Language

Privacy Policy

Published 27 October 2026

This is a previous version. It applied until 27 October 2026. Read the current version.

1. Information We Collect

a. Information You Provide

  • When you create an account, we collect your email address and a password, which we store hashed.
  • Shoe racks. The shoes you tell us fit you, with brand, model and size, and any foot measurement you enter in millimetres. You can keep more than one shoe rack, and you name them. If you name a rack after a person, that name is personal data you have chosen to give us.
  • Children. If you keep a shoe rack for a child, you can give it a birth month and year, which we use to size that rack against the right charts and to project foot growth. We do not ask for the child's name, and nothing requires you to use one.
  • Community requests and comments. What you write there is published on the site and visible to everyone, along with the display name on your account.
  • Developer API. If you use our API, we keep your plan, your API keys (stored hashed), how many requests each key makes per day, and a history of the changes to your plan and keys, which you can see in Developer Settings.
  • Payments. Paid plans are sold to you by Stripe, trading as Link. Link collects your card details, billing address and any VAT or tax number, and we never see your card details. Link tells us your customer and subscription references, whether each payment went through, and each invoice's number and amount, with a link to it.
  • If you contact us for support or send feedback, we keep what you send us and what we reply.

b. Information Collected Automatically

  • Page views: We record the page, the referring page, any campaign parameters in the link, your device type, your browser's user agent string, and a country derived from your IP address. We do not store your IP address.
  • Cookies: A login session cookie, a sign-in cookie that keeps you signed in for 90 days or until you sign out, and a locale cookie. A visitor_id cookie, which is a random identifier that lets us remember a shoe rack for someone who is not signed in. It is set when you first use a feature that has something to remember, lasts 180 days, and is not readable by scripts. Google reCAPTCHA sets cookies on the registration page and the affiliate redirect page to tell people from bots. Analytics and affiliate marketing cookies are set only after you opt in through the cookie banner.
  • Partners we work with (depends on region): Awin (affiliate tracking), Prisjakt (affiliate tracking), Google Analytics (website analytics), Resend (sending email), Stripe (payments).

2. How We Use Your Information

  • To recommend a size to you, using the size charts brands publish and the shoes you have told us fit you.
  • To improve recommendations for everyone. The sizes people report are what our recommendations are built from. Two people who take the same size in the same shoes probably take the same size in a third, and that comparison is the service. Your reported sizes are used this way in aggregate, without your name or email attached.
  • To send you the notifications you have asked for, on the site and by email. You choose what and how in your notification settings.
  • To analyse usage trends and keep the service working.
  • To comply with legal obligations and enforce our policies.

3. How We Share Your Information

We do not sell your personal data. Your data goes to someone else in these cases:

  • People you share a shoe rack with. If you share a rack, whoever accepts the link can see the shoes in it, its foot measurement and the sizes we recommend for it, and they can see the email address of the account that shared it. You can see the email address of anyone holding access. They cannot change what is in the rack and they cannot pass it on. You can remove their access at any time.
  • Developers using our API on your behalf. Our public API lets a developer create a sizing session and add shoes and measurements to it. If you use a product built on our API, that developer sees the data in the session they created for you, and their own privacy policy governs what they do with it.
  • Stripe (Link). When you start buying a paid plan, we send Link your email address and an account reference, so it can take the payment and tell us which account paid.
  • Service Providers: Third parties that help us with hosting, email delivery, analytics and support.
  • Legal Compliance: If required by law or to protect our rights and users.
  • Business Transfers: If we undergo a merger, acquisition, or asset sale.

4. Your Rights & Choices

Depending on your location, you may have rights under GDPR, CCPA, or other privacy laws, including:

  • Access & Correction: You can see and change your shoe racks, the shoes in them and their measurements in the sizing tool at any time.
  • Data Deletion: You can delete a shoe rack, or ask us to remove your account and the personal data attached to it, by writing to the address below.
  • Notifications: You choose what reaches you and where in your notification settings. Turning email off there stops the email.
  • Cookies: You can change your choice at any time from Cookie Settings in the footer, and you can clear cookies in your browser.

5. Data Security

We take security seriously and implement reasonable safeguards to protect your information. Passwords and API keys are stored hashed, and an invite link to a shared rack is stored as a hash, so a copy of our database yields no working links or keys. Only GetSize staff with an administrator account can see account details, and the changes they make are logged. No online service can guarantee complete security.

6. Data Retention

We keep your account and your shoe racks for as long as your account exists. Sizes reported by people who are not signed in are kept against a browser identifier that lasts 180 days. A sizing session created through our API stops working seven days after it is made. Reported sizes and measurements remain part of the aggregate data our recommendations are built from, without your name or email attached, and that aggregate is not undone when an individual record is removed. Page views are deleted after 90 days. If you ask us to delete your account, we delete it together with your shoe racks, measurements, shares, preferences, notifications, votes, API keys, usage, plan and billing details. Comments you wrote are emptied to "[deleted]" so that replies from others still read, and shoe requests you filed are kept without your name. Size recommendations and clicks to shops stay in our statistics without your account. Records of payments are kept for seven years, as bookkeeping law requires.

7. International Transfers

If you access our Service from outside Sweden, your data may be processed in other countries with different privacy laws.

8. Children

Accounts are for adults, and you must be at least 13 to have one. Our service is built partly for parents buying shoes for their children, so you can keep a shoe rack for a child and give it a birth month and year. When you do that you are giving us data about your child, and you are telling us you are their parent or guardian. We ask for as little as the feature needs, which is a name you choose and a birth month, and never for a child's full date of birth, address or contact details. Children do not get accounts of their own, and we do not knowingly collect anything directly from a child. If you believe a child has given us data directly, write to us and we will remove it.

9. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted with a revised "Last Updated" date. If significant changes occur, we will notify users.

10. Contact Us

If you have any questions about this Privacy Policy, or want your data removed, please contact us at:

GetSize

By GetSize AB, 559533-7279
Hantverkargatan 10
112 21 Stockholm
Sweden

Version history

  • 7 November 2026 (current)
    What we receive when you use GetSize through an AI assistant, with or without an account, how long it is kept, and our current hosting and network providers.
  • 28 October 2026
    The legal basis for each use of your data, the companies we share it with, all your rights, and how we treat privacy signals from your browser.
  • 27 October 2026
    Adds the developer API, payments through Link, and what deleting an account removes.