Privacy Policy

Last updated: April 15, 2025 · Effective date: April 15, 2025

This Privacy Policy describes how Closet Compare collects, uses, stores, and shares information when you use the Closet Compare web application ("App") and the Closet Compare Saver Chrome extension ("Extension"), collectively referred to as the "Service."

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

Summary: We collect only what is necessary to run the Service. We do not sell your data. We do not advertise to you. The Chrome extension only reads page data when you explicitly click it — it never runs silently in the background.

1. Who We Are

Closet Compare is a personal project operated by Jeffrey Liang. For questions about this policy, contact: jeffreymingliang@gmail.com.

2. Information We Collect

2.1 Information you provide directly

Email address — used to create and authenticate your account.
Username — a unique handle you choose during onboarding, used to identify you to other users when sharing wishlists.
Password — stored as a salted hash by Supabase Auth; we never have access to your plaintext password.
Wishlist and item data — product names, URLs, prices, images, notes, tags, and status that you choose to save.

2.2 Information collected automatically

Authentication tokens — session tokens issued by Supabase Auth, stored in your browser's localStorage to keep you signed in.
Usage data — Supabase and Vercel may log standard server-side access logs (IP address, request timestamps, HTTP method, response codes) as part of their infrastructure. We do not access or store these logs ourselves.

2.3 Information collected by the Chrome Extension

The Extension reads the following data from the active browser tab only when you click the extension icon. This data is never stored by the extension, never sent to our servers directly, and never transmitted to any third party:

The page URL
The page title and Open Graph / Twitter Card meta tags (product name, image URL)
Visible price text scanned from the page body
The website hostname (to infer the store name)

This data is passed as URL parameters to the Closet Compare App in a new tab, where you review and optionally save it. The Extension itself stores only one item in Chrome sync storage: your configured app URL (e.g., your Vercel deployment URL).

2.4 Information we do NOT collect

Browsing history or background tab monitoring
Precise geolocation
Device identifiers or fingerprinting data
Payment or financial information
Health information
Communications (emails, messages)
Any data from minors under 13 (see Section 9)

3. How We Use Your Information

Purpose	Data used	Legal basis (GDPR)
Create and manage your account	Email, password, username	Contract performance
Authenticate you on return visits	Email, session token	Contract performance
Store and display your wishlists	Wishlist and item data	Contract performance
Enable wishlist sharing by username	Username, wishlist data	Contract performance / consent
Pre-fill the Add Item form via the Extension	Page metadata (client-side only)	Legitimate interest
Respond to support or privacy requests	Email	Legitimate interest

We do not use your data for advertising, profiling, or any purpose beyond operating the Service.

4. Cookies and Local Storage

The Service uses browser localStorage to store your Supabase authentication session token. This is required to keep you signed in across page refreshes and is not used for tracking or advertising.

The Chrome Extension uses Chrome sync storage solely to store your configured app URL.

We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.

5. Third-Party Services

We rely on the following third-party services to operate the Service. Each has its own privacy policy:

Service	Purpose	Data shared	Privacy policy
Supabase	Database hosting and authentication	Email, username, wishlist data, session tokens	supabase.com/privacy
Vercel	Web app hosting and deployment	Standard HTTP access logs (IP, timestamps)	vercel.com/legal/privacy-policy
Google OAuth (optional)	Sign in with Google	Email address and Google profile (if you choose Google sign-in)	policies.google.com/privacy

We do not sell, rent, or trade your personal information to any other third parties.

6. Data Retention

Account data (email, username, wishlists, items) is retained for as long as your account is active.
If you request account deletion, all personally identifiable data associated with your account will be deleted within 30 days.
Extension storage (configured app URL) is stored locally in your browser and is deleted when you uninstall the extension or clear it manually via the Options page.
Server access logs retained by Supabase and Vercel are subject to their respective data retention policies.

7. Data Security

All data in transit is encrypted via HTTPS/TLS.
Passwords are hashed using bcrypt by Supabase Auth — we never store or have access to plaintext passwords.
Database access is protected by Row-Level Security (RLS) policies, meaning each user can only read and write their own data.
Authentication uses industry-standard JWT tokens with expiry and refresh mechanisms.

While we implement these safeguards, no method of electronic storage or transmission is 100% secure. In the event of a data breach that affects your personal information, we will notify affected users by email within a reasonable timeframe as required by applicable law.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

All users

Access: Request a copy of the personal data we hold about you.
Correction: Update your username or email via the Settings page.
Deletion: Request deletion of your account and all associated data by emailing jeffrey_liang@brown.edu.

EU / EEA residents (GDPR)

Right to portability: Request your data in a machine-readable format.
Right to restriction: Request that we limit processing of your data in certain circumstances.
Right to object: Object to processing based on legitimate interests.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
You also have the right to lodge a complaint with your local data protection authority.

California residents (CCPA)

Right to know: Request disclosure of the categories and specific pieces of personal information collected.
Right to delete: Request deletion of your personal information.
Right to opt out of sale: We do not sell personal information.
Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at jeffrey_liang@brown.edu. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at jeffrey_liang@brown.edu and we will delete that information promptly.

If you are between the ages of 13 and 18, please review this policy with a parent or guardian before using the Service.

10. International Data Transfers

Closet Compare is operated from the United States. Supabase and Vercel may store and process data in the United States or other countries. If you are accessing the Service from the EU, EEA, or other regions with data protection laws, please be aware that your data may be transferred to and processed in countries that may not have equivalent data protection laws.

By using the Service, you consent to this transfer. Supabase complies with applicable data transfer mechanisms including Standard Contractual Clauses where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will make reasonable efforts to notify registered users by email.

Your continued use of the Service after any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

12. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Jeffrey Liang
Closet Compare
jeffreymingliang@gmail.com