Privacy policy

Who is responsible

PersonalSeason, Address available on request, Poland, is the controller of your personal data. For anything about your data, write to support@personalseason.com.

Your photo

When you agree, your browser sends a compressed copy of your photo to our server. The server holds it in memory only while it finds your skin, hair and eyes, then discards it. It is never written to disk, stored, shown to anyone or used to train AI. We read colors from it; we don't identify you. Reading the colors, placing your traits and running the drapes happen in your browser. When you click “Unlock the full report”, your browser saves a small copy of your face crop (at most 1024 pixels, as a JPEG) in this tab's session storage, with a short code that matches it to this reading, so your colors can still show on it if you come back from checkout and on this reading's report page in this tab. It is never sent to us again, and the report PDF, the wallpaper and our emails never use it. It is deleted when you close the tab, click “Remove my photo”, or start a new reading. We process the photo because you ask us to and give your explicit consent before it is sent.

Your color numbers

When you buy the full report, we store a short set of numbers with your payment at Stripe: your four color traits, the skin, hair and eye colors read from your photo, and your drape choices. They never include the photo or your name. They are how your permanent report link rebuilds your report, so they are kept as long as the payment record.

Payments: Stripe

Stripe processes your payment and collects your email address, card details, billing country and technical data such as your IP address for tax, currency and fraud checks. We never see your full card number. Stripe keeps payment records for as long as tax and accounting laws require, and acts as an independent controller for some of this data under its own privacy policy.

Email: Resend

We use Resend to email your report link after payment, and again when you ask for it on the lost report page. Resend receives your email address and the email's content, and keeps delivery logs for a limited time. Our own logs never contain email addresses. To prevent abuse, the lost report page counts requests per IP address and per email address in memory for up to an hour.

Visits: Umami

We count visits and the steps people take through the site, such as starting an upload or opening a report, with Umami Cloud, a hosted analytics service. It sets no cookies, doesn't follow you across sites, and stores only aggregate statistics, never your photo, colors or email address.

Errors: Sentry

When something breaks, Sentry receives a technical error report: what failed, the page, and your browser and device type. Screenshots, session replays and request bodies are turned off, so it never receives your photo or what you type.

Hosting

The site runs on a server we rent from OVHcloud. Like any web server, it briefly records technical request data such as IP addresses to keep the service secure and working.

Legal bases and transfers

We rely on your consent for the photo analysis, on our contract with you for the report, its email and recovery, on legal obligations for payment records, and on our legitimate interest in a secure, working site for visit counts, error reports and server logs. Stripe, Resend and Sentry may process data outside your country; they protect transfers with safeguards such as the EU Standard Contractual Clauses.

Your rights

Depending on where you live, you can ask for access to, correction or deletion of your data, restrict or object to its processing, or withdraw your consent. Write to support@personalseason.com. You can also complain to your data protection authority.

Last updated 4 October 2026.