Privacy policy

Last updated: 24 October 2026

This policy explains what personal data Signore Styles (“we”, “us”) collects when you use this website, why, and the choices you have. We have tried to keep it short and plain. We follow India’s Digital Personal Data Protection Act, 2023 and respect equivalent rights under laws such as the GDPR for visitors from elsewhere.

The short version

• You can browse the whole guide without an account and without giving us any personal data.
• If you create an account we store your name, email, a scrambled (hashed) password, and the looks and style preferences you save.
• We don’t sell your data, show ads, or use advertising or analytics trackers.
• You can delete your account and everything in it at any time from My account.

What we collect

When you just browse

• Saved items on your device. Hearts and Dressing Room looks you save without an account are kept in your own browser (local storage). They never reach our server unless you sign in.
• Server logs. Like nearly every website, our server records technical details of each request (IP address, date and time, page requested, browser type). We use these only to keep the site secure and working, and they are deleted automatically within 30 days.

When you create an account

• Account details: your name, email address and password. The password is stored only as a secure hash, so we can’t see it.
• What you save: your hearted looks, Dressing Room looks (including a small preview image), and the style profile you choose (style, body type, face shape, hair type and occasions).
• Activity dates: the date you joined and the date you were last active.

When you contact us

Your name, email address and message, so we can reply.

Why we use it

• To run your account: signing you in, syncing your saved looks across devices and picking looks for your style profile (based on your consent when you sign up).
• To send emails you ask for, such as password-reset links, and to answer your messages.
• To keep the site secure, prevent abuse, and fix problems (our legitimate interest in running a safe service).
• To understand, in aggregate, which looks members save most, so we can improve the guide. Site admins can see member names, emails, join and last-active dates, and saved looks for this purpose and to help with account problems.

We don’t send marketing emails, and we never sell or rent personal data.

Cookies and local storage

We use one cookie, sg_session, which keeps you signed in. It is strictly necessary, so it doesn’t need consent. It lasts up to 60 days, or until you sign out. We also use your browser’s local storage to remember your hearts, saved looks and preferences on your device. We don’t use advertising, tracking or analytics cookies.

Who else handles your data

• Hosting: the site and its database run on a virtual private server provided by Hostinger.
• Email: if email is enabled, password-reset and reply emails are sent through our email provider.
• Fonts: the site loads its fonts from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with Google. See Google’s privacy policy.

We may disclose data if the law requires it. Our providers may store data outside India, with protections required by applicable law.

How long we keep it

• Account data: until you delete your account, or an admin removes it. Deleted accounts are removed from our database straight away and disappear from backups within 14 days.
• Password-reset links: they expire after 60 minutes (24 hours for links an admin creates) and are deleted.
• Contact messages: up to 12 months, or less once dealt with.
• Server logs: up to 30 days.

Security

Connections are encrypted with HTTPS. Passwords are hashed with scrypt, sign-in attempts are rate-limited, session cookies are HTTP-only and secure, and only admins can see member data. No system is perfectly secure, so please use a unique password for this site.

Your rights and choices

• See and correct: view and edit your name, style profile and saved looks in My account, or ask us for a copy of your data.
• Delete: use Delete my account in My account, or ask us to do it.
• Withdraw consent: deleting your account withdraws your consent for us to process your account data.
• Complain: contact our grievance contact below first. If you’re not satisfied, you may complain to the Data Protection Board of India or your local data protection authority.

To make a request, use the contact form (choose “Privacy or data request”). We reply within 30 days.

Children

Accounts are for people aged 18 and over. We don’t knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we make important changes, we’ll update the date above and, where appropriate, show a notice on the site.

Contact and grievance officer

For any privacy question or complaint, use the contact form.