إيه اللي بنحفظه — وإيه اللي مش بنحفظه.What we store — and what we don't.

Shoppers on frppr.com

The size translator needs an account, so we store:

• Account: your email and a salted scrypt hash of your password — never the password itself. Session cookie: frppr_ssid (HttpOnly).
• Saved choices: wishlists, outfit names and product selections, and discovery preferences (categories, colours and optional budget) are stored with your account when signed in. Guest choices stay in this browser. Pending account changes may be saved locally until they sync. You can choose to add a guest wishlist and outfits to your account.
• Profile: gender, height, weight, body shape, fit preference, usual EU shoe size and the sizes you tell us you wear in other brands. If you add them, we also save your country and the flat measurements and size labels of clothes you own, to compare them with another garment.
• Size-chart photos: sent to the configured AI provider (Anthropic or OpenAI) for reading. FRPPR stores the extracted table (sizes and measurements) and an image fingerprint, not the original image. The table is added to a shared library without your account identity. The provider processes the image under its own terms and retention policies.
• Photo verification: you complete the camera movement check once per account. With your consent, five camera snapshots and your chosen personal photo are sent to FRPPR for face comparison and movement checks on our server. We do not save these images. After a successful check, we retain an encrypted numerical face template linked to your account, with verification metadata, until you delete the account. This sensitive biometric template lets FRPPR automatically match future uploaded photos without repeating the camera check; a later upload does not replace the saved face. Future photos and decrypted face features are processed temporarily in server memory. Short-lived challenge metadata prevents repeated use, and a signed, expiring proof binds each photo check to your account session and exact photo. We use no external face-verification provider. After a photo passes, OpenAI receives the personal and product photos for image generation. These checks help reduce impersonation but can make mistakes; they do not prove legal identity or current camera presence, and cannot guarantee detection of replayed or generated camera images.
• Virtual try-on: your photo and the product photo are sent to OpenAI to create the try-on image. FRPPR does not persist the input photos or the generated image on its server; it records usage for your account allowance. Provider processing and retention are governed by OpenAI’s terms and policies. Signed-in free accounts get one image per day; Pro accounts get a higher daily allowance. These image allowances reset at 00:00 UTC. A paid subscription renews monthly.
• FRPPR Pro: card payments are processed by Polar (we never see card numbers). InstaPay screenshots you upload are stored so we can review them.
• Fit reports: when you rate a purchase, we save the brand, garment category, size and fit, together with your height, weight, estimated body measurements and country at that time. Reports are linked to your account. Other shoppers see combined counts and size suggestions, not your name, email or individual measurements. These suggestions reflect shopper reports and are not an official brand size chart.
• Requests for a brand's sizes: we save the brand, category, gender, country, request date and answer status. You choose whether to share the answer link with a brand; FRPPR does not send it for you. Anyone with that link can view the brand and garment context and submit a chart, without seeing the shopper's account or measurements. A submitted chart enters the shared library; holding the link does not verify the sender's identity.

Your language preference is stored in your browser as frppr:lang. Local-brand suggestions use your chosen country and gender, and combined recent activity such as sizing, requests and fit reports. Discovery first uses your approximate IP country, looked up locally on our server; your IP is not sent to a geolocation provider. If that lookup is unavailable, your browser’s time zone can suggest a country. Your manual country choice is saved on this device as frppr:discovery:country. We do not request precise location.

People replying through a brand link

The sizes and measurements you submit are shared with shoppers. Optional contact details are stored for FRPPR administrators to follow up; they are not published with the chart. Administrators can also see request counts by brand. Merchants see only aggregate demand matched to their store's name or domain, which is an approximate match and does not reveal shopper identities or answer links.

Shoppers on stores that use FRPPR

When you use the “Find my size” assistant on a store, your measurements and selected reference brand and size are saved in your browser for that store only (frppr:profile:v1). The size calculation happens there. To load available brand sizes, the widget requests a catalog for the garment category and men's or women's sizing; it does not send your measurements or your selected brand and size.

The widget sends anonymous counts to FRPPR so the store can see how helpful it is: “button viewed”, “assistant opened”, “size recommended”, “size selected” and “try-on created”. These counts contain no measurements, no names, no cookies and no device identifiers.

Try-on on stores with FRPPR Pro: the widget opens FRPPR so you can sign in, choose your photo and complete the one-time camera check if needed, followed by automatic photo matching before generation. The widget does not collect your photos. The signed-in photo verification, provider processing and account allowance described above apply.

Merchants

• Account: your email and a scrypt hash of your password (we never store the password itself).
• Session: an HttpOnly cookie (frppr_msid) that keeps you signed in.
• Stores: store name, website, platform, widget settings, custom size charts, install status, product listings and the anonymous daily counts above. Published products from active stores appear in public discovery; deleting a store removes its listings.
• Payments: method, amount, status and date. For InstaPay we keep the transfer screenshot you upload so we can verify it. Card payments are processed by Polar — we never see your card details.

What we don't do

• No advertising or tracking pixels, and no sale of your personal data. The processing and sharing needed for the features above are described on this page.
• No third-party analytics on shoppers.

Product discovery

Merchants control published product names, descriptions, images, prices and store links. Your saved choices are private and are not shared with merchants. Product images may load from a merchant’s image host, which receives normal network request information; we omit the page referrer. Following a store link opens that store, where its own privacy policy applies. Discovery contains real products from public store catalogs or merchant-published listings. Prices and availability can change; confirm them on the original store page.

Store referrals and featured placements

When you follow a store, product or featured link from FRPPR, we record the destination and time and add a random referral reference to the link. Referral records do not include your name, email, measurements or IP address and do not set an advertising cookie. Participating merchants can report an order value and currency against this reference within their attribution window. We retain a hash of the merchant’s order ID to prevent duplicate reports. Merchants see aggregate visits and reported orders for their own stores; featured advertising is labelled on the homepage.

Hosting

FRPPR runs on Railway. Like any website, our hosting receives standard request data (IP address, user agent, requested URL) as part of normal operation; we don't use it to profile anyone.

Deleting your data

<<<<<<< HEAD

Shoppers: open your account to export your account data, profile, saved brands, wishlist, outfits, preferences, payment history, fit reports and size requests. Deleting your account removes the profile (including closet measurements), saved brands, wishlist, outfits, preferences, fit reports and receipts. Clear browser site data to remove guest choices and any locally queued changes as well. Requests lose their account link and country, while the brand, garment context and any answer remain so shared charts and existing answer links can still work. Shared charts contain no shopper identity and stay. A card subscription is cancelled as part of deletion. On stores, clear site data for the store where you used the assistant. Merchants: delete a single store under Store settings, or your whole account and every store under Your account in the dashboard. For requests about optional contact details submitted through a brand link, or other data help, email hello@frppr.com.

=======

Shoppers: open your account to export your account data, profile, saved brands, wishlist, outfits, preferences, payment history, fit reports and size requests. Deleting your account removes the profile (including closet measurements), saved brands, wishlist, outfits, preferences, fit reports, receipts, encrypted face template and photo-verification metadata. Clear browser site data to remove guest choices and any locally queued changes as well. Requests lose their account link and country, while the brand, garment context and any answer remain so shared charts and existing answer links can still work. Shared charts contain no shopper identity and stay. A card subscription is cancelled as part of deletion. On stores, clear site data for the store where you used the assistant. Merchants: delete a single store under Store settings, or your whole account and every store under Your account in the dashboard. For requests about optional contact details submitted through a brand link, or other data help, email hello@frppr.com.

>>>>>>> main

Last reviewed: 6 October 2026.