Privacy policy — evow Chrome companion

The extension stores a single object in chrome.storage.local on your device:

{
  display_name: string,
  gender: 'women' | 'men' | 'unisex',
  measurements: { chest_cm, waist_cm, hips_cm, height_cm },
  sizes: { top, bottom, shoe },
  source: 'evow.app' | 'demo'
}

That's the only personal data the extension keeps. There is no analytics SDK, no telemetry, no third-party tracker bundled with the extension code.

1. Demo personas (source: 'demo') — fictional personas hardcoded in the extension (Léa, Sofia, Mei, Marcus, Alex). Picking one stores it locally. Nothing is sent to evow servers.
2. Your real evow profile (source: 'evow.app') — when you visit evow.app/extension/auth while signed in, the page sends your stored evow profile to the extension via window.postMessage. This only happens after you click the “Send my profile to the Chrome companion” button.

When the mirror is active on a partner brand site (Sézane, Zara, COS, etc.):

1. The extension reads the public DOM only — never cart, account, or form inputs.
2. It sends an HTTPS POST to fit-engine-jvcpf4qg3a-ew.a.run.app/predict with brand_slug, gender, category and your measurements. Your display name and email are never sent.
3. The fit-engine returns a per-size score (0.0–1.0). The extension uses it to badge the right products on the brand page.

The fit-engine runs on Google Cloud Run in europe-west1, operated by evow. No persistent log of measurements is kept beyond standard 30-day Cloud Run request logs (truncated to the endpoint name + status code).

• Browsing history
• Cart contents, order history, payment information
• Form inputs, passwords, credit card numbers
• Email addresses or contact information (beyond what you typed into evow yourself)
• Any data from non-partner sites

• Local storage — click the extension icon → Sign out at the bottom. This clears chrome.storage.local immediately.
• Server-side evow profile — sign in to evow.app → Settings → Delete my account. Wipes member + household_profile + all related rows per GDPR Article 17. Confirmation by email within 30 days.

• No third-party fonts, scripts, analytics, or ads loaded by the extension.
• One third-party endpoint : evow's own fit-engine on Google Cloud.
• No Facebook Pixel, no Google Analytics, no Sentry, no similar SDK.

Processing is based on Article 6(1)(b) — performance of a contract between you and evow — when you choose to install the extension and sync your profile. Demo persona use without a profile sync involves no personal data and therefore no GDPR processing.

Privacy questions, GDPR/CCPA requests, data export : jmbonipro@gmail.com · response within 5 business days.