Cookie Policy.

This Cookie Policy explains the cookies and similar technologies used on customoutfit.ai. We use strictly necessary and functional cookies to operate the Service, plus analytics cookies that are stored only if you accept them. We do not use advertising or marketing cookies, and we do not track you across other websites.

1. What cookies are

Cookies are small text files stored on your device. "Local storage" is a related browser technology that keeps data on your device until cleared. We use both, as described below.

2. Categories we use

• Strictly necessary — required for the site to function and to keep you signed in. These do not require consent.
• Functional — remember preferences such as your language. These improve your experience but are not used for tracking.
• Analytics — help us understand how the site is used so we can improve it. These load only after you accept and can be withdrawn at any time.

3. Cookies & storage we set

• __Secure-next-auth.session-token — authentication session (JWT). Strictly necessary. HttpOnly, Secure, SameSite=Lax. Expires after ~30 days. (Named next-auth.session-token in non-HTTPS development.)
• __Host-next-auth.csrf-token — CSRF protection during sign-in. Strictly necessary. Cleared on browser close.
• NEXT_LOCALE — remembers your language (PT/EN). Functional. ~1 year.
• cookie-consent — local storage entry recording your cookie choice (accept or reject). Functional.
• customoutfit-store — local storage holding your in-progress garment selection and cart. Stays on your device; not transmitted as a cookie.
• _ga, _ga_KRW6J186S6 — Google Analytics, used to distinguish visitors and measure usage. Analytics. Set only if you accept; up to ~2 years.

4. Consent

Where local law requires prior consent — the EEA, the UK and Switzerland — our cookie banner lets you Accept or Reject analytics cookies with equal prominence, and analytics stays off until you Accept. In other regions analytics may be enabled by default without a banner. In every region you can review or change your choice at any time via the Cookie settings link in the footer. Strictly necessary and functional cookies are used without consent because the site cannot work or remember your preferences without them.

For analytics we use Google Consent Mode v2, which defaults to "denied": no analytics cookies or identifiers are stored on your device until you choose Accept. While consent is denied, Google Analytics runs in a restricted, cookieless mode and may receive anonymous signals (for example a page-view event with no identifier and a redacted IP address) used solely for aggregate, statistical modeling — never to identify you and never for advertising. Choosing Accept enables analytics cookies; choosing Reject keeps them off. Advertising and personalization signals remain disabled at all times.

5. Third-party cookies

Checkout is handled by Stripe, which opens stripe.com and sets its own cookies for fraud prevention and payment security, governed by Stripe's Privacy Policy and Cookie Policy. If you accept analytics, Google Analytics is provided by Google, governed by Google's Privacy Policy.

6. Managing & withdrawing

You can change or withdraw your analytics choice at any time via the Cookie settings link in the site footer, which reopens the banner. You can also delete or block cookies in your browser settings and clear local storage from the same menus. Disabling the session cookie will sign you out and prevent ordering.

7. Do Not Track

We do not use advertising or cross-site tracking. Analytics runs only with your consent, so a "Do Not Track" signal has nothing to disable beyond declining the banner.

8. Changes

We may update this Policy; the revised date appears above.