Sign up

Privacy Policy

Last updated 8 October 2026

  1. Introduction

    This Privacy Policy explains how personal information is collected, used, shared, and kept when you use Entersize: the website, a merchant account, size charts, Size Finder, or a storefront embed on WooCommerce or Shopify.

    Entersize is a business tool for merchants and store operators. Where mandatory consumer or data-protection rules apply to you, they prevail over any conflicting part of this policy.

  2. Who we are

    Entersize is established in Poland. The data controller for accounts, this website, billing, and support is Jakub Jakubik, a sole trader entered in CEIDG, at Stara Góra 6D, 56-200 Stara Góra, Poland, NIP 5010083817, REGON 525332112.

    Privacy questions, access requests, and complaints: hello@entersize.com. In Poland, you may also complain to the President of the Personal Data Protection Office (UODO).

  3. Controller and processor

    We are the controller for merchant accounts, organization settings, billing, contact messages, and visitors to this website.

    When you connect a store or enable a storefront embed, you are the controller for your catalog and for shoppers who use the tools on your store. We process that data on your instructions to show size charts and run Size Finder. A short processing clause is in the Terms of Service.

    We are also a controller for a narrow set of our own purposes: counting Size Finder predictions against a plan, blocking repeated requests, and securing the service. We do not build a shopper profile across stores, and we do not take orders or returns from the merchant.

  4. Where data comes from

    Most of it comes from you: the account form, Google if you use it to sign in, what you type into the app, and the contact form.

    A connected WooCommerce or Shopify store sends the product fields described below. We do not receive order history, return history, or a customer list from those platforms.

    A shopper's browser sends a product identifier when a size chart loads, and the Size Finder answers when the shopper submits them. We do not buy personal data from brokers or other merchants.

  5. Information from merchants

    Account data: first name, last name, email address, a password hash if you use a password, email verification status, and an optional profile image. Email sign-up uses a short-lived verification code. Password reset uses a one-time link.

    Google sign-in, if you use it: your Google account identifier, name, email, profile image, and the tokens needed to keep that login connected. We do not receive your Google password.

    Session and security data: a session cookie, session expiry, IP address, browser user agent, and timestamps. Sign-in sessions last about seven days and refresh while you use the app. Rate-limit counters store a hash of an IP address or email, not the raw value.

    What you create in the app: organization name, plan, measurement-unit preference, size charts, chart rules, product assignments, embed appearance, and similar configuration.

    From a connected store we read product data needed to match charts: product id, title, handle, SKU, thumbnail, and brand, category, and tag values. WooCommerce access uses the API credentials you connect. Shopify access is limited to reading products. We do not receive the store owner's phone number or postal address from Shopify, and we do not pull customer accounts or orders from either platform.

    Billing data: plan, subscription status, Stripe customer and subscription identifiers, and Size Finder usage counts used for included limits and overage. Card numbers stay with Stripe.

    Contact data: name, work email, company or store, and message sent through the contact form. We email you to verify an address, reset a password, or reply to that message. We do not send a marketing newsletter.

  6. Information from shoppers

    A size chart on its own does not ask a shopper for body measurements. It loads the chart for the product being viewed. That request can include a product identifier and the technical data needed to pick the chart.

    Size Finder, when the merchant turns it on, asks for the answers needed to recommend a size. Depending on the product, that can include height, weight, age, gender, fit preference, body-shape answers, bra size, and a size the shopper already wears. We store those answers, the product, the recommended size, and an optional helpful or not helpful vote on the merchant's organization.

    We do not store a shopper's name, email address, Shopify or WooCommerce customer id, payment details, or shipping address as part of Size Finder. The snapshot is not linked to a customer profile. A hash of the same inputs is kept so a repeated request is not billed twice.

    Size Finder does not save those answers in the shopper's browser, and it does not set a visitor id to remember them on a later visit. The shopper enters them again next time. The demo on this website calculates a size in the request and does not save the measurements.

    A recommendation is an estimate from the chart and the answers given. It is not a guarantee of fit. The shopper's browser may load Instrument Sans from Google Fonts for the embed popup. Merchants must cover the embed and Size Finder in their own customer privacy notices where the law requires it.

    Merchant analytics show counts, such as predictions and matches over time. They do not show an individual shopper's measurements.

  7. How we use information

    We use this information to provide Entersize, secure accounts, connect stores, resolve size charts, calculate a size, show merchants aggregate usage, process subscriptions, send the emails described above, answer contact messages, prevent abuse, and comply with law.

    Shopper measurements are used to recommend a size for that product, meter the merchant's plan, and block a repeated request. We do not use them to predict purchasing, tailor offers, or market to the shopper. A recommendation is an estimate. It is not a decision that produces a legal or similarly significant effect.

    We do not sell personal information.

  8. Legal bases

    Merchant accounts, charts, store connections, and billing are processed to perform the contract with you. You can object where we rely on legitimate interests, as described under Your rights.

    Security, fraud prevention, rate limits, and keeping the service reliable rely on legitimate interests. We have weighed those against the effect on the people involved. Billing and invoice records are also kept where tax or accounting law requires it.

    Shopper measurements on a store are processed on the merchant's instructions, so the merchant sets the legal basis it gives its customers. Counting those predictions for the merchant's plan, and blocking repeats, is our legitimate interest and stays inside that limit.

    Analytics cookies on this website rely on your consent, given in the cookie banner. You can withdraw it at any time through Cookie settings in the footer. Otherwise, we ask for consent only when we say so at the time. We do not send marketing email, so there is no marketing list to opt out of.

  9. Sharing and subprocessors

    We do not sell personal information, and we do not share shopper measurements with advertisers or data brokers. We share data with the providers below only as needed to run Entersize, and when the law, a court, or a need to protect rights and security requires it. We may also share it in a merger or asset transfer, with appropriate safeguards.

    Connecting a store exchanges product and credential data with that WooCommerce store or with Shopify. Disconnecting a store, uninstalling the Shopify app, or a Shopify shop-redact request removes the stored connection and the product index for that store. Size Finder snapshots stay with the organization until the account is deleted.

    • A database hosting provider stores the database, including merchant configuration and Size Finder snapshots.
    • Stripe handles payments, subscriptions, and Size Finder overage. It receives merchant billing identifiers, not shopper measurements.
    • An email delivery provider sends verification, password-reset, and contact email.
    • Google is used for optional sign-in, for Google Analytics on this website if you accept analytics cookies, and for Google Fonts in the storefront embed popup. Analytics is not loaded inside the storefront embed.
    • Shopify and WooCommerce receive the calls needed to read products and to show the embed on the merchant's store.
    • For stores that install Entersize from Shopify, Shopify bills the plan. We send Shopify a count of Size Finder overage predictions for the shop, not shopper measurements.

  10. International transfers

    We are established in Poland. Data may also be processed in the European Economic Area and in other countries where our providers operate, including the United States for Stripe, Google, our email delivery provider, and depending on region, our database hosting provider.

    Where required, transfers use an adequacy decision, Standard Contractual Clauses, or another lawful safeguard. Email hello@entersize.com if you want the names of our providers or more detail on the safeguard used for a given provider.

  11. Retention

    Account, organization, chart, and Size Finder data is kept while the account is active. Deleting the account cancels billing and deletes the user, organization, charts, and Size Finder snapshots, subject to backups and records we must keep for tax, accounting, or disputes.

    We do not keep a copy of Size Finder answers in the shopper's browser, and we do not expire those server snapshots on a fixed short timer. They remain on the merchant's organization until that account is deleted.

    Store credentials and the product index are removed when you disconnect a store, delete the account, or when Shopify sends a shop-redact webhook. Verification codes expire in about ten minutes and are stored hashed. Password-reset links expire in about one hour. Sessions expire with the cookie. Rate-limit rows are short-lived counters. Contact messages are kept until the matter is closed.

    Invoices and other billing records are kept for as long as Polish tax and accounting law requires. Data needed for a legal claim is kept while that claim is open and for as long as the claim can still be brought.

  12. Security

    Store credentials and Shopify tokens are encrypted at rest. Organizations are isolated from each other. Passwords are stored as hashes.

    No online service can guarantee absolute security. You are responsible for keeping login details confidential and for controlling who can use your organization.

  13. Your rights

    If GDPR applies, you may ask to access, correct, erase, or restrict processing of your personal data, and to receive a portable copy where processing is based on contract or consent. You can update your profile in the app and delete your account there. You may withdraw consent at any time where processing is consent-based.

    You may object to processing based on legitimate interests. We will stop unless we have a compelling reason that overrides your interests, or we need the data for a legal claim. There is no direct-marketing list to object to.

    We do not sell personal information. If a US state privacy law applies to a request, email hello@entersize.com and we will handle what that law requires. We do not share personal information for cross-context advertising.

    Shoppers who used Size Finder on a store should contact that store first. We do not hold their name or email, so we usually cannot find a snapshot from a Shopify or WooCommerce customer id alone.

    You can complain to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl.

  14. Cookies and similar technologies

    Signed-in app: we set cookies that are necessary to keep you signed in, finish email verification, and protect the service. The session cookie lasts about seven days. A short-lived signup cookie may be set while email verification is pending.

    Storefront embed: the size chart and Size Finder do not set advertising or analytics cookies, and they do not store measurements in the shopper's browser. The embed may request a chart or a size recommendation from our servers, as described above.

    This website: Google Analytics loads only on our public pages and only after you accept analytics cookies in the cookie banner. Google may then set analytics cookies and receive technical data such as pages viewed, device, and approximate location. It is not loaded in the signed-in app or the storefront embed, and it is not required to use Entersize. We store your choice in a cookie_consent cookie for about six months. You can change it at any time through Cookie settings in the footer. We do not use advertising cookies.

  15. Children

    Accounts are for merchants and authorized business users. We do not knowingly collect account data from children.

    A shopper may use Size Finder while buying for a child. We do not ask for that child's name. If you believe a child has given us account information, email hello@entersize.com and we will delete it.

  16. Changes to this policy

    We may update this Privacy Policy to reflect product, legal, or security changes. Material updates should be communicated in a reasonable way, such as through the app, email, or this website.

    The date at the top of this page shows when the policy was last updated.