costumelastminute — Privacy Policy

costumelastminute.com ("the site") is operated by omgochi ("we", "us"). This policy explains what the site collects when you use it, why, where it goes, and the choices you have. If anything is unclear, email hi@omgochi.com.

1. The short version

• There are no accounts, no sign-up and no analytics trackers.
• The photo you upload is sent to an AI model to work out the costume, then discarded. We do not store it.
• Each result gets a share link. What's saved for that link is only the generated cart (costume name, item list and AI-made product pictures), never your photo.
• We earn a commission when you buy through our Amazon links. Amazon handles your purchase and its own data.
• We never sell your data.

2. What we collect and why

a) The photo you upload

• Your browser shrinks the photo before sending it. Our server passes it to Google's Gemini models on Google Cloud Vertex AI to identify the costume and suggest items. We then generate illustration images of those items.
• We do not save your photo, write it to a database or log it. It exists only in memory while your request is processed.
• Under Google Cloud's terms, Google processes this data on our behalf and does not use it to train its models.
• Please only upload photos you have the right to use. Avoid photos of other people without their permission.

b) Share links

• To make each result shareable, we save the generated cart (costume name, item names, prices and the AI-generated product pictures) under a random link, such as costumelastminute.com/c/abc123. Anyone with the link can see it. Your photo is not part of it.
• Want one removed? Email us the link and we'll delete it.

c) Abuse prevention

• If you upload images that can't be used as a costume, we count them so we can pause uploads after 3. The count is kept in a small cookie (cl_s) on your device for 24 hours.
• The count is also kept in our server's memory against your IP address for up to 24 hours. Nothing else is linked to your IP address.

d) Server logs

• Our hosting provider, Google Cloud Run, automatically records basic request logs. These include IP address, browser type, the page requested and the time. We use them only to keep the site running and secure. Google Cloud keeps them for about 30 days by default.

e) Stored in your browser only

• Your "Who's it for?" choice is saved in your browser's local storage, so it's remembered next time.
• A small copy of your photo and your latest result are kept in your browser's session storage, so they come back if you return from a store page. They are cleared when you close the tab.
• This information never leaves your device unless you upload a new photo.

3. Third parties

• Amazon. Shopping links take you to Amazon with our Amazon Associates tag so Amazon can credit us for purchases. Once you are on Amazon, Amazon's own privacy notice and cookies apply. We don't receive your name, address or what you bought, only aggregated commission reports.
• Google Cloud (Vertex AI and Cloud Run) processes uploads and hosts the site.
• Google Fonts. The site loads a font from Google Fonts, so Google receives your IP address when the page loads.

4. Children

The site is intended for people aged 13 and over. Younger children should use it with a parent or guardian, who should do the uploading and purchasing. We don't knowingly collect personal information from children under 13.

5. Your rights

We don't keep your photos or create profiles, so there is usually nothing about you for us to access or delete. You can clear the site's cookie and storage in your browser settings at any time. Depending on where you live, for example in the EU, UK or California, you may have rights to access, delete or object to the processing of your personal data. To make a request, email hi@omgochi.com.

6. Changes

If we change this policy, we'll update the date at the top. Significant changes will be noted on the site.

7. Contact

omgochi · hi@omgochi.com