Privacy Policy — FitCheck

01 — Overview

What Is FitCheck?

FitCheck is a Chrome browser extension that lets you virtually try on clothing items from online retailers using AI image generation. This policy explains what data we collect, how we use it, and your rights as a user.

FitCheck is built and operated as an independent project. We are not affiliated with Google, Target, Amazon, H&M, or any other retailer.

02 — Permissions

What Permissions the Extension Uses and Why

<all_urls> All Website Access

The extension requires access to all websites because shoppers browse clothing across thousands of different retailer domains. It is not feasible to enumerate every clothing site in advance.

The extension only activates when all three signals are present:

A product image · A price · An "Add to Cart" button

On all other pages — search engines, social media, email, news — the content script loads silently and exits immediately without reading content, injecting UI, or transmitting data. A hardcoded exclusion list (site-policy.json) blocks activation on known non-shopping domains regardless of page content.

identity Google Sign-In

Used to sign you in via your Google account through Chrome's built-in chrome.identity.getAuthToken() API. We receive an access token exchanged for a Firebase auth token. We never receive or store your Google password.

OAuth scopes: openid (identity confirmation) · email (account identifier) · profile (display name shown in the popup)

storage Local Data Persistence

Stores the following data locally in your browser only:

Firebase authentication session tokens
Your uploaded avatar photo (to avoid re-uploading on every visit)
Credit balance and subscription status (cached to reduce server calls)
An anonymous, randomly generated analytics ID (see Section 3.5)
Your site preferences (sites you have enabled or disabled)

tabs activeTab Tab Access

Used to open try-on results in a new tab and to pass messages between the popup and the active page's content script. The extension does not read tab history, tab titles, or URLs beyond the currently active tab when you interact with it.

clipboardWrite Copy to Clipboard

Used only when you click "Copy" on a try-on result image. The extension writes the generated image to your clipboard. It never reads from your clipboard.

scripting Script Injection (Optional)

Used to inject the extension's content scripts into sites you have explicitly enabled via the popup. This permission is only triggered by your direct action and never runs automatically on sites outside the default retailer list.

03 — Data Collection

Data We Collect and Store

Account Information

When you sign in with Google, we store the following in Firebase Firestore under your account:

Your Google account UID (a unique identifier assigned by Google)
Your email address
Your display name
Your try-on credit balance
Your subscription status (active or inactive)

This data is used to manage your account, enforce credit limits, and manage your subscription.

Your Avatar Photo

When you upload a photo of yourself for try-on, it is:

Stored locally in your browser via chrome.storage.local
Uploaded to our backend server and stored in Firebase Firestore under your account

Your photo is used only to generate try-on images. It is not analyzed for facial recognition, not used for identity verification, not used to train AI models, and not shared with any third party other than Google Gemini API (Section 4.2).

Product Images

When you initiate a try-on, the product image is:

Pre-downloaded by the extension in your browser
Sent as encoded data to our backend server
Forwarded to Google's Gemini API for image generation
Not stored on our server after the request completes

Try-On Results

Generated try-on images are returned directly to your browser and are not stored on our servers.

Usage Analytics

We collect anonymous usage analytics via Google Analytics 4 (GA4) using the Measurement Protocol:

Assigns you a random UUID as a client identifier — not linked to your Google account or email
Records events such as: try-on initiated, result viewed, sign-in completed
Does not record which specific products you viewed or tried on
Does not record which websites you visited

You cannot be identified from analytics data. The analytics ID is stored locally in your browser.

04 — Data Sharing

Who We Share Data With

We share data with the following third parties only as necessary to operate the service. We do not sell your data.

Google Firebase

Your account information (UID, email, display name, credits, subscription status) and avatar photo are stored in Google Firebase Firestore. Firebase is operated by Google LLC.

Google Privacy Policy →

Google Gemini API

Your avatar photo and the product image are sent to Google's Gemini API to generate the try-on result. Images sent via the API are not used to train Google's models under standard API usage terms.

Gemini API Terms →

Stripe

If you purchase a subscription, you are directed to a Stripe-hosted checkout page. Stripe processes your payment and notifies our server of the result. We never receive, handle, or store your credit card number or any payment card data.

Stripe Privacy Policy →

Google Analytics 4

Anonymous usage events (described in Section 3.5) are sent to Google Analytics 4. No personally identifiable information is included in these events.

Google Privacy Policy →

05 — Retention

How Long We Keep Your Data

Data Type	Retention Period
Account information (UID, email, name)	Retained until you request deletion
Avatar photo	Retained until you upload a new photo or request deletion
Credit balance and subscription status	Updated in real time; deleted on account deletion
Try-on results	Not stored on our servers
Local browser data	Until you uninstall the extension or clear extension data
Analytics data	Per Google Analytics default (14 months)

06 — Your Rights

Your Rights and Choices

Delete Your Data

Email [email protected] to request deletion of your account and all associated data from our servers. We will complete deletion within 30 days.

Revoke Google Sign-In

Revoke FitCheck's access to your Google account at any time via myaccount.google.com/permissions.

Remove Your Avatar

Upload a new photo to replace the stored one, or email us to delete it from our servers immediately.

Disable Analytics

Analytics can be disabled via the extension settings. A user-facing toggle is available in the popup.

Revoke Site Permissions

For any site you manually enabled, open the FitCheck popup and click "Remove from enabled sites" to revoke access immediately.

Uninstall

Uninstalling the extension removes all locally stored data. Contact us to also remove server-side account data.

07 — Photo & Biometric Data

How We Handle Photos

FitCheck processes photos of you to generate virtual try-on images. We want to be explicit about what we do and do not do with your photo:

Your photo is used solely to generate try-on images.

Your photo is not used for facial recognition or biometric identification.

Your photo is not used to verify your identity.

Your photo is not used to train AI models (ours or Google's under standard API terms).

Your photo is not shared with any party other than Google's Gemini API for generating try-on images.

Biometric Privacy Laws: Users in states with biometric privacy laws (including Illinois BIPA, Texas CUBI, and Washington H.B. 1493) have the right to request deletion of their photo at any time by emailing [email protected].

08 — Children

Children's Privacy

FitCheck is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at [email protected] and we will delete it promptly.

09 — Security

How We Protect Your Data

All communication between the extension and our server uses HTTPS encryption.

Firebase Authentication tokens are short-lived and automatically refreshed — stored tokens expire automatically.

Our server verifies your Firebase ID token on every API request.

Payment processing is handled entirely by Stripe; we never receive or store card data.

Server endpoints are rate-limited to prevent abuse and protect your account.

Sensitive server configuration is managed via environment variables, never committed to source code.

10 — Changes

Changes to This Policy

We may update this policy as the extension's features evolve. When we do, we will update the "Last updated" date at the top of this document. Significant changes will be noted in the Chrome Web Store release notes and, where required by law, communicated directly to affected users.

Questions or Requests?

For privacy questions, data deletion requests, or any concerns about this policy:

📧 [email protected]

Extension: FitCheck · Publisher: FitCheck · Version: 1.2.0+