Cookie and tracking policy

Optional analytics are disabled until you accept. You can reject them or change your choice using Privacy settings. This choice applies to signed-in and signed-out visitors worldwide. Rejecting optional analytics does not prevent browsing, account access or requested saves. Functional processing described below is separate.

Our optional analytics choice includes measurement of site use and, as explained in the consent request, development of our own moodboard ranking systems from newly collected consented first-party events. It does not authorise future individual interest-based personalisation or tracking by retailers.

The first-party rf_privacy_preferences cookie records your analytics choice, notice version and choice timestamp for up to 180 days. If a choice expires or relates to an outdated consent version, optional collection remains off until you make a new choice.

Supabase first-party authentication cookies have names beginning sb-. They maintain and secure your requested signed-in session and may remain for up to 400 days; signing out or session expiry can end their use earlier. Temporary browser session storage restores requested save actions or browsing position after sign-in and lasts until used or the tab session ends.

Private brand invitation links contain an access token needed to load and save the requested partnership workflow. When a representative takes an action that saves or submits onboarding information, we store the current section and when onboarding is first recorded as started as necessary partnership-administration data. This does not depend on optional analytics consent, and merely opening the page is not recorded as starting onboarding.

The feed keeps a record of already-seen moodboard IDs to avoid repeats. Signed-in history is linked to the account and works across visits. Signed-out history uses a random session identifier that changes for each new session. This functionality operates independently of analytics preferences. Its records are not used for model training or to infer fashion interests.

Account-linked history is deleted when the account is deleted. Signed-out seen-moodboard records are deleted within 24 hours after the relevant session expires. Browser-identifier lifetimes and deletion from the database are separate. See our Privacy Policy for retention and your rights.

With analytics consent, Umami Cloud receives pageviews, filtered public page paths, campaign parameters restricted by format and length, referrer origins, language and screen size. Our integration does not set Umami cookies or browser storage. We still require your analytics permission before loading it. We do not use Umami for session replay or individual product-event tracking.

With analytics consent, PostHog uses local and session storage for pseudonymous browser and session identifiers, under storage keys generated by its SDK, including the configured persistence name rf_product_analytics. The browser identifier can persist across visits; it is not tied to your account by our PostHog integration.

Local storage has no browser-enforced expiry. Our site clears applicable PostHog analytics storage on withdrawal or when it detects that consent has expired or its version is outdated. Session storage normally ends when the tab session ends. Autocapture and session replay are disabled.

The temporary first-party rf_auth_completion cookie records a completed sign-in event for analytics, lasts no more than 60 seconds and is deleted after use. It is set for analytics only after you have accepted analytics.

When analytics are accepted, our own event collection records approved moodboard and product interactions in Supabase. Events can contain an account ID when signed in or a random session identifier otherwise. These records are distinct from the functional seen-moodboard history above. We exclude raw search text, email and IP addresses from these event records.

Use the controls below to accept or reject optional analytics. Withdrawing stops new collection and further consent-based use, including training. We clear applicable analytics storage from the browser and arrange deletion of associated optional analytics records and identifiable training copies without undue delay. The page may reload to unload analytics software.

You can keep your account and saved moodboards when you withdraw analytics consent. Functional repeat-prevention history remains separate. If you opt in again, the new choice does not restore deleted data or permit reuse of historical records excluded after withdrawal. See our Privacy Policy for limited retention exceptions and backup handling.

All product shopping links are affiliate links. Following a link may take you through an affiliate network before reaching the retailer. Networks and retailers may use their own identifiers and tracking technologies. Your acceptance of Rare&Flair analytics does not give consent to their separate tracking. Review the information and choices provided by them.

Rare&Flair does not currently set third-party advertising cookies on its own pages. Browser controls may also block or delete cookies and storage, but blocking necessary authentication storage can prevent sign-in.

Rare&Flair is operated by Neli Catar, a sole trader trading as Rare & Flair, of 66 Paul Street, London, EC2A 4NA. Questions about this policy can be sent to privacy@rareandflair.com.