Privacy policy

Outfit OKAY is owned and operated by PGBDIC LLC, a limited liability company formed in the State of Illinois, United States. PGBDIC LLC is the controller of the personal data described below, and “we” throughout this policy means PGBDIC LLC.

Because you gave it to us

• Your email address and password (the password is stored hashed, never in readable form).
• Your first name and last name. Your last name is private: only you can read it, and signed-in members see it only if you switch that on.
• Your date of birth, to confirm you are 18 or over. It is not shown to anyone unless you choose to show your age.
• Your city, region and country, chosen from a list of places. New accounts show this on the profile by default so people can find you by place; you can hide it at any time.
• Your handle, display name, bio, pronouns and any avatar you upload.
• The photos you post, and the caption and context you attach to them.
• Your votes, comments, likes, saves, follows, blocks and mutes.
• Messages you send to other members, and any reports and appeals you file.

Because the product needs it to work

• Product events — a decision was published, a share link was opened, a vote was cast. These build the metrics that tell us whether Outfit OKAY is useful.
• Salted one-way hashes of your IP address and browser user-agent, used only for rate limiting and abuse controls. Our own tables never hold either value in readable form, and rotating the salt makes old hashes unlinkable. Our processors keep their own records (see below): sign-in records hold the IP address of a session, and our hosting provider logs requests.
• Two automated checks tell people from scripts using signals from your browser: Vercel BotID, run by our hosting provider, when you sign up, and Cloudflare Turnstile when you sign up, log in or reset your password. Cloudflare receives the check’s token and your IP address. While you have an account we keep how you joined and which checks you passed. Your one-time sign-up pass holds only hashes of a random code and of your email address, plus the checks and times; a day after it is used or expires it becomes due for deletion, and the next successful daily cleanup removes it. Turnstile token hashes are kept for a day to stop reuse, and a refused attempt is recorded only by its reason. Our hosting provider keeps its request logs, including your browser’s user agent, for a day; our own log lines record the result, not your email address or a check’s token.
• For visitors who are not signed in: a random token in a cookie, used to count how many people reach the join prompt and to link the ballots cast before 31 August 2026 — when answering still worked without an account — to an account created later. We store only its SHA-256 hash, so what is in the database cannot be replayed as your identity.

• Your precise location. You choose a city, never an address; we do not read your device’s location and we do not derive one from your connection.
• GPS coordinates from your photos — image metadata is stripped on upload, before storage.
• Face recognition or any other biometric data. We do not run face detection on photographs, we do not build face templates or biometric profiles, and the blur tool is applied by you, by hand.
• Contacts, browsing history elsewhere, or data bought from third parties.

Determined by the visibility you choose when you publish: public, people who follow you, link only, or a Private Circle. Follower-only looks reach only your followers, in their Following feed. Link-only and Private Circle content is excluded from every feed and every search index, and your profile lists only your public looks to everyone but you.

Images are held in private storage with no public URL. When someone is entitled to see a decision, our server issues a short-lived signed link that expires. Nothing is served from a permanent public address.

More detail in Safety

Nothing is indexable by default. A decision can appear in search results only when it is public, you chose search visibility when you published it, and it has real answers on it. Drafts, removed posts, thin posts, link-only posts and Private Circle posts are all marked no-index. Your profile is not indexable unless you turn that on.

• Your posts and images: until you delete them, or until you delete your account.
• Rate-limit records: cleared within a day.
• Product events: kept for twelve months, then deleted automatically. Until then each event is linked to your account, and the link is removed if you delete your account.
• Messages: until you delete your account. A reported conversation’s recent messages, if the reporter chose to share them, are kept with the report.
• Moderation records: kept after removal, because an audit trail is the point of having one.

• Sell your images, your face, your private posts, your location or a personal style profile.
• Let an advertiser or brand influence what the community voted, or where a post ranks.
• Swap a link you posted for an affiliate one without saying so.
• Publish anything about you as an individual in trend reporting. Any such reporting would be aggregated, privacy-preserving and disclosed.

• Choose who can see each decision, and whether search engines may index it, when you publish it.
• Delete a decision and its images, or your whole account.
• Hide or show your location, your last name and your age.
• Turn search-engine indexing of your profile on or off.
• Hide yourself from people searching on Outfit OKAY.
• Download a copy of your data from Settings, Account.
• Change your email, or sign out every other device.
• Turn off each kind of notification independently.
• Block or mute anyone.

What the download holds: everything listed under What we collect that is linked to your account, as one file: your email, date of birth, profile, looks, answers, comments, messages, reports, appeals and product events. Photographs are listed rather than included. The salted hashes used for rate limiting are not linked to you and are cleared within a day, so there is nothing of yours in them to download.

Outfit OKAY runs on Supabase (database, authentication and file storage); Vercel (hosting, request logs, and Vercel BotID, an automated check on sign-up requests); Cloudflare (Turnstile, the security check on the sign-up, log-in and password-reset forms); and Resend (account email such as sign-up confirmation and password reset, and notification email when it is on in your settings). They process data on our instructions in order to run the service. If we add an image-moderation provider, this list will be updated before it is switched on.

Most of this you can do yourself, now, without asking anybody. Delete a decision, with its images, from the post itself. Delete your whole account from account settings, which removes your profile, your posts and the files behind them. Appeal a moderation decision from the appeals page.

For anything else — a privacy or data request, a copyright complaint, a question — write to us from Help and contact. A person reads every message and replies by email. Copyright complaints should identify the work, the URL, and your basis for the claim.