Privacy policy
ratethemet is an independent fan project. This page explains what data we collect, how we use it, and what choices you have. We try to collect as little as possible.
What we collect
Email address — only when you sign in. We use it to send you a magic-link login email and to recognize you on subsequent visits. We do not send marketing email and we do not sell or share your email with anyone.
Your handle — a public username derived from your email's local-part by default. You can change it any time. Other visitors see your handle next to your comments.
Your votes — a number from 1 to 10 per look. Aggregated averages are public; individual scores are visible only to you.
Your comments — public, attributed to your handle, visible to anyone visiting the look's page.
Server logs — standard request metadata (IP address, user agent, timestamp) is processed transiently by our hosting provider for abuse prevention and is not retained beyond what they require for operations.
What we do not collect
We do not run third-party advertising networks. We do not use Google Analytics, Facebook Pixel, or similar tracking. We do not build behavioral profiles. We do not sell or share data with brokers.
Cookies
We use a small number of strictly-necessary cookies to keep you signed in (set by Supabase, our authentication provider). We do not set tracking, advertising, or analytics cookies.
Look pages embed photos via Getty Images. When you load a look page, your browser fetches the photo from Getty's servers and Getty may set its own cookies under their own privacy policy. The same is true of the Buy Me a Coffee link in the corner of the site, which connects to buymeacoffee.com when clicked.
Where your data lives
Account information, votes, and comments are stored in a Postgres database hosted by Supabase, Inc. (US-based). The site itself is hosted by Vercel, Inc. (US-based). Both providers maintain their own privacy and security practices.
Your rights
You can change your handle at any time from the sign-in modal in the navigation.
You can sign out and clear your local session from the same modal.
To delete your account and all associated votes and comments, email us via the contact page and we will process the deletion within 30 days. We may retain anonymized aggregate vote counts.
If you live in the EU/UK or California, you have additional rights under GDPR / CCPA (access, correction, portability, deletion). Email us to exercise them.
Children
ratethemet is not directed at children under 13. If we learn that a child under 13 has created an account, we will delete it. If you are a parent and believe your child has signed up, please contact us.
Changes to this policy
If we make material changes, we will update the "Last updated" date at the top of this page and, where practical, post a notice on the homepage.
Contact
Questions about this policy? Reach us via the contact page.