Privacy policy
Last updated July 20, 2026
Here is what we collect and how we use it. We keep it to as little as we can, and you can browse the whole catalog without an account.
Who we are
Luxury Catalog, LLC, United States, is the data controller for the personal information described here. Questions or requests? Email arielle@luxurycatalog.com. If you are in the EU or UK and need a local point of contact, use that address and we will route your request.
What we collect
- Account information: if you sign up, your email address and the profile details you choose to add (handle, bio, avatar, social links).
- Activity you create: bags in your closet, your watchlist and target prices, thrift finds (including a price you paid, if you enter it), reviews, taste-quiz answers, suggested edits, bag requests, and authentication requests.
- Photos you submit to identify a bag: processed to return a match and not stored on our servers (see sharing, below).
- Usage analytics: privacy-first, cookieless-by default product analytics to understand how the site is used. You can decline in the consent notice, and we honor the Global Privacy Control (GPC) signal.
We do not collect or store payment card numbers. If we add paid features later, a PCI-compliant processor handles payments and card data never touches our servers.
How we use it, and our legal basis
We use your data to operate your account and closet, deliver the watchlist price alerts you opt into, show relevant catalog content, improve the product, and keep the service secure. We do not sell your personal information.
For visitors in the EU and UK, our legal bases under the GDPR are:
- Contract: running your account, closet, watchlist, and the alerts you request.
- Consent: enhanced analytics (session replay and surveys) and marketing emails. You can withdraw consent at any time.
- Legitimate interests: cookieless, memory-only baseline analytics and keeping the service secure, balanced against your privacy. A GPC signal or declining in the consent notice turns this off for you.
Who we share it with
Only the service providers that run the product on our behalf, acting as our processors under their own terms. We do not share your data with anyone for their own marketing.
| Provider | What it handles | Location |
|---|---|---|
| Supabase | Database and sign-in (account, closet, activity) | United States |
| PostHog | Product analytics | United States |
| Anthropic | Vision model that reads a photo you submit to identify a bag | United States |
| Resend | Sends the emails and alerts you opt into | United States |
| Vercel | Web hosting | United States |
Photos you submit to the bag-identify tool are sent to Anthropic to generate a match and are not saved to our database afterward.
Where your data is processed
We are based in the United States and our providers are US-based, so your data is processed in the US. If you are in the EU or UK, transfers rely on the providers’ Standard Contractual Clauses or an equivalent safeguard under their own data processing terms. You can ask us for more detail at the contact address above.
How long we keep it
- Account and activity data: kept while your account is open. Delete your account and we remove it, and your newsletter subscription with it.
- Newsletter: kept until you unsubscribe.
- Anonymous logs (for example, searches that returned no result): kept up to 24 months, then purged automatically.
- Analytics: session recordings are deleted after 30 days. Other analytics events are held by our analytics provider, PostHog, under its plan limits.
Affiliate links and tracking
Some links to retailers and resale marketplaces are affiliate links. If you click one and make a purchase, we may earn a commission at no extra cost to you. We always say so on the page where these links appear.
To credit those purchases, our affiliate partners and the networks they use set their own third-party cookies or similar identifiers in your browser when you click out to a merchant. Partners and networks we work with include the eBay Partner Network, Impact, CJ (Commission Junction), Awin, and Skimlinks, among others. These are separate from our own analytics, which stay privacy-first and cookieless by default. The affiliate partners process the data they collect under their own privacy policies, and we do not control those cookies.
You can limit this tracking by declining non-essential cookies in our consent notice, using your browser’s cookie controls, or sending a Global Privacy Control (GPC) signal, which we honor.
Your choices and rights
- Access and edit: view and change your data in Settings.
- Export: download a copy of your data as a file from Settings.
- Delete: delete your account, and the data tied to it, from Settings.
- Notifications: turn price alerts and emails on or off in Settings.
- Analytics: decline in the consent notice. We honor the Global Privacy Control (GPC) browser signal.
Depending on where you live, you may have additional rights (for example, under U.S. state privacy laws or the GDPR), including the right to object to processing, to lodge a complaint with your data protection authority, and to withdraw consent. To exercise any of them, contact us at the address above.
Contact
Questions or requests? Email arielle@luxurycatalog.com.
This is a good-faith summary of our practices and is not a substitute for legal advice; we may update it as the product evolves.