Privacy Policy

This Privacy Policy explains how The Sugar Look collects, uses, stores, and protects information when you browse our website or participate as a member.

We collect only what we need to operate the service, enforce community standards, and respond to support and safety requests. We do not sell personal data and do not use member activity for advertising-profiling or behavioral tracking.

This policy should be read together with our Terms of Service, Payments information, and FAQ. Where those pages describe a specific practice in more detail, that description applies.

We collect the minimum information needed to create and maintain your account, authenticate sessions, and provide member features you choose to use.

This can include your email address, account alias, profile settings, preferences, subscription status, and activity linked to your membership such as posts, messages, reports, and moderation history.

When you contact support or submit a report, we collect the information you provide in that request, including message content and any attachments you choose to upload where the form allows it.

Limited technical data is generated automatically when you use the site, such as session identifiers, security logs, and diagnostic records used to keep the platform reliable and secure.

We do not intentionally collect unnecessary sensitive personal data, and we ask members not to send payment card numbers, bank details, wallet credentials, or gift card codes through support channels.

We use account and profile data to run core features, authenticate sessions, deliver subscription access, and maintain your settings.

We use member activity and report data to operate moderation, investigate safety concerns, enforce policies, and respond to lawful requests where applicable.

We use support and inquiry data to answer questions, resolve account issues, and follow up on reports or deletion requests.

Limited technical logging is used for security monitoring, abuse detection, troubleshooting, and incident response. These records are retained only for as long as needed for those purposes.

We do not sell personal data and do not use member data for advertising-profiling or third-party marketing databases.

We deliberately keep payment information outside our website, servers, and databases.

When you make a purchase, you are redirected to a secure external payment platform such as Stripe for card payments or another approved provider for other payment types offered at checkout.

Your payment details are entered, processed, and managed entirely on the external provider's platform. We do not receive, view, process, or store card numbers, security codes, bank details, wallet credentials, gift card codes, or other sensitive payment information.

We store only a limited technical record confirming whether a payment was completed and which account should receive the corresponding purchase or credit. This record cannot be used by us to identify you as a person or recover your account.

Payment rejections, pending charges, and disputes must be resolved directly with the relevant payment provider, card issuer, bank, wallet provider, or gift card provider.

If you complete account verification, you may be asked to submit information or materials through an approved external verification provider or our own secure verification workflow.

Verification source materials are used only to complete that specific verification request. They are processed securely and are not made available to staff as ordinary readable account data for routine browsing.

Once verification is completed, the original source materials are permanently deleted and cannot be recovered, reused for a future verification request, or used to recover account access.

The completed verification result is stored separately in a protected form that confirms only that the required step was completed. Previous verification cannot be used to identify you again or prove ownership of an account.

We only use strictly necessary cookies for authentication, session management, and security such as CSRF protection.

These include authentication cookies to keep you securely signed in, session cookies to maintain your session during active use, and anti-forgery cookies to protect forms and actions.

We do not use analytics, advertising, targeting, social media, or third-party tracking cookies.

Because only essential cookies are used, a cookie consent banner is not required for this site under typical privacy regulations for strictly necessary cookies.

We apply layered technical and operational controls to protect data held on our systems.

Access to account data is restricted to authenticated sessions, protected boundaries, and workflows designed to limit unnecessary exposure.

Traffic between your device and our platform is encrypted in transit. Account passwords are handled using industry-standard protections and are not stored in plain readable form.

Moderation, support, and safety workflows are designed so staff access only the information needed for a specific task. Verification source materials, payment details, and other highly sensitive submissions are not treated as ordinary account data available for routine viewing.

Operational logging and security monitoring are used to detect abuse signals, investigate incidents, and improve reliability.

We retain information only as long as needed to operate the service, enforce community standards, resolve disputes, and meet applicable legal or safety obligations.

Retention varies by data category. For example, account records, moderation context, support inquiries, and security logs are kept for different periods based on their purpose.

Verification source materials are not retained after the verification process is completed, as described above.

Where legally applicable, you may request deletion or processing restrictions through Contact Us. We may need to verify your identity before acting on sensitive account requests.

Some public areas of the website can be viewed without signing in. Those areas do not give you a member identity on the platform and do not expose private member-only features.

Creating and using a member account requires information linked to you as a user so authentication, moderation, and safety controls can function. The platform is not designed for fully anonymous participation in member features.

Member-facing identity on the site is separate from verification source materials and payment details, which are handled under stricter rules described elsewhere in this policy.

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information.

You may also have the right to object to certain processing and to data portability in some cases.

To submit a privacy-related request, contact us through Contact Us with enough detail for us to locate your account and understand the request. We may ask you to verify your identity to protect your account.

We respond to valid requests in line with applicable law and our operational ability to confirm account ownership.