LookBrowsing and shopping do not require an account or analytics consent. You control your saved preferences, and optional Google Analytics stays off until you allow it.
Who is responsible for your data?
LookBundle determines how personal data is used to operate this website, provide saved collections and measure visits with permission.
What we use and why
| Data | Purpose | GDPR legal basis, where applicable |
|---|---|---|
| Google account identifier, name, email, profile information and sign-in state | Google shares basic profile information through Firebase Authentication when you sign in. We identify your account and restore your session. We do not receive your Google password. | Performance of the account service you request (Article 6(1)(b)). Sign-in is optional. |
| Saved look identifiers, category choices, budget preference and last update time | Save and synchronize the collection you request. Guest preferences stay in your browser; signed-in preferences are stored in Cloud Firestore. | Performance of the requested preference service (Article 6(1)(b)). |
| Cookie choice, version and time | Remember and honor your decision about optional analytics. | Compliance with applicable consent obligations (Article 6(1)(c)); necessary device storage. |
| Browser identifiers, page views, device/browser information and shopping actions | Google Analytics helps us understand use of the website after you opt in. Network requests also expose an IP address to the receiving provider. | Your consent (Article 6(1)(a)), which you can withdraw. |
| Request and security information such as IP address, user agent and timestamps | Netlify and Firebase deliver and protect the website and account service. | Legitimate interests in reliable hosting, account security and abuse prevention (Article 6(1)(f)). |
| Information you provide in a privacy or support request | Answer your request, verify identity where necessary and maintain a record of the response. | Applicable legal obligations (Article 6(1)(c)) and legitimate interests in responding to support concerns (Article 6(1)(f)). |
We do not sell your account or preference data. We do not collect payment-card information or process product orders. Amazon and the seller receive purchase information through their own services. Affiliate links include our tracking ID, not your LookBundle account identifier.
Optional analytics and cookies
With your permission, Google Analytics for Firebase measures page and bundle visits, saved-look actions, sign-ins, quiz steps and results, article shopping links and clicks to Amazon. Quiz events can include fixed-choice project, budget-band and product-selection codes, scores and the recommended look. Our events include public page and category labels and may include the referring website’s domain to understand how visitors find us; they exclude names, email addresses, Google account IDs, free-text searches, URL query strings and external referrer paths. The service still uses browser identifiers and is not completely anonymous.
Quiz answers otherwise remain in the current page and are not written to your account or saved across visits. Saving a recommended look uses the existing saved-preference service. You can use the quizzes and see their results without signing in or allowing analytics.
Advertising storage, advertising personalization and Google signals are disabled in our collection configuration. Shopping clicks and planning estimates are not confirmed purchases or revenue. Analytics consent is independent of creating an account or agreeing to the Terms of Service.
We count page views and outbound clicks without cookies, IP addresses or device details. If you click Reject, nothing is sent.
Analytics on this browser: off until you choose.
Withdrawal stops future collection and removes accessible Analytics cookies; it does not make previous processing unlawful or automatically erase past statistics. Read the Cookie notice for storage names, duration and browser controls.
Your GDPR rights
Where the GDPR or comparable law applies, you may request access, correction, deletion, restriction of processing and a portable copy of qualifying data. You may object to processing based on legitimate interests and withdraw consent at any time. Rights can have legal conditions or exceptions.
Use your account page to edit preferences, download your visible account and preference data, clear your saved collection, sign out or delete your account. Google reauthentication protects account deletion. Update your Google profile through Google. The download is a self-service copy, not a complete response covering provider logs or support records.
Other rights, including requests about provider records, may require help from the site operator. We normally respond within one month. If permitted, a complex request may take up to two additional months; we will explain within the first month. Reasonable identity verification may be needed to protect your information.
You can complain to your local data protection authority. EU/EEA authorities are listed by the European Data Protection Board; UK visitors can contact the Information Commissioner’s Office.
Retention and deletion
Guest preferences remain in the browser until cleared or imported into an account. Account preferences and profile data are retained while your account is active, until you clear the relevant data or delete the account. Clearing preferences does not itself delete your account. Deleted preferences are removed from the application’s active Firestore record; provider backups and security records follow their separate deletion schedules.
Cookie choices expire after 180 days. Analytics cookies are configured for up to 180 days without extension on each visit. Browser cookie duration is separate from data already held in Analytics reports. We retain support and rights-request records for as long as needed to complete the request and meet applicable recordkeeping or legal obligations.
Firebase states that authentication security IP logs are kept for a few weeks and that deleted authentication information is removed from live and backup systems within 180 days. Provider security and hosting logs are retained according to their service policies, security needs and legal obligations. Account deletion does not automatically erase earlier analytics; contact us for help with a request about analytics identifiers.
Providers and international processing
Netlify hosts the website. Google provides Firebase Authentication, Cloud Firestore and optional Analytics. Our Firestore database is in the United States (us-east1); provider systems may process data in other countries. Authorized operators and providers can access information as needed for service administration and support. Access is protected through sign-in and account-specific database rules.
Google describes Data Privacy Framework participation and data-processing terms; Netlify’s data-processing agreement includes international-transfer safeguards such as Standard Contractual Clauses where applicable. These mechanisms and their applicability depend on the service and transfer. You may request information about the safeguards used for your data.
Read Firebase privacy and security information, Google’s Privacy Policy, Netlify’s Privacy Statement and Netlify’s data-processing agreement.
Recommendations and external websites
Category and budget filters use the preferences you choose. They do not make automated decisions with legal or similarly significant effects. Retailers and Google’s sign-in website have their own notices. LookBundle’s privacy controls do not control their services.
Changes to this notice
We update this notice when our practices change and show the revision date above. If a change needs new consent, optional analytics will remain off until you choose again.