WORLD · Last updated October 12, 2026
Privacy Policy
Draft for the beta. This document is being reviewed and may change before WORLD’s public launch. Items marked “To be confirmed before public launch” are still being finalised.
This explains, in plain language, what personal information WORLD collects, why, where it goes and the choices you have (version 2026-10-10-draft). WORLD is built to collect as little as possible: an account needs only your email address.
At a glance
What we collect
- Your email address (an account needs nothing else)
- Which Terms and Beta notice version you accepted, and when
- Your saves, follows and visit times — private to you
- Your plan and the Stripe identifiers for it
- Feature usage and shortened search words — only if you turn analytics on
- Standard request logs kept by our host, and a one-way hash of your IP for about a day (rate limiting)
- A count of your photo searches (WORLD+) — not the photo
- Your Hunts: what you described (brand, size, colour, budget, details), the description WORLD made of your photo, and the listings found — private to you
- Messages you send us
What we don’t collect
- Your name, date of birth, phone number, postal address or gender
- Your precise location or your contacts
- Your password (only a one-way hash, held by our sign-in provider) or your card number (held by Stripe)
- The photos you search or Hunt with — they’re described once and not stored
- Who is in a photo — WORLD never identifies people or faces
- Your browsing outside WORLD — no advertising, cross-site or third-party tracking (an event video you choose to play is the one exception — see Cookies)
- Analytics before you opt in
- Anything to sell — WORLD doesn’t sell or rent personal information
The details — why each item is needed, who processes it and how long it’s kept — are below.
Who is responsible
To be confirmed before public launch operates WORLD. Person in charge of the protection of personal information: To be confirmed before public launch.
What we collect and why
| Email address | To create and secure your account, confirm it’s yours, sign you in and send account messages (confirmation, password reset). Not used for marketing. |
| Password | To sign you in. Handled by our authentication provider (Supabase Auth), stored only as a one-way hash — WORLD never sees or stores it. When you choose a password, your browser checks it against known breaches using a privacy-preserving method: only the first 5 characters of a fingerprint (hash) of the password are sent to Have I Been Pwned — never the password or your email. |
| Terms acceptance | Which version of the Terms and Beta notice you accepted, and when — to show you agreed and to ask again if they change. |
| Saves and follows | To keep the moments, products and archive pieces you save, and the people, brands and sellers you follow, and to build your My WORLD feed. Private to you. |
| Visit times | The time of your current and previous visit, to show “Since you were here”. |
| Photos you search with (WORLD+) | Only when you choose a photo: it is shrunk in your browser, sent to our AI provider to describe the visible item (garment type, colour, details), and used to find similar pieces. WORLD does not store the photo; only a count of photo searches is kept, to enforce daily limits. |
| Hunts | When you start a Hunt: what you told WORLD about the piece (name, brand, kind, sizes, colour, budget, new or resale, seller country preference, distinctive details and notes), a text description of your photo if you added one (the photo itself is not stored), and the listings WORLD found with the reasons it matched them. Used to run and re-run your Hunt and to show you its results. Private to you; deleted with your account. |
| Plan and billing identifiers | Your plan (free / WORLD+ / Founding), its status and end date, and the identifiers Stripe gives us for your customer record and subscription — to provide WORLD+. Card details are handled by Stripe; WORLD never receives your card number. |
| Product analytics — only if you allow it | Which features are used (e.g. a product opened, alternatives viewed, a search made — including the search words, shortened), with an anonymous browser id, and your account id if you’re signed in. Used to understand and improve WORLD. Off until you opt in; you can withdraw any time in Privacy choices. |
| Anonymous interest counts | Daily counts of how often each public person or brand page is viewed or searched — no identifier, not linked to you — used to decide which people and brands WORLD refreshes more often. |
| Security and technical data | Our hosting provider records standard request logs (such as IP address, browser type, time and page requested) to run, secure and debug the service. For rate limiting we store a salted one-way hash of your IP address with a request count, for about a day. |
| Messages you send us | To answer questions, fix errors you report and handle requests. |
What we don’t collect
- No name, date of birth, phone number, postal address or gender — WORLD doesn’t ask for them.
- No precise location, and no access to your contacts.
- No password or card number: your password is held only as a one-way hash by our sign-in provider, and card details are handled by Stripe.
- No stored photos: a photo you search with is described once and not kept, and WORLD never identifies people or faces in it.
- No advertising, cross-site or third-party tracking scripts, and no analytics until you opt in.
- No sale or rental of personal information.
- No public profiles: your saves, follows and activity are not visible to other users.
Affiliate links and shopping
WORLD shows products sold by third-party stores and sellers. WORLD isn’t the seller: when you buy, you buy from that store, under its terms and privacy policy.
- Affiliate links: some links to stores may be affiliate links. If you buy through one, WORLD may earn a commission, at no extra cost to you. Pages with these links say so at the top (“Disclosure: …”), and the link itself is marked.
- Networks and partners: WORLD may work with several affiliate networks (for example Rakuten Advertising, impact.com, the eBay Partner Network or Amazon Associates), directly with retailers, and with independent sellers. Which programs are active can change over time.
- How attribution works: only when you click an affiliate link, your browser goes through the network’s tracking address to the store. That network and the store receive the technical information needed to credit the purchase — typically the link you followed, the time, your IP address and browser details, and a cookie or similar identifier they set — and the store later reports qualifying purchases to the network. WORLD receives reports of commissions; WORLD doesn’t receive your payment details from these stores.
- No tracking before you click: WORLD doesn’t set affiliate cookies, preload tracking links or redirect you automatically. Nothing is attributed unless you click.
- Results aren’t for sale: commissions never change which products WORLD shows, how they’re ranked or how matches are labelled, or WORLD’s record of what people wore.
- Analytics: if you allow analytics, WORLD records that a store link was clicked (the product, the store, and the network if it’s an affiliate link) — never what you buy.
WORLD doesn’t sell your personal information to affiliate networks or stores.
Email updates
WORLD doesn’t send marketing email today. If it offers email updates, you’ll only get them if you sign up yourself — the box is never pre-ticked, and a one-time alert you ask for (such as a Hunt match) doesn’t sign you up for anything else.
When you sign up, WORLD keeps a record of your consent: your email address, the list, the exact wording you agreed to and its version, this policy’s version, the date and time, and the page or form you used. Every marketing email will have an unsubscribe link that works without signing in and takes effect immediately; WORLD then keeps your address on a do-not-email list so you aren’t mailed again unless you sign up again.
Who processes your information
We use these service providers to run WORLD. They process information on our behalf, for these purposes only:
- Supabase — database and authentication (account, saves, follows, plan, analytics if allowed), and account emails.
- Vercel — hosting and request logs.
- Stripe — payments and subscriptions for WORLD+ (Stripe’s own privacy policy also applies to the payment).
- OpenAI — describes a photo you choose to search or Hunt with. The photo is sent for that one request and is not stored by WORLD; under OpenAI’s API terms it isn’t used to train models by default and may be kept by OpenAI for up to 30 days for abuse monitoring.
- Have I Been Pwned — the anonymous breached-password check described above (receives no personal information).
WORLD also uses AI and search services to read public fashion news; your personal information is not sent to them.
YouTube isn’t a WORLD service provider: if you choose to play an embedded event broadcast, YouTube (Google) handles that viewing under its own privacy policy (see “Cookies and browser storage”).
Where information is stored: these providers may store and process information outside your province or country, including in the United States. Hosting regions to be confirmed and documented
How long we keep it
- Account, consents, saves, follows, Hunts, visit times and plan status — while your account exists; deleted when you delete your account.
- Product analytics events — up to 13 months, then deleted. When you delete your account, events linked to it are de-identified.
- Rate-limiting counters — about a day.
- Request logs at our hosting provider (Vercel), which can include your browser type — about an hour on our current plan.
- Sign-in records at our authentication provider (Supabase), such as the time, IP address and browser of a sign-in — kept in its logs for a limited time, between 1 and 7 days depending on our plan.
- Photos you search or Hunt with — not stored by WORLD; OpenAI may keep them for up to 30 days, as described above.
- Payment records — kept by Stripe as required by financial and tax rules.
- After deletion we keep only a de-identified note that a deletion happened.
- Our database provider keeps backups for a limited period; deleted information can remain in those encrypted backups until they expire.
- Our providers may also keep their own operational and security records under their own privacy policies.
How we protect it
Information is encrypted in transit (HTTPS) and at rest by our providers. Access is limited to what each part of WORLD needs: each account can only reach its own data, and administrative access is separate. No system is perfectly secure; if an incident affecting your information creates a risk of serious harm, we’ll notify you and the authorities as the law requires.
Your choices and rights
- Access / copy: download your data from Account → Privacy & your data.
- Correction: contact us to correct your information.
- Deletion: delete your account yourself from Account; this ends all sessions.
- Withdraw consent: turn analytics off in Privacy choices at any time.
- Questions or complaints: contact the person in charge of privacy (above). You may also contact your privacy regulator.
Children
WORLD is not directed at children and doesn’t knowingly create accounts for them. Minimum age to be confirmed
Changes
We’ll update this policy when WORLD’s practices change and show the date at the top. Material changes will be highlighted in WORLD.