Privacy & cookies
How we handle your data
Last updated: 10 October 2026
The short version: we collect what we need to run a personal stylist — your account, your chats, your style preferences and the photos you choose to share. We don't run any advertising trackers or analytics scripts, we set exactly one cookie (to keep you signed in), and we never sell your data.
Who we are
Never Not Found (nevernotfound.com) is a UK-based personal styling and second-hand shopping service run by Poppy Allen, who is the data controller for the personal data described here.
For anything privacy-related — questions, requests, complaints — email privacy@nevernotfound.com. For general matters: hello@nevernotfound.com.
What we collect, why, and our lawful basis
UK GDPR requires a lawful basis for each kind of processing. Here is each one, in the order you'd encounter it.
Browsing the catalogue (no account needed)
Browsing is anonymous — we don't set tracking cookies or run analytics. Your searches are sent to the marketplaces we cover (including eBay) to fetch live results, and listing photos load directly from the marketplace that hosts them, so your browser contacts their servers as it would if you visited them directly. Lawful basis: legitimate interests (operating a search service).
Chatting with the stylist as a guest
Opening the chat creates a temporary guest account so the stylist can remember the conversation. This sets our sign-in cookie and stores your messages, any style preferences the stylist learns, and a session record that includes your IP address and browser type. If you later sign up, your guest history moves to your account. Lawful basis: performance of a contract (providing the chat you started), and legitimate interests for the security data.
Creating an account
We collect your email address, an optional name, and a password (stored only as a strong cryptographic hash — we can never read it). Lawful basis: performance of a contract.
Using the stylist
The service is a stylist who knows you, so using it builds a profile: chat transcripts; photos you share; your style passport (sizes, budget, colour season, body-shape notes, favourite brands); facts the stylist saves about your taste; your closet inventory; saved looks; hunt history and any standing hunts or watches you set up. You can see and edit your style passport at any time, and delete individual memories, looks and conversations. Lawful basis: performance of a contract — this profile isthe product you're using.
Taste signals while browsing signed in
When you click a listing or shortlist it with the heart, we record that signal so the stylist learns what you actually gravitate towards. These signals stay inside Never Not Found and are never shared with advertisers. Lawful basis: legitimate interests(personalising your results — you can object at any time, see “Your rights”).
Email alerts
If you set up a standing hunt or shortlist watch, we email you when something matches, using the email on your account. Emails contain tracked links so we know a notification was useful (we record the first click). Every email has a working one-click unsubscribe. Guests are never emailed. Lawful basis: performance of a contract (alerts you asked for).
Security and abuse prevention
We store the IP address and browser identifier attached to each sign-in session, and count daily chat turns per account to prevent abuse of the AI service. Lawful basis: legitimate interests (keeping the service secure and affordable).
AI processing — how the stylist thinks
Eve, the stylist, runs on Claude, an AI model made by Anthropic, routed through Vercel's AI Gateway. That means:
- Your chat messages, the photos you share in chat or the closet, and relevant parts of your style profile are processed by Anthropic's models to generate responses.
- Each incoming message also passes through a small AI safety check before the stylist replies.
- Conversation transcripts are retained in our chat infrastructure (hosted on Vercel) so you can pick up where you left off.
We don't use your conversations or photos to train AI models, and our providers process them as service providers, not for their own purposes.
Who we share data with
We use a small number of service providers (processors) to run the site:
- Vercel — hosts the website and the stylist service, routes our AI requests, and stores conversation session data.
- Anthropic— provides the AI models that power the stylist (via Vercel's AI Gateway).
- Neon — hosts our database (accounts, profiles, catalogue).
- Resend — sends our alert emails (receives your email address and the email content).
- Browser Use — operates the cloud browsers our resale search runs in; search queries derived from your requests pass through their service.
Separately, when the service searches on your behalf, your search terms reach the marketplaces being searched (eBay, Vinted, Depop, Vestiaire Collective, Etsy and similar) — as independent services with their own privacy policies. Search queries sent to eBay include our affiliate campaign ID, which identifies Never Not Found, not you.
We never sell personal data, and there is no advertising network on this site.
International transfers
Several of our providers (Vercel, Anthropic, Resend, Browser Use) are US companies, so data they process for us can be transferred outside the UK. Where that happens we rely on UK-approved safeguards: the UK Extension to the EU–US Data Privacy Framework for certified providers, or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses otherwise.
How long we keep things
- Sign-in sessions (including IP address): 7 days, refreshed while you use the site.
- Account, profile, closet, hunts, memories, taste signals: kept while your account is active, so the stylist stays useful. Deleted on request (below).
- Conversations: kept so you can resume them. Deleting a conversation removes it from your account; copies in our chat infrastructure are erased when you ask us to erase your data.
- Guest data: migrates to your account if you sign up, and is erased on request.
- Alert history: kept while the related hunt or watch exists, so we don't repeat ourselves.
To have everything erased, email privacy@nevernotfound.com. Deletion requests are currently handled manually, and we complete them within one month of your request.
Your rights
Under UK GDPR and the Data Protection Act 2018 you can:
- Access a copy of the personal data we hold about you;
- Correct anything inaccurate (your style passport is directly editable in the app);
- Eraseyour data (“right to be forgotten”);
- Restrict or object to processing based on legitimate interests — including the taste signals described above;
- Port the data you gave us to another service in a machine-readable format.
To exercise any of these, email privacy@nevernotfound.com. We'll respond within one month, and we won't charge you.
You also have the right to complain to the UK regulator, the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113. We'd appreciate the chance to resolve it first, but that's your choice.
Cookies & local storage
We use no analytics, advertising or tracking cookies— which is why there's no cookie banner. The complete list of what this site stores in your browser:
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| better-auth.session_token | Cookie (strictly necessary) | Keeps you signed in — set when you create an account, sign in, or start a guest chat session. | 7 days |
| sian-upgrade-dismissed | Local storage (functional) | Remembers that you dismissed a sign-up prompt so we don't show it again. Contains no personal data. | Until you clear your browser data |
When you follow a listing to a marketplace, that marketplace may set its own cookies on its own site under its own policy — including eBay's affiliate cookies, which is how a purchase is attributed to us.
Affiliate links
Listings on Never Not Found link out to the original marketplace. Some of those links — currently eBay listings, via the eBay Partner Network — are affiliate links: if you buy after clicking one, we may earn a small commission. This never changes the price you pay or which listings we show you; the stylist ranks pieces on fit for you, not commission.
Age requirement
Never Not Found is for adults. You must be at least 18 to create an account or use the stylist. We don't knowingly collect data from anyone under 18 — if you believe we have, email privacy@nevernotfound.com and we'll delete it.
Changes to this policy
When we change what we collect or who we work with, we'll update this page and the date at the top. Significant changes affecting account holders will be flagged in the app or by email.