Privacy policy

OutfitOK is owned and operated by PGBDIC LLC, a limited liability company formed in the State of Illinois, United States. PGBDIC LLC is the controller of the personal data described below, and “we” throughout this policy means PGBDIC LLC.

Because you gave it to us

• Your email address and password (stored hashed, never in readable form).
• Your handle, display name, bio, pronouns and any avatar you upload.
• The photos you post, and the question and context you attach to them.
• Your votes, comments, saves, follows, blocks and mutes.
• A confirmation that you are 18 or over.

Because the product needs it to work

• Product events — a decision was published, a share link was opened, a vote was cast. These build the metrics that tell us whether OutfitOK is useful.
• Salted one-way hashes of your IP address and browser user-agent, used only for rate limiting and abuse controls. We do not store either value in readable form, and rotating the salt makes old hashes unlinkable.
• For visitors who are not signed in: a random token in a cookie, used to count how many people reach the join prompt and to link the ballots cast before 31 August 2026 — when answering still worked without an account — to an account created later. We store only its SHA-256 hash, so what is in the database cannot be replayed as your identity.

• Your precise location. There is no field for it and we do not derive one.
• GPS coordinates from your photos — image metadata is stripped on upload, before storage.
• Face recognition data. We do not run face detection, and we do not build biometric profiles.
• Contacts, browsing history elsewhere, or data bought from third parties.

Determined entirely by the visibility you chose: public, link only, or a Private Circle. Link-only and Private Circle content is excluded from every feed, every profile listing and every search index.

Images are held in private storage with no public URL. When someone is entitled to see a decision, our server issues a short-lived signed link that expires. Nothing is served from a permanent public address.

More detail in Safety

Nothing is indexable by default. A decision can appear in search results only when it is public, you switched search visibility on for it, and it has real answers on it. Drafts, removed posts, thin posts, link-only posts and Private Circle posts are all marked no-index. Your profile is not indexable unless you turn that on.

• Your posts and images: until you delete them, or until you delete your account.
• Rate-limit records: cleared within a day.
• Product events: retained in aggregate for measuring how the product performs.
• Moderation records: kept after removal, because an audit trail is the point of having one.

• Sell your images, your face, your private posts, your location or a personal style profile.
• Let an advertiser or brand influence what the community voted, or where a post ranks.
• Swap a link you posted for an affiliate one without saying so.
• Publish anything about you as an individual in trend reporting. Any such reporting would be aggregated, privacy-preserving and disclosed.

• Change the visibility of a decision at any time, including after publishing.
• Delete individual images, individual decisions, or your whole account.
• Turn search-engine indexing on or off, per post and for your profile.
• Turn off each kind of notification independently.
• Block or mute anyone.

Being straight with you: one-click data export is designed but not yet built. Until it ships, ask us and we will assemble it by hand. We would rather say that than show a button that does nothing.

OutfitOK runs on Supabase (database, authentication and file storage) and Vercel (hosting). They process data on our instructions in order to run the service. If we add an email provider or an image-moderation provider, this list will be updated before it is switched on.

For privacy questions, account deletion, copyright complaints, or to ask for a copy of your data, contact the OutfitOK team through the address published on the site. Copyright complaints should identify the work, the URL, and your basis for the claim.