Shopper privacy notice, version 1.3

In short

The size tool on this shop is run by FitMyType for the shop. It uses your answers only to find your size.
Nothing is stored on your device for statistics unless you accept analytics in the shop's cookie banner.
Your body answers stay on your device only if you tick “Remember me on this device”.
All data we keep is hosted in the European Union.
“Forget my data” in the size tool clears what is on your device at once, and deletes what our servers hold about it for this shop within 24 hours.

Who is responsible for your data

The shop you are visiting decides why and how your data is used: it is the controller. FitMyType runs the size tool for the shop and handles your data only on the shop's behalf and on its instructions: we are its processor.

Questions about your data go to the shop first. You can also write to us at [email protected]; we pass your request to the shop and help it answer.

What the size tool asks, and why

To find your size, the size tool asks a few questions. Which ones depends on the product. Each answer is used only to work out your size and how a size will fit you.

What	Where it is kept	Why	Legal basis	How long
Gender, age, height and weight	Sent to our servers for your size; on your device only after “Remember me”	The overall shape of your body	Your request for a size	See “What we keep on our servers”
Body shape, bra size, brands and sizes you usually wear	Same as above	A more precise size	Your request for a size	See “What we keep on our servers”
Foot or head size (shoes and helmets)	Same as above	The size of that product	Your request for a size	See “What we keep on our servers”
Your fit preference and the size you chose	Our servers	To show the result and improve the shop's size advice	Your request for a size	See “What we keep on our servers”

We do not ask for your name, email address, photo or payment details, and we do not use your answers for advertising.

What is stored on your device

The size tool runs inside the shop page. It can keep a few small items in your browser. The table lists every one of them. None of them is written for statistics before you accept analytics in the shop's cookie banner.

In a shop, the in-store size tool (opened from a QR code) is a web page of its own, not inside a shop page. It asks you first: only if you tap “Yes, remember me” does it keep a random device id (fmt_device_id), your answer (fmt_retail_consent) and your size data on that site. If you say no, it keeps nothing and you still get a size. “Forget my data” at the bottom of the page clears it all.

Name	Where	What it holds	When it is written	How long it stays
`fmt_device_id`	shop page: localStorage and a first-party cookie	A random id for this browser, so the shop's size statistics can count visits and orders.	Only after you accept analytics in the shop's cookie banner.	The cookie expires after 12 months; local storage until you clear it or use “Forget my data”.
`ftl_device_id`	shop page: localStorage and a first-party cookie	A visitor id an earlier size tool on the shop may have left. We copy it once into fmt_device_id, then delete it.	Read only after analytics consent; we never write it.	Deleted when it is copied.
`fmt_mm:<shop>:<product>`	shop page: localStorage	The time the widget last told us that a product's sizes on the page differ from its size chart.	When the widget finds such a difference on a product page.	Used for 24 hours; stays until you clear your browser storage.
`persist:fmt_plugin`	widget frame: localStorage	Your unit and language, your last size per product, your usual sizes, when you saw a survey, and your “Remember me” choice. No body measurements.	Only after analytics consent or your own “Remember me on this device” tick.	Last results are dropped after 180 days; the rest until you use “Forget my data” or clear your browser storage.
`fmt_bodies_v1`	widget frame: localStorage	Your saved bodies: the answers and measurements you chose to keep, with the name you gave each body.	Only after you tick “Remember me on this device”.	Until you delete it, use “Forget my data”, or do not use it for 12 months.
`fmt_measure_offer`	widget frame: sessionStorage	That you said “No thanks” to the measuring offer.	When you dismiss the offer.	Until you close the browser tab.
`fmt_retail_consent`	in-store size tool (retail site): localStorage	That you answered “Yes, remember me” in the in-store size tool, and when. With it, the tool also keeps a random fmt_device_id and your size data on that site, as the widget does with analytics consent.	Only after you tap “Yes, remember me” in the in-store size tool (the QR code in a shop).	Until you use “Forget my data” in the in-store size tool or clear your browser storage.
`__fmt_probe__`	widget frame: localStorage	A test value that checks whether the browser allows storage.	When the widget opens.	Removed at once.

Saved bodies (“Remember me on this device”)

Your body answers are saved on your device only after you tick “Remember me on this device” yourself. The shop's cookie banner does not decide this. Saved bodies stay until you delete them, use “Forget my data”, or do not use them for 12 months; then they are deleted.

The size tool follows the choice you made in the shop's cookie banner. Without analytics consent, no device id (fmt_device_id) is written and no usage events are sent to us. Events that happen before you accept are dropped, not sent later.

With your consent, we record events such as “size shown” or “added to cart” with a random device id, so the shop can see whether its size advice works.

What we keep on our servers, and for how long

Your IP address is never stored with the events.
The raw browser description (the “user agent”) is kept for 30 days, to filter out bots; then it is deleted. The device type, browser and operating system worked out from it stay.
Events with your body answers are deleted after 25 months, with the survey answers and size statistics built from them. Events about the steps of the size questions are deleted after 90 days, and test and invalid events after 7 days.
Your device id is removed from our statistics when your device has not been seen for 12 months, and from statistics older than 25 months: a random id takes its place, so the shop's counts stay right but no longer lead to you.
If you type an email address or a phone number in a survey comment, it is masked before the comment is stored.
3D body data is encrypted with its own key, and a 3D body fitting job is deleted after 24 hours.
Our backups keep no copy older than 90 days, so data deleted from our servers is gone from the backups within 90 days.

Sizes for children

For a child's product, the size tool asks for the child's measurements in the same way, and uses them only to find the child's size. We ask nothing else about the child: no name, no birth date, no photo.

We do not sell your data. We use a few service providers (sub-processors), such as our hosting provider. The current list, with what each one does and where, is on the sub-processor list.

Some shops connect the size tool to their own Klaviyo account. Then your size result goes from the shop page to the shop's Klaviyo only with analytics consent, and your body data only when you have also accepted marketing and the shop has turned profile sharing on. That Klaviyo account belongs to the shop.

Where your data is hosted

All data we keep is hosted in the European Union. When a service provider outside the EU is involved, the sub-processor list says so and names the safeguard.

Your choices and rights

“Forget my data”, on the first question, on the result and at the bottom of the size tool, clears what the size tool stored on this device at once. With analytics accepted, it also deletes what our servers hold about this device for this shop (its events, statistics, saved profile and orders): within 24 hours, usually within one hour. If our servers cannot be reached, the size tool says so and tries again while the page is open. So that a late event of the forgotten device is not stored again, we keep only a scrambled form of its id (a hash, which cannot be turned back into the id) for 25 months.
To get a copy of your data, or to have it deleted from our servers, ask the shop or write to [email protected]. Tell us the shop's name; we answer within one month.
You can also complain to your data protection authority.

Version	Date	What changed
Version 1.3	2026-11-03	Your choices and rights: “Forget my data” (first question, result, bottom bar) also deletes what our servers hold about the device for that shop, within 24 hours; a hash of the forgotten id is kept 25 months so late events are dropped.
Version 1.2	2026-11-03	What is stored on your device: the in-store size tool (QR code in a shop) asks before it keeps a device id, its answer (`fmt_retail_consent`) and size data, and “Forget my data” there clears them.
Version 1.1	2026-11-03	What we keep on our servers: body answers in events are deleted after 25 months (no longer “anonymised”), and the 90-day, 7-day, 12-month device id, 24-hour and 90-day backup limits are named; survey comments are stored with emails and phone numbers masked.
Version 1.0	2026-11-02	First version.

Shopper privacy notice