Privacy

Last updated October 2026. Baddie Certified is run from Ontario, Canada.

What we collect

• Account: your email, an optional name, your password (hashed; we can’t read it), and what you save: looks, wardrobes, price alerts.
• Hotlist email: your email address and where you signed up.
• Premium: Stripe handles payment. We keep your subscription status and Stripe customer id, never your card.
• Usage: a random session id (kept only until you close the browser), the pages you visit and the stores you click through to, with no IP address or personal details. If Google Analytics is on, it sets its own cookies.

Cookies

• payload-token: keeps you signed in.
• bc_cur: remembers USD or CAD.
• hq_sid: a session id for our own counts; gone when the browser closes.

Who we share with

Stripe (payments), Resend (sending email), our hosting provider, and Google Analytics if enabled. We don’t sell your data.

When you click through to a brand, that brand’s own privacy policy applies on its site. Some links carry an affiliate tag so the brand knows the visit came from us.

Your choices

Unsubscribe from any email with its link. Delete looks, wardrobes and alerts from your closet. To delete your account or get a copy of your data, use the contact form and we’ll do it within 30 days.