contents, your cart or your payment details. Which links are affiliate links is labelled on the link itself and explained on the affiliate disclosure page.

If you turn on price or deal alerts, we email you when a verified change is found on a shoe you saved. Account emails — confirmation and password resets — are sent by the authentication provider. You can turn alert emails off in your account settings at any time.

• Hosting and content delivery for the website itself.
• A managed database and authentication service, which stores your account data.
• Stripe, for Shoe Match Pro payments.
• An email delivery provider, for alert and account emails.
• An AI provider, which processes ShoeScan photos to identify a shoe.
• Retailers whose servers host the product photos shown here — your browser requests those images directly, so the retailer can see that request. We do not control what they log.

Standard web-server logs (IP address, browser type, requested page) are processed by the host to serve pages and block abuse.

Account data is kept while your account exists. Usage counts are kept per day so limits reset correctly. Analytics counts hold no personal data and are kept as aggregate history. Delete your account or ask us to delete it, and the data tied to it goes with it.

Traffic is encrypted in transit. Every table of personal data is protected by row-level security so a signed-in account can only read and write its own rows, and server code re-checks who you are on every request — the browser is never trusted to decide. API keys, database credentials and payment secrets live only on the server and are never sent to the browser. No system is perfect, so we keep the amount of data we hold small on purpose.

ShoeMatch is intended for people aged 13 and over, and accounts are not for children under 13. We do not knowingly collect personal information from a child under 13. If you are under 13, please browse without creating an account — searching, comparing and reading shoe pages needs no sign-up and no personal details — or ask a parent or guardian to manage an account for you.

If you are a parent or guardian and believe a child under 13 has created an account or sent us personal information, contact us through the contact page and we will delete the account and the information associated with it. Where verifiable parental consent would be required for a feature, we do not offer that feature to children rather than attempt to collect consent we cannot verify.

You can view and delete your saved shoes, alerts, matches, recently viewed list and scan history from inside your account at any time. To request a copy of your data or full deletion, contact us through the contact page. We answer privacy requests from the account's own email address so we do not hand your data to someone else.

This policy describes how the site actually behaves today. It has not been reviewed by a lawyer, and it does not claim certification or compliance with GDPR, CCPA, COPPA or any other specific regime. The operator should obtain professional legal review before advertising the site widely.