We built WARdrop. with privacy as a core principle, not an afterthought. This policy explains what we collect, why, and how we protect your data.
WARdrop. is designed with a privacy-first philosophy. We do not collect personal data for advertising, we do not sell your data to third parties, and we do not track your behavior across other applications or websites.
This Privacy Policy applies to the WARdrop. mobile application (“App”) and to the website wardrop-app.de (“Website”), both operated by WARdrop. (“we,” “us,” or “our”). It tells you what happens to your data. Where we need your consent, we ask for it separately, at the moment it matters.
The controller within the meaning of the General Data Protection Regulation (GDPR) is Sean G. O., Alte Poststraße, 53913 Swisttal, Germany.
If you have questions about this policy, please contact us at wardropapp@gmail.com.
When you use WARdrop., you may provide us with:
The App may automatically collect limited technical information necessary to provide core functionality:
We explicitly do not collect:
The App contains no analytics SDK and no crash-reporting SDK. We do not measure which features you use, and we receive no automated crash reports.
We use the information we collect solely to:
We never use your data for advertising, behavioral profiling, or resale to third parties. Your personal style choices remain private and are used only to power the features you actively choose to use.
Your wardrobe data, including photos and outfit combinations, is stored on our own servers hosted in Germany. Photos are held in private object storage and served to your device through short-lived, expiring links. The database cannot be reached from the internet. We use:
You may delete your account and all associated data at any time from within the App settings. Your data and photos are then removed from our servers right away (if the photo storage is briefly unavailable, the removal is retried until it succeeds). Copies in our daily backups are overwritten within 14 days. In every case your data is permanently gone within 30 days.
While we take every reasonable measure to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we commit to notifying you promptly in the event of a data breach that affects your information.
WARdrop. uses a limited number of third-party services to deliver core functionality:
We use Firebase Authentication (Google LLC) to create and verify accounts. If you choose Sign in with Apple or Google Sign-In, that provider confirms your identity to us. Firebase also sends the email that asks you to confirm your address and, if you ask for it, the email to reset your password. Google may process this data in the USA and other countries outside the European Union; for these transfers it relies on the EU–US Data Privacy Framework and standard contractual clauses. The pictures of the Inspiration Feed, for example the authors’ profile pictures, are stored in Firebase Cloud Storage (Google) in the europe-west1 region (Belgium). We have a data processing agreement with Google for this (the Cloud Data Processing Addendum).
Apple processes all subscription payments and delivers our push notifications. We receive transaction records confirming your plan, never your payment details.
Weather features use Open-Meteo. When enabled, your phone sends your coordinates, or those of a city you searched for, to Open-Meteo to get a forecast. If you search for a city by name, that search term is sent to Open-Meteo's geocoding service. These requests go from your phone straight to Open-Meteo, not through our servers, and we do not store them.
Our servers, database, photo storage and backups are hosted with Hetzner Online GmbH in Germany. The website is hosted with Hostinger International Ltd. (see Section 10).
If you use Sell item, the App saves that photo to your own Photo Library and opens Vinted or Kleinanzeigen so you can create the listing yourself. We send those services nothing.
We do not share personally identifiable information with third parties except as described in this policy or as required by law.
Nothing in your wardrobe is visible to anyone else unless you allow it, and every allowance you give runs out on its own. There is no profile to find, no follower list, and no way to search for another member.
You can let someone — a friend, a partner, a family member — look at part of your wardrobe for a short while. It works like this:
Sharing begins with a link you send to someone yourself, outside the App. Nobody can find you inside WARdrop., because there is nothing to search. If you never send your link to anyone, nobody can ever ask.
You can replace your link at any time. Anyone holding the old one can no longer use it to ask.
When you allow a request you also choose how long it lasts: 15 minutes, 30 minutes or one hour. That choice is fixed to that one permission when you make it, so changing your mind later never lengthens access you have already given.
Your collections and your favourites are two different permissions. Someone asking for both is making two requests, and you answer each on its own. Saying yes to one never grants the other.
Only the photographs, the category and the brand of the items in whichever part you allowed. Nothing else about you travels. Not what you paid, not when you added something, not how often you wear it, not your statistics, not your milestones, not your email address, and nothing at all about your account or your subscription.
Somebody you have allowed can save a copy of an item into their own wardrobe. When they do, a duplicate of that photograph is stored in their account, and it stays there after your permission ends.
This is the one part of sharing that does not run out. Everything else stops when the clock does; a saved copy does not, because at that point it is an item in somebody else’s wardrobe rather than a view of yours. Ending someone’s access, or deleting your own account, does not remove copies they already saved.
We tell you when it happens. If somebody saves one of your items you receive a notification naming them and the item, so that you can ask them to remove it — our Terms require them to honour that. If they refuse, contact us.
We do not keep a record linking their copy back to you beyond that notification, so we cannot find or delete their copies on your behalf. Turning notifications off means these messages stop reaching you; the saving still happens.
If you allowed someone to see your collections, they can put together an outfit from those items and send it to you as a suggestion. You see who made it and which items it uses, and you decide whether to save it as a favourite or decline it. If you allow notifications, we tell you when one arrives. A suggestion uses only items you made visible to that person, and we keep it until you or the person who made it deletes their account.
Both limits are enforced on our servers, not on anybody's phone. When the time is up, the photographs stop loading.
Ending someone's access takes one tap and takes effect immediately, even if they are looking at that moment. Signing out also ends everything you are currently allowed to see of other people's wardrobes.
Sharing, including suggestions, rests entirely on your consent (Article 6(1)(a) GDPR), given separately each time and for each part. You may withdraw it whenever you like, and withdrawing is exactly as easy as giving it (Article 7(3) GDPR). We never share any part of your wardrobe on any other basis.
We keep a record of each request — who asked, who was asked, which part, and the times involved — so that both people can see what is currently shared and so we can enforce the limits. These records are deleted when your account is deleted.
One honest limit. Someone you have allowed can save a copy of an item, and can photograph or screenshot their own screen — no app can prevent the latter. Ending access stops them seeing anything new. It cannot take back what they have already seen, and it does not delete copies they have already saved. Please only share with people you trust.
WARdrop. is completely free of advertising. We do not serve ads, we do not partner with advertisers, and we do not share your data with advertising networks. We will never show you products to buy, sponsored listings, or paid placements.
The Smart Shopping Assistant works the other way round. You photograph something you are already considering, and we tell you how its colour sits against the wardrobe you already own. The photo is read on your phone and stays there; only its colour values are sent to us. We do not choose the item, we are not paid to show it to you, and we earn nothing whichever way you decide.
The Inspiration Feed is editorial content we commission and publish ourselves. It is not advertising, and no one pays to appear in it.
We sometimes look for members whose wardrobes would make a good feature. If you have switched on Open to Being Featured in Settings, we may email you to ask whether you would like to take part. That setting is off by default, we contact nobody who has not switched it on, and you can switch it off again at any time.
Taking part is a conversation, not a permission slip. If you say yes, we agree with you in advance exactly what appears — which photos, what is written, and how you are credited. Nothing of yours is ever published without your explicit approval, and you can ask us to remove a feature after publication.
Our business model does not depend on monetizing your data or attention. Premium features are offered through direct in-app subscriptions only.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at wardropapp@gmail.com. We will respond within 30 days.
You also have the right to lodge a complaint with a data protection authority, in particular in the country where you live or work.
Giving us an email address, or signing in with Apple or Google, is needed to create an account; without it we cannot offer the App. Everything else is optional. We do not take decisions about you based solely on automated processing that have legal or similarly significant effects.
WARdrop. is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at wardropapp@gmail.com and we will take steps to delete such information promptly.
The website wardrop-app.de is hosted by Hostinger International Ltd.; the server is in Frankfurt am Main (Germany), and backup copies are kept in France. When you open a page, the web server processes your IP address, the time and the page you asked for in its access logs. That is needed to deliver the page and keep it secure (Article 6(1)(f) GDPR). The website sets no cookies of its own and uses no analytics or tracking tools. Its fonts are served by this website itself, not by Google.
We have a data processing agreement with Hostinger under Article 28 GDPR; Hostinger processes data only on our behalf. For this it uses sub-processors of its own, for example for infrastructure and email delivery. Where these are located outside the European Economic Area or transfer data there, the transfers are protected by EU standard contractual clauses (Article 46(2)(c) GDPR). The current list of sub-processors and the contract terms, including the standard contractual clauses, are at hostinger.com/legal/dpa.
If you enter your email address in a “Notify me at launch” form, we send you an email asking you to confirm. Only after you click the link in it is your address on the list (double opt-in). Until then we store the address, the time, the language of the page, the form it came from and a random confirmation code; if you do not confirm within 7 days, we delete it. Once confirmed, we also store the time of confirmation. We do not store your IP address or browser type with the address; to limit abuse, the form briefly counts requests per IP address, in scrambled form and for at most one hour.
We use the address to send you one email when WARdrop. is available, and for nothing else. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time through the unsubscribe link in our emails or by writing to wardropapp@gmail.com. We delete the list after the launch email has been sent, and in any case within 12 months of your confirmation. The list is stored with Hostinger, and the emails are sent through its mail server.
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.
For significant changes, we will provide in-app notification and, where applicable, seek your consent before the changes take effect.
If you have any questions about this Privacy Policy or our data practices, please reach out:
We are committed to resolving privacy concerns promptly and transparently.