← Back to homepage

Privacy Policy

Last updated: March 10, 2026

Who we are

Clossy (clossy.app) is operated by Ihor Slushnyi, a sole proprietor (jednoosobowa działalność gospodarcza) registered in the Central Register and Information on Economic Activity (CEIDG) in Poland.

Tax identification number (NIP): 6762649601

For the purposes of the General Data Protection Regulation (GDPR), Ihor Slushnyi is the data controller responsible for your personal data.

Contact: contact@clossy.app

What data we collect

When you sign up for the waitlist, we collect your email address. That's it.

When you create a free account, we store your email address and style preferences (your vibe profile scores from onboarding). We also store items you save and outfits you create.

We use PostHog to understand aggregate site usage (page views, referral sources, countries). PostHog runs in cookieless mode in our configuration, does not collect personal data, and uses EU cloud hosting. No individual behavior is tracked.

We use Sentry for error monitoring. When an error occurs, Sentry may collect technical information (browser type, error message, page URL) to help us fix bugs. No personal data is intentionally collected.

Legal basis for processing

We process your personal data under the following legal bases:

  • Consent (Art. 6(1)(a) GDPR) — when you voluntarily submit your email address to join the waitlist. You can withdraw consent at any time.
  • Legitimate interest (Art. 6(1)(f) GDPR) — for aggregated, anonymized analytics to improve the site, and for affiliate tracking cookies that enable our business model.

How we use your data

  • To provide the Clossy service — personalized discovery, styling, and outfit building
  • To improve the product based on aggregate usage patterns
  • To detect and fix errors (via Sentry)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Affiliate links

Clossy contains affiliate links to third-party retailers. When you click a product link and make a purchase, we may earn a small commission. This does not affect the price you pay.

Each retailer has their own privacy policy that governs how they handle your data once you leave Clossy. We encourage you to review those policies before making a purchase.

Cookies

Clossy uses the following types of cookies:

  • Authentication cookies — when you sign in, Supabase sets session cookies to keep you logged in. These are strictly necessary for the service to function.
  • Preference cookies — we store your style profile (onboarding results) in a cookie so the discovery feed can be personalized on first load, before you create an account.
  • Affiliate cookies — when you click a product link, our affiliate network partners (AWIN) may set cookies on your device to attribute the referral and any resulting purchase. These cookies typically expire after 30 days.

We do not use advertising, behavioral tracking, or analytics cookies. Our analytics provider (PostHog) runs in cookieless mode. You can disable cookies in your browser settings at any time. Note that disabling authentication cookies will sign you out, and disabling affiliate cookies does not affect your browsing experience but may prevent proper purchase attribution.

Third-party services

We use the following third-party services that may process data on our behalf:

  • Supabase (database & authentication) — stores user accounts, style preferences, saved items, and product data
  • Vercel (web hosting) — serves the Clossy website; may process server logs containing IP addresses
  • PostHog (analytics) — product analytics with cookieless mode enabled. Collects aggregate usage data (page views, referral sources). EU cloud hosting. No personal data is collected in our configuration
  • Sentry (error monitoring) — captures technical error data (browser type, error messages, page URLs) to help us fix bugs
  • Anthropic (AI) — powers the AI Stylist chat. Your styling questions are sent to Anthropic's API for processing. We do not share your personal data with Anthropic
  • OpenAI (AI) — generates text embeddings used for product search and style matching. Search queries may be sent to OpenAI's API for embedding. No personal data is shared
  • AWIN (affiliate network) — tracks product referrals and purchase commissions. May set cookies when you click a product link

Each provider acts as a data processor under their own terms of service and privacy policies.

International data transfers

Some of our third-party service providers (including Supabase and Vercel) are based in the United States. Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) or the provider's participation in an approved transfer framework.

Data retention

Account data: retained until you request deletion. You can request account deletion at any time by emailing us.

Analytics data: aggregated and anonymized by PostHog; no personally identifiable records are stored.

Affiliate cookies: typically expire after 30 days as set by the respective affiliate network.

Server logs: automatically deleted by our hosting provider in accordance with their retention policies (typically within 30 days).

Your rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Request restriction of processing
  • Data portability — receive your data in a structured, machine-readable format
  • Object to processing based on legitimate interest
  • Withdraw your consent at any time (without affecting the lawfulness of processing before withdrawal)

To exercise any of these rights, email us at contact@clossy.app. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO) — uodo.gov.pl.

Children's privacy

Clossy is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to this policy

We may update this privacy policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Contact

For any privacy-related questions or requests, reach out to:

Ihor Slushnyi
NIP: 6762649601
contact@clossy.app