Legal
Privacy Policy
Effective July 10, 2026
This policy explains what data Wornlist collects, why, and what your choices are. The short version: we collect what we need to run the service, we don't sell your personal data, and you can ask us to delete your account at any time.
1. What we collect
- Account data — email address, username, display name, bio, and avatar. If you sign in with Google, we receive your email and basic profile from Google.
- Payout data — if you provide it, your IBAN, used only to pay out earnings.
- Content — the outfit photos, titles, descriptions, and product links you publish.
- Activity — outfits you like or save, and clicks on product links (including which product was clicked and, if you are logged in, your account id — this is how affiliate earnings are attributed).
- Technical data — cookies needed for login sessions and one cookie that remembers you have completed onboarding. Your currency preference and some cached data are stored in your browser's local storage.
2. What we use it for
- Operating the service: accounts, publishing, favorites, search.
- Attributing affiliate clicks and calculating publisher earnings.
- Safety: product URLs submitted by publishers are checked against Google Safe Browsing to block malicious links.
- Responding to reports of infringing or harmful content.
We do not sell your personal data or use it for third-party advertising.
3. Who else is involved
- Supabase — hosts our database, authentication, and image storage.
- Google — optional sign-in (OAuth) and Safe Browsing URL checks.
- Retailers and affiliate networks — when you click a product link you leave Wornlist; the retailer's own privacy policy applies there. Affiliate networks may set their own cookies on the retailer's site to attribute the purchase.
4. How long we keep data
Account data is kept while your account exists. Click records are kept as long as needed for earnings attribution and fraud prevention. If you delete your account, we delete your profile and content, and anonymize click records that are no longer needed for accounting.
5. Your rights
You can access and update your profile at any time from account settings. You can ask us to export or delete your data by emailing support@wornlist.com. If you are in the EU/EEA, UK, or Türkiye, you may also have statutory rights to object to or restrict processing and to lodge a complaint with your data protection authority.
6. Children
Wornlist is not directed at children under 16, and we do not knowingly collect their data.
7. Changes
If we materially change this policy we will notify you in the app or by email before the change takes effect.
8. Contact
Privacy questions: support@wornlist.com