Privacy Policy

1. Information we handle

Account and sign-in information

Your email address, account identifier, verification status, sign-in challenge and session records. We use emailed one-time codes rather than a TryTress account password. Verification codes and session tokens are stored in hashed form on our side.

Styling inputs

The adult portrait you submit, age range, skin/eye/hair choices, hair length, desired style and optional routine, climate and wardrobe preferences. Your portrait may reveal information about your appearance; only submit it if you are comfortable with the processing described here. We use it to produce styling guidance, not to authenticate your identity.

Reports and processing records

Generated analysis and images, your submitted brief, report and task identifiers, progress, errors and the association between your report and its order. Our report records do not retain raw base64 portrait bytes, but supplier image references and generated content may remain.

Orders and payment status

Order identifiers, price, currency, verified payment status, refund status and the report entitlement attached to a purchase. Waffo Pancake and its payment partners handle card details. TryTress does not collect or store full card numbers or card security codes.

Technical and security information

Network requests, IP information made available by our host, request timing, error and security information needed to operate and protect the service. Our sign-in abuse controls use hashed email/IP-related identifiers. Hosting and payment providers may also process their own technical logs.

Support communications

Your email address, message, order reference and any information you choose to include when contacting us. Avoid sending payment-card details, verification codes or unnecessary sensitive information.

2. Why we use information

• To verify email access, sign you in and show your own orders and reports.
• To confirm payments, bind one purchase to one report, generate and deliver that report, and handle recovery, billing and refund requests.
• To prevent abuse, duplicate submissions, unauthorised access and payment fraud.
• To answer requests, maintain service reliability and meet applicable legal obligations.

Where a legal basis is required, these purposes rely on performing the service you request, your consent where required (including portrait processing), legal obligations, or legitimate interests in operating a secure service where that basis is permitted. You can withdraw consent for future processing by contacting us; this does not undo processing that has already occurred or require removal of records that must legally be retained.

We do not sell personal information or share it for cross-context behavioural advertising. We do not add advertising pixels. Our host supplies Cloudflare Web Analytics for site usage and performance statistics, as described below. We do not use your submitted portrait in public sample reports or marketing without separate permission, and do not run a TryTress model-training programme on your portraits. This does not assert a verified no-training commitment by every downstream AI supplier.

3. Providers and disclosures

• Cloudflare: website delivery, server-side request handling, account/order storage and report processing state through Workers, D1 and Durable Objects. Our host also adds Cloudflare Web Analytics, which measures page views and browser performance. See Cloudflare Web Analytics and Cloudflare’s Privacy Policy.
• Resend: delivery of email sign-in codes, using your email address and the message needed for authentication.
• Floniks and its downstream AI services: upload, analysis and image generation using your portrait and styling inputs. The currently configured models are OpenAI GPT-5 for analysis (Floniks: Image Analyzer (GPT-5)) and OpenAI GPT-Image2 (GPT Image 2) for styling images. Supplier image links are not equivalent to private, authenticated storage.
• Waffo Pancake and its payment partners: checkout, payment, refund and transaction verification. Their checkout may request billing and payment information directly from you.
• Cloudflare Email Routing and our email providers: messages sent to support@trytress.breezegout.com are forwarded to the operator’s private support inbox for handling. Forwarding and inbox providers process those messages.

We may also disclose information where legally required, to investigate abuse or protect rights, or with your specific permission. We do not promise supplier retention, training restrictions, private access or deletion guarantees that we have not verified. Providers may process information under their own notices as well as their service arrangements.

4. Cookies and browser storage

TryTress uses necessary sign-in cookies: the sign-in challenge cookie lasts up to 10 minutes, and a successful account session lasts up to 14 days unless ended earlier. Production cookies use Secure, HttpOnly and SameSite protections. Signing out revokes that session and clears the sign-in cookies.

Browser local storage can retain report recovery identifiers, a submission reference and input fingerprint, display preferences and sample saved-look identifiers. These support recovery and preferences; we do not intentionally save your original portrait or raw questionnaire answers in persistent browser storage. The local portrait preview is held in memory and is not restored after reload.

You can clear cookies and local storage using your browser settings. This may sign you out and remove local recovery or saved-choice information; it does not delete server-side reports, orders or supplier copies. Waffo checkout is a separate service and may use its own cookies.

5. Retention and deletion

Local original photograph

The original preview remains in browser memory while the relevant page/session is active. It is released when replaced or the page is closed. This does not remove an original already uploaded for generation.

Authentication

Codes expire after 10 minutes and sessions after 14 days, or earlier upon revocation. Expiry ends their validity; it does not necessarily immediately erase the corresponding challenge, security or quota records. Expired records are cleaned as part of authentication activity.

Account reports and generated content

There is currently no scheduled automatic expiry for retained TryTress report content. It remains associated with the account until removed following a verified support request, subject to necessary legal preservation. A deletion marker may remain to stop late processing results from restoring removed content.

Account, order, support and security records

We retain these for account operation, support, payment reconciliation, disputes, abuse prevention and applicable legal duties. There is currently no universal fixed automatic deletion period for these records. You can request closure or deletion by email; necessary transaction, legal and security records may be retained, and we will explain any applicable exception.

Supplier-held copies

Floniks, downstream AI services, payment, hosting and email providers may retain their own copies or logs. We have not verified a fixed erasure period for Floniks source and generated images, and cannot promise that deleting your TryTress report erases those supplier copies.

Signing out, clearing browser data or receiving a refund does not automatically erase a report or all associated records. Contact us from your account email to request report or account deletion.

6. Security and international processing

We use HTTPS, account-based access checks for our report endpoints, hashed sign-in secrets and server-side payment verification. These controls do not make supplier image links private. No online system can guarantee absolute security. If a personal-data incident requires notification, we will notify affected people and authorities as required by applicable law.

The operator is in China. The infrastructure and providers can process information internationally, including in Asia-Pacific and other regions used by their networks and downstream services. Your information may be processed outside your country. Where applicable law requires a particular transfer mechanism or separate consent, those requirements must be met; this policy does not claim that a specific contractual safeguard has already been verified for every supplier.

7. Your choices and rights

Depending on applicable law, you may request access, a copy, correction, deletion, restriction, portability or an explanation of our processing; object to certain processing; or withdraw consent. Contact support@trytress.breezegout.com from your account email and explain your request. We may need to verify ownership without requesting unnecessary identity documents. We will respond within the time required by applicable law and explain any exception or lawful extension.

You can ask for account closure by email. Stopping future processing may prevent completion of a report; contact support about any undelivered purchase and the refund policy. You may complain to the relevant data-protection authority where available. We do not use this styling service to make eligibility decisions about employment, lending, insurance or other similarly significant matters.

We currently use email for sign-in and service/support communications, not a marketing mailing list. If optional marketing is introduced, it will need an appropriate choice and unsubscribe mechanism.

8. Adults only

TryTress is for users aged 18 or older and adult portraits only. Do not submit a child's photograph. If you believe a minor's information has been submitted, contact us so we can investigate and address it.

9. Updates and contact

We will date updates on this page and provide appropriate notice of material changes through the website or account email. If a new purpose requires additional consent, a policy update alone is not that consent.

Operator: Li Anhong · China
Privacy, account closure and customer support: support@trytress.breezegout.com
Related document: Terms of Service