Privacy.

• Your account. The @handle you choose, and the email address or mobile number you sign in with. Other members only ever see your @handle.
• Sign in with Google or Apple. We receive an account identifier and your email address, and whether the provider has verified it. We don’t receive your password, contacts or anything else in your Google or Apple account, and we don’t store your name.
• Passkeys. Only the public key your device creates, a name for it such as “iPhone”, and when it was last used. Your fingerprint or face never leaves your device.
• RSVPs and the waitlist. Your first name, email address and the day you plan to attend, or your email address if you join the waitlist.
• Invitations. Which invitation you joined with, and who sent it.
• Your fit, if you add it. Your usual sizes, any measurements you enter or keep from an estimate, and how you like things to fit. See “Your fit profile” below.
• Your hearts. The pieces you heart. Only you see them; staff see how many members hearted each piece, never who. Before you join, they stay in your browser and reach us only when you sign in.
• Technical information. Your IP address, used briefly to stop abuse such as repeated sign-in attempts, and error reports when something breaks on the site.

• To create your account, sign you in and keep you signed in.
• To send the emails and texts you ask for: sign-in codes, RSVP confirmations and invitations.
• To run events, such as knowing how many guests to expect.
• To keep the Collective safe, prevent fraud and abuse, and fix problems.

We don’t sell or rent your information, we don’t use it for advertising, and we don’t use information from Google or Apple sign-in for anything except signing you in.

We share information only with the services that run the Collective for us, and only what each one needs:

• Vercel, Railway and Neon host the website, our servers and our database.
• Resend sends our emails.
• OpenAI measures the photos you send for a fit estimate. Under its API terms it does not train on them; it may keep them for up to 30 days to check for abuse, then deletes them.
• Shopify runs our checkout and sends receipts. When you join or buy, your email address, or your mobile number if you joined with one, is shared with Shopify; your sizes and measurements never are.
• Twilio sends sign-in codes by text.
• Google and Apple, if you choose to sign in with them.
• Sentry receives error reports so we can fix problems.

Some of these services store information outside Canada, including in the United States, where it may be subject to local law. We may also disclose information if the law requires it.

On your account page you can add your usual sizes, your measurements and how you like things to fit. We use them only to show which pieces in the shop are in your size. Only you see them: staff never do, and they are never sent to Shopify or anyone else.

If you ask us to estimate your measurements from photos, your photos go straight to OpenAI to be measured and are never stored by us: not on our servers, not in our database, not with our image host. The estimates appear in your form, and nothing is kept unless you save it.

You can change your fit profile at any time, or delete it with “Delete my fit profile” on your account page. Deleting it removes it from our database at once, and it goes with your account if you close it.

We use only the cookies the site needs to work: they keep you signed in for up to 30 days, remember an invitation link while you sign up, keep your bag, and remember the currency you chose for prices. To show prices in US dollars to visitors in the United States, we read the country our host reports for your connection; we don’t store it. There are no advertising or tracking cookies. If you add the site to your home screen, your browser also keeps a copy of the site’s files so it loads quickly; it never stores your account details there.

We keep your account information while your account is open. Sign-in sessions end after 30 days, and one-time sign-in codes expire within minutes. If you ask us to delete your account, we delete your information, except for anything we must keep by law.

• See your email address and mobile number on your account page, and add or remove ways to sign in.
• Ask us for a copy of your information, to correct it, or to delete your account.
• Withdraw from the waitlist or an RSVP at any time.

Email us at hello@closetdropcollective.com for any of these, and we’ll reply within 30 days. If you’re not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Connections to the site are encrypted, sign-in sessions are stored only as one-way hashes, and access to our systems is limited to the people who run the Collective.

The Collective is for people 16 and older. We don’t knowingly collect information from children.

If we change this policy, we’ll update the date at the top of this page, and tell members by email when a change is significant.