Privacy notice
For shoppers using the Mirraya sizing and try-on service. Version 2026-08-07.
Mirraya estimates your clothing size from a photograph you provide, and can generate a preview of how a garment may look on you. This notice explains what we do with that photograph and with the measurements derived from it, and what rights you have.
Key points
Your photograph is never stored on our servers. It is processed in memory and discarded.
It is retained on your own device for 24 hours so that you are not asked to provide it again for each garment, after which it expires automatically.
The retailer receives neither your photograph nor your measurements. They are shown that a sizing took place, not who you are or what you look like.
You can erase everything at any time from Privacy & your data within the widget.
This is a summary for quick reference. It does not replace the full notice set out below, which is what applies.
1. Who is responsible for your data
Mirraya is the controller of the personal data described in this notice. We do not act on behalf of the retailer whose website you are visiting. You open our widget, you see our name, and you consent to this notice, so the processing described here is our responsibility and is governed by this notice rather than the retailer's privacy policy.
You can contact us at privacy@mirraya.ai.
2. Personal data we process
| Category | Purpose | Retention |
|---|---|---|
| Photograph you provide | To estimate your body measurements and, where you request one, to generate a try-on preview. | Not retained by us. Retained on your device for 24 hours, then deleted. |
| Height, and weight where provided | Height is the reference every measurement is scaled from. Weight improves accuracy. Weight is optional. | 24 hours on your device; alongside your measurements on our systems. |
| Measurements we derive (chest or bust, waist, hip) | To recommend a size and to improve the accuracy of future recommendations. | 12 months from your last use, then permanently anonymised. |
| A randomly generated device identifier | To recognise your browser on a return visit so that you are not asked to start again. It is not linked to your name, email address or any account unless you create one. | 12 months from your last use, then severed. |
| Information about how a recommended size fitted | To improve the accuracy of recommendations. | 12 months, then anonymised. |
We do not collect your name, email address, postal address or payment details, and we do not ask you to create an account.
3. Legal basis
We rely on your consent (UK GDPR Article 6(1)(a)), which you give by selecting the confirmation box before providing a photograph. You may withdraw consent at any time, and withdrawing it is as straightforward as giving it. Withdrawal does not affect the lawfulness of processing carried out beforehand.
Storing the photograph and a small number of related values on your own device relies on the same consent, under regulation 6 of the Privacy and Electronic Communications Regulations. We obtain this consent ourselves rather than relying on any consent mechanism operated by the retailer.
4. Recipients
To estimate your measurements and generate a preview, your photograph is processed by a small number of specialist providers acting on our instructions. Each processes it to return a result and then discards it. None of them uses it to train their models.
- Cloudflare — operates our service; the photograph passes through in memory.
- Modal (United States) — provides the computing capacity used to measure you.
- Anthropic (United States) — the model that derives measurements from the photograph.
- OpenRouter (United States) and Black Forest Labs (Germany) — generate the try-on preview.
- Google (United States) — generates the preview where the above is unavailable.
Your photograph is not published, is not disclosed to the retailer, and is not shown to any other user. We do not sell personal data, and we do not share it for advertising purposes.
5. International transfers
Some of the providers listed above operate in the United States, so your photograph is transferred outside the United Kingdom. Where that occurs we rely on appropriate safeguards under Article 46 of the UK GDPR, namely the International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, as incorporated into each provider's data processing terms.
6. Retention and anonymisation
Retention periods are set out in section 2. After 12 months we permanently sever the link between your measurements and your device identifier. What remains is a set of measurements and an indication of how well a size fitted, with nothing connecting it to a person, a device or a specific date.
That remaining information is no longer personal data, so it falls outside this notice and we retain it in order to continue improving sizing accuracy. The process cannot be reversed: neither we nor anyone else can trace it back to you.
7. Your rights
You have the right to:
- withdraw your consent at any time;
- request access to the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data;
- request restriction of, or object to, our processing;
- request transfer of your data to another provider; and
- lodge a complaint with a supervisory authority.
The most direct way to exercise these rights is Privacy & your data → Clear my data in the widget. This deletes the photograph and size held on your device, deletes the measurements held against your device identifier, and withdraws your consent.
Where we are unable to identify you
We are designed not to know who you are. There is no account, no name and no email address — only a randomly generated identifier held in your browser, which you can clear at any time. Consequently, for most requests we are genuinely unable to determine which data relates to you, and in accordance with Article 11 of the UK GDPR we will not ask you to provide identity documents or additional personal information solely in order to enable a request. The Clear my data control is the reliable route, because your browser holds the identifier that we do not.
If you choose to create an account with us, we are able to identify you and all of the rights above apply in full. Please write to privacy@mirraya.ai.
8. Children
Mirraya is intended for people aged 16 or over. We do not knowingly process the personal data of anyone below that age. If you believe that a child has used the service, please contact us and we will delete any data we hold.
9. Automated processing
Your size is determined automatically, and any try-on image is generated by artificial intelligence. Such an image is an illustration and not a photograph of the garment on you. It is provided to help you choose a size; it is not a decision about you and has no legal or similarly significant effect. The garment you receive may differ from the preview.
10. Security
All data is transmitted over encrypted connections, we hold no photographs at rest, and each retailer's data is isolated from every other retailer's.
You should be aware of one limitation. Because our widget operates as part of the retailer's web page, the photograph cached on your device for 24 hours is held in that website's browser storage, which other scripts on that page could in principle access. If you would prefer not to leave it there, select Clear my data when you have finished.
11. Complaints
If you are dissatisfied with how we have handled your personal data, please contact us first at privacy@mirraya.ai. You also have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.
12. Changes to this notice
If we change what we do with your photograph or your measurements, we will publish a revised version of this notice and ask for your consent again. Your existing consent will not be treated as covering the change.