Эта страница – юридический документ и намеренно оставлена на английском: приблизительный перевод обещания – это уже другое обещание. Вопросы по ней присылайте на адрес поддержки, ответим по-русски.
Privacy policy
Last updated 7 October 2026.
1. Who we are
MondeStyle is provided by Individual Entrepreneur Rustam Alibekov, trading as Muffin Studio, Tsintsadze Street 12, Tbilisi, Georgia. We decide what happens to the personal data this page describes, which makes us its controller. Write to us at support@mondestyle.com.
Payments are handled by Paddle, our reseller and merchant of record, which is the controller of the payment details it collects – see section 5.
We have not yet appointed a representative in the EU (GDPR Article 27) or in the UK. Until we do, write to us directly at the address above; every request is answered by us.
2. What we collect
| What | Why | Basis | Kept |
|---|---|---|---|
| Quiz answers – eye, hair and skin colour, hair length, jewellery, contrast, outline, build, height, optional weight, styles – and the colours you tell us suit you. Kept on your device | To work out your palette, outline and direction | Contract | Until you delete it |
| Your quiz answers, without your email – only if you press “Show my code” to move your subscription into the app or onto another device | To open your subscription and your result where you type the code | Contract | Deleted when the code is used, when you ask for a new one, or 24 hours after you asked. We keep a one-way hash of the code, never the code itself |
| If you give or use a gift week: a one-way hash of the code, and the random ids of the two browser sessions – the one that gave it and the one that used it | To open the week on the device that used the code, once per device and for three friends per subscriber | Contract | The code, 30 days after it was made. Which session gave a week to which, for as long as the code’s three-friend limit has to be kept. Neither names a person |
| Email address, if you ask for your result by email | To send it to you, once each time you ask | Consent | Not kept. For that day only we keep a one-way hash of it and a count, so the form cannot be used to mail strangers |
| Email address, your language, the names of your palette, outline and direction, and when you agreed – only if you tick “Send me three letters” | To send you three letters about your colours over about ten days, and to stop them if you subscribe | Consent, withdrawn with the link in every letter | Deleted when the third letter is sent, when you unsubscribe, or when you subscribe – about ten days at most |
| Your answer to “Does this match you?” – yes, partly or no, the reason you pick, which of the twelve palettes you were given and whether it was a close call | To learn how often the result is right, and where it goes wrong | Legitimate interest | Only as a daily count, with no address, account or device attached. For that day only we keep a one-way hash of your connection and a count, so the count cannot be flooded |
| Which step of the way you reached – the first page, the first question, the end of the colour questions, of the shape questions and of the ones on what you would rather cover, the first outfit you are asked about, the end of the questions on your taste, the last question, your result, the price, the payment button, the page after paying – with the page’s language, whether it was the website or one of our apps, and, if you came from an advert, which network it was on (TikTok, Meta or Google), read from the link you followed. Never the campaign, the advert or anything else in that link | To see where people stop on the way from the first page to a result and a subscription | Legitimate interest | Only as a daily count per step, with no address, account or device attached. Your browser remembers for that visit only which steps it has already counted, so a reload is not counted twice. For that day only we keep a one-way hash of your connection and a count, so the count cannot be flooded |
| If you turn on the Monday reminder: the address your browser’s push service gives for notifications, which names no person, and the page’s language | To send one notification a week, on Monday morning | Consent, withdrawn with “Stop the reminders” or in your browser’s settings | Until you stop the reminders, or the push service tells us the address no longer works. The notification we send is empty: the outfit it shows was written on your phone, from your clothes, and none of it is sent to us |
| Payment record | To bill, refund and answer “what was this charge?” | Contract and law | 7 years |
3. What we do not collect
- No face geometry, face templates or biometric identifiers. Nothing here falls under the Illinois Biometric Information Privacy Act, by design.
- No health information. No symptoms, no well-being tracking. Outline, height and weight are physical descriptions used for clothing fit and nothing else.
- No cross-site tracking.
4. Photographs
We do not take them and we do not accept them. There is no camera, no upload and no image of you anywhere in this product. The colour check that once read a garment photograph was removed on 28 September, and with it the only screen that asked for a picture.
- We do not detect, measure or store the geometry of your face.
- We do not generate an image of you wearing anything else.
- We hold no photograph of you to train anything on.
5. Who else sees it
Paddle, for payments. Paddle is our reseller and the merchant of record: you pay in Paddle's own window, which opens over our payment page, and Paddle receives your name, email, card and billing country under its own privacy policy. Paddle's script loads on that one page, once you have pressed a button to pay, and on no other. From Paddle we receive what you bought, whether your subscription is active, and the id Paddle gives you as a customer – never your card details. We keep those on our server with the random id of your browser session, so that what you paid for opens for you.
Resend, for the email you ask for. When you ask for your result by email, we send it through Resend, Inc., an email delivery service, from its servers in Ireland. Resend receives your email address and the letter itself – your palette, your outline and your direction – and keeps a record of the delivery under its own privacy policy. It is sent only when you ask, once each time you ask, and we keep no copy of the address. If you also tick “Send me three letters”, Resend sends those too, on days two, five and nine, and we keep your address on our server until the third has gone, you unsubscribe or you subscribe – then it is deleted.
The hosting provider, because the files sit on their disks. Nobody else.
The hosting provider also counts page views. Cloudflare adds a small script of its own to every page it serves for us, and that script reports which page you opened, the site you arrived from, your country, and what kind of browser and device you are reading on. It sets no cookie – the one cookie this site sets is on the cookie page, and only if you pay or ask for letters – it gives you no identifier that outlives the visit, and it does not follow you to any other site. We read the counts to see which pages are read.
There is no Google Analytics, no Meta pixel, no advertising tag and no session recorder. Nothing you answer in the quiz reaches that counter. Your answers stay on this device, and they are never written into the address of a page – so the only thing counted is that a page was opened.
6. Your rights
Access, correction, deletion, portability, restriction, objection and withdrawal of consent. Use this page, which acts immediately. We answer within 30 days. You may complain to your national authority.
7. Changes
If we change this in a way that affects you we email you before it takes effect and keep the previous version linked here. Continued use will not be treated as agreement to something you were never shown.
MondeStyle is published by Muffin Studio.
Muffin Studio: muffinstudio.co · support@mondestyle.com