Privacy

What is collected right now

One thing, and only if you ask for it: the email address you type into the newsletter form. Nothing on this site collects anything about you unless you fill in that form and press Subscribe. Reading is anonymous.

There is no analytics, no advertising network, no tag manager, no session recording, no A/B testing tool and no third-party embed. The site sets no cookies of its own. There is no user account system, no login, no cart, no payment and no database.

A small amount of technical request data is used to stop automated abuse of the subscription form, described below. It is used for that and discarded.

If you email us, that message goes to a mailbox rather than to this website, so it is not collected here at all. What happens to it is set out under writing to us, below.

The wardrobe tools and your browser

The wardrobe tools can save things at your request: a wardrobe of garment roles with optional cost and wear figures you type yourself, saved capsules, saved trips, saved outfit formulas, and a brand shortlist. All of it is written to this browser’s local storage and read back from it. None of it is transmitted anywhere, ever. There is no account, no cloud sync, and no analytics connected to observe it.

The practical consequences: clearing this browser’s site data removes everything the tools saved; nothing you save here appears on another device; and an export file leaves your browser only when you download it and only to wherever you put it. Wear counts change only when you change them (no plan or formula ever increments one) and cost figures are labels on your own record, never compared with anyone else’s.

Nothing stored identifies you: no name, email, body measurement, location, retailer, order number or payment detail has a field to live in, and the import machinery discards unknown fields rather than keeping them.

Your email address is never written to browser storage. If you subscribe, the address exists in the page for as long as the form is open and is sent once to the server. It is not saved in this browser and is never placed in a web address.

Fonts and assets

The two typefaces are downloaded at build time and served from the same origin as the site, so displaying a page makes no request to a font provider and reveals nothing to one.

All imagery is stored with the site. No images are loaded from third-party hosts.

The newsletter, and what happens to your address

The newsletter is run on Zoho Campaigns, a service operated by Zoho Corporation. When you subscribe, your email address is sent from your browser to this site’s own server, and from there to Zoho, which stores it and sends the emails. Your browser never contacts Zoho directly and never holds any credential for it.

Alongside the address, one short label is sent recording which form you used, for example the homepage or one of the wardrobe tools. It says nothing about you. It exists so it is possible to know which parts of the site readers actually subscribe from.

The list uses double opt-in, and this is the part worth understanding. Subscribing does not subscribe you. It asks Zoho to send you one email containing a confirmation link, and nothing further happens unless you open that email and click the link. If you ignore it, you receive no newsletter. If somebody types your address by mistake, or maliciously, they cannot subscribe you: only the person holding the mailbox can complete it.

This site keeps no copy of your address. There is no database here and no file it is written to. Once the request has been passed to Zoho, the only copy is Zoho’s.

The form gives the same answer whatever the address is. Whether it is new, whether it signed up last week and never confirmed, or whether it has been subscribed for years, the response you see is identical. That is deliberate: anyone can type any address into a public form, including one that is not theirs, and a form that replied “this address is already subscribed” would let a stranger find out who reads this publication. The cost is that if you are already subscribed, this page cannot tell you so, and the message asks you to check your inbox just in case.

Zoho holds it until it is removed. Every email carries an unsubscribe link, and using it stops the emails and removes you from the list. You can also write to hello@petite-revue.com and ask to be removed, and it will be done by hand. No fixed retention period is stated here because there is not one: the address is kept for as long as you remain subscribed, and no automatic deletion schedule has been configured. Saying otherwise would be inventing a policy rather than describing one.

Zoho’s own handling of the data it stores is governed by Zoho’s privacy policy and the terms it operates under, which are its documents rather than this site’s.

Stopping automated abuse of the form

A public subscription form attracts automated submissions, which is a problem for whoever’s address gets typed into it as much as for us. Three things guard against it, and it is worth being specific about what each one touches.

The form contains a field that is positioned off screen and hidden from screen readers, which no reader can see or reach. Anything filling it in is not a person. Nothing about you is involved.

The form also carries a short signed token issued by this site’s server when you first interact with the field. It records only the moment it was issued, so that a submission arriving impossibly fast can be recognised as automated. It contains no information about you, is not a cookie, is not readable by other sites, and is discarded when the page is closed.

Requests to the subscription address are counted by IP address so that automated floods can be refused. Most of that counting happens at the hosting platform’s network edge, before this site’s code runs, using an address the platform works out itself. This site’s own code additionally holds a short-lived count in memory, keyed by IP address, inside whichever server instance handled the request. Your IP address is used for that and nothing else: it is never written to disk, never stored alongside an email address, and disappears when the instance is recycled, which happens routinely and often within minutes.

Diagnostic logs record failures so that a broken integration can be noticed and fixed. They never contain a full email address. Where an address must be referenced at all, the log holds the domain and a short one-way fingerprint, which is enough to recognise two entries as the same address and not enough to recover it. Credentials, access tokens and the mailing provider’s raw responses are never logged.

Server logs

The site is hosted on Vercel. Like any host, Vercel keeps standard request logs, which typically include IP address, user agent and requested URL. Those logs are created and retained by Vercel under its own policy and retention schedule, not by this site, and no period is stated here because it is not this site’s to set or to change.

Nothing is added to those logs by this site beyond what a normal page request produces, and no email address is ever placed in a web address, so no address can appear in a log line as part of a requested URL.

Writing to us, and what happens to that message

Write to hello@petite-revue.com. That covers unsubscribing if the link in the email has not worked, asking what is held, asking for it to be deleted, corrections, accessibility problems, permissions and commercial enquiries. There is no account to log into.

There is no contact form on this site, and that is deliberate rather than unfinished. Every contact link here is an ordinary email link: selecting one opens whatever email application your device already uses, with the address and a subject line filled in. Nothing is typed into this website, so this website neither receives nor stores your message. It never reaches this site’s server and never appears in its logs.

The mailbox is Zoho Mail, a service operated by Zoho Corporation, on this publication’s own domain. Your message travels from your email provider to Zoho, which stores it and shows it to us. Zoho’s handling of what it stores is governed by Zoho’s own policies rather than this site’s.

You choose what a message contains. Nothing on this page asks for a name, a phone number or an address, and the email links attach nothing but a subject: there is no hidden text, no page identifier and no tracking label travelling with them. Please do not send passwords, bank details, tax identification numbers, verification codes or health information, because none of it is needed to answer anything.

Messages are kept for as long as they are needed: to reply, to keep a sensible record of a correction or a permission that was granted, to resolve a dispute, or to meet a legal obligation. No fixed period is stated because none is configured, and inventing one would be describing a policy nobody follows. You can ask for an ordinary contact message to be deleted and it will be, unless one of those reasons genuinely requires keeping it. What cannot be deleted is your own copy: the message in your Sent folder, and whatever your email provider retains, are yours and your provider’s rather than ours.

The contact mailbox and the newsletter list are separate things, kept separate on purpose. Writing to us does not subscribe you, and the contents of a message are never added to the newsletter list. If you want the newsletter, use a form on the site so that the double opt-in confirmation reaches you properly.

Adding this contact page introduced no analytics, no tracking and no third-party service of any kind.

Affiliate links, and what they would mean for you

There are no affiliate links on this site today, and nothing on any page earns a commission. The machinery for handling them has been built ahead of having any, and building it added nothing that watches you: no affiliate script, no pixel, no click tracker, no analytics, no cookie, no browser storage, and no record of what you click. Nothing about you is sent anywhere as a result of this work.

When compensated links do exist, they will be marked as sponsored and introduced by a short disclosure above the recommendation. Following one will be an ordinary link: this site will not put an identifier on you, will not log the click, and will not build a profile of what you looked at.

One thing that would be dishonest to promise. Following any link, paid or not, means your browser makes a request to somebody else’s server, and that request carries the ordinary things every web request carries. What a merchant or an affiliate network does with that is governed by their policies, not this one. What can be promised is that this site adds nothing of its own to it, and that when a real link exists the destination’s behaviour will be reviewed before it goes live.

What will change

The intention is to add privacy-respecting, aggregate analytics, and nothing else. If that changes, this page changes first. There is currently no analytics, no advertising, no affiliate tracking, no accounts and no payments anywhere on this site.

• A named data controller and contact route for data requests.
• The analytics provider, what it measures, and whether it uses cookies.
• Your rights of access, correction, deletion and portability, with the process for each.