Privacy Policy

Last updated November 1, 2026.

What this site collects

The main Indigo & Asphalt site doesn't run a database and there are no reader accounts. The only personal information anyone gives me directly there is an email address, and only if you choose to subscribe. The Fit Finder tool has its own optional account system, described below.

Email subscriptions

Subscribing hands your email to Substack, which hosts the newsletter and handles delivery, unsubscribing, and its own data practices — see Substack's privacy policy. I use your email only to send Field Notes, and I never sell or share it.

Analytics

Page views are measured with Cloudflare Web Analytics, which doesn't use cookies or track you across sites. It reports aggregate numbers, which pages and how many visits, and can't identify you individually.

The Fit Finder also records a short, fixed list of product events, so I can tell whether the tool is actually working: a search finishing, an item being saved to a closet, a Premium button being pressed, a click through to a shop, an account being created, a subscription starting. Field Notes essays and the links page record a click on a link to a shop. Each of those records holds the words of the link you clicked, the page it was on, and the ShopMy ID of the link. The links page also records that it was opened, and which of its other buttons was clicked, by a fixed name such as “instagram” or “fit_finder” rather than the address. Nothing else on those pages is recorded.

Each record holds the name of the event, the time, whether it came from the Android app, the iOS app, or a browser, and a handful of small fixed values such as how many measurements a search used. A record can also say which site linked you to the page, such as Reddit or Google, as one short name. It never holds the address of the page you came from. There is no free-text field anywhere in it, so nothing you type into the tool can end up there. If you're signed in, the event is linked to your account. If you're not, it's stored with no identifier at all: no device ID, no session ID, and no IP address, which means those records can't be tied back to you or grouped into a profile. They're stored on Cloudflare alongside the rest of the Fit Finder's data, never shared or sold, never used for advertising, and deleted automatically after 180 days.

The Fit Finder tool

Saved searches and your unit preference (in / cm) in the Fit Finder are stored only in your browser's local storage. They're never sent to any server — I never see them, and they disappear if you clear your browser data.

Fit Finder also offers an optional account, on the web and in the Android and iOS apps, so your Closet — the fits you've saved as your own — can sync across devices. Creating one is not required to use any of the tool's search, browse, or comparison features.

If you create an account, I store your email address and, for email/password sign-in, a salted hash of your password (never the password itself). If you use "Sign in with Google," I store the Google account identifier Google provides and don't receive your Google password. If you use "Sign in with Apple," I store the identifier Apple provides and the email address Apple shares, which is a private relay address if you choose to hide yours. I can send mail to that relay and Apple passes it on without ever showing me the address behind it, and only because Apple has approved this domain to do so. You can switch that forwarding off whenever you like in your Apple Account settings, and then I have no way to reach you at all. Mail to that address follows the same rules as any account: account mail, plus the alert and news emails described below only if you switch them on. Signing in issues a session cookie/token used only to keep you signed in.

Closet items you save — brand, model, size, measurements, and any note you add — are stored under your account so they can sync between your devices. This data isn't shared with anyone, isn't used for advertising, and isn't visible to other users. It's hosted on Cloudflare's infrastructure (Workers and D1), encrypted in transit.

Subscribing to Fit Finder Premium hands your payment details directly to Stripe — your card number never touches Fit Finder's own servers. I store only a Stripe customer ID, which I use to look up your subscription status. Stripe handles the payment itself and its own data practices — see Stripe's privacy policy. In the iOS app, Premium is bought through Apple's in-app purchase instead. Apple takes the payment and I never see your card. I store the Apple transaction identifiers needed to check whether the subscription is active, and Apple tells my server when it renews, lapses, or is refunded. Apple's handling of that purchase is covered by Apple's privacy policy.

The Android and iOS apps can ask permission to send notifications: fit-match, price-drop, and restock alerts tied to your account, and general news about new features and catalog additions, which you can also turn on without an account. Turning notifications on registers your device with Firebase Cloud Messaging (Google), which stores a device token so the app knows where to deliver a notification. On iOS the notification itself travels through Apple's push service. This is opt-in — it's never required to use the app or any account feature.

If you have an account, Fit Finder can also send these by email: one switch for alerts about your Closet, another for news about new features and catalog additions. Both are off until you turn them on, either on the Account page or by saying yes when the Fit Finder offers alerts after you save a pair. Every one of these emails has an unsubscribe link that switches it off in one click, without signing in, and you can switch either one off on the Account page at any time. When you switch one on or off, I keep the time and where you did it (the Account page, the alert offer, or an email's unsubscribe link), so I can show you asked for these emails. That record is deleted with your account. They go to the address on your account through Cloudflare's email service. I don't use a mailing-list company, and the address isn't shared or sold. These switches are separate from the Field Notes newsletter: turning one on doesn't subscribe you to the newsletter, and subscribing to the newsletter doesn't turn them on.

If you turn on news without signing in, the device token and its platform are all we store. That token only ever receives general news, never anything about you. Switching news off on the account page deletes it, and the token of an uninstalled app is deleted the next time a notification fails to reach it.

Both apps send crash reports to Sentry, so I can fix what breaks. A report holds the error, the app version, the device model and OS version, and a random installation identifier. It does not hold your email address, your closet, or anything you typed. If a native sign-in fails, the app sends the error message the same way. Sentry's own handling is described in Sentry's privacy policy.

To delete your Fit Finder account and everything stored under it, sign in, go to the Account page, and use Delete Account in the Danger Zone. This works the same on the website and in both apps, and it deletes everything immediately — no waiting on a manual confirmation email. If you can't sign in, email privacy@indigoandasphalt.com from the address on the account and I'll delete it for you. Deleting your account does not cancel a subscription bought through Apple. Cancel that first in your iPhone's Settings, under your Apple Account, then Subscriptions.

Cookies

There are no advertising or tracking cookies on this site. The only one tied to you is the Fit Finder sign-in session described above, and it's set only if you sign in.

Third-party links

Instagram and Substack are linked throughout the site. Once you follow one of those links, that service's own privacy policy applies, not this one.

Children's privacy

This site isn't directed at children under 13, and I don't knowingly collect information from them.

Changes to this policy

If anything here changes — a new analytics tool, a new integration — I'll update this page and the date above.

Contact

Questions about your data: privacy@indigoandasphalt.com, or reply to any Field Notes email.