Privacy Policy

The Museum of Street Style (The MoSS) respects the privacy of people who visit this website, join the Founding Community, submit stories or use a member account. Personal information should be handled responsibly, transparently and with appropriate safeguards.

This policy covers the current digital platform, including the Reading Room and its personal-library features. It does not describe future payment, ticketing or fundraising services. The MoSS is an emerging institution. This draft does not represent confirmed incorporation, nonprofit status or a registered business address, and is not a final legal policy.

The free Founding Community registration form collects your first and last name, email address, selected interests and any city or country you choose to provide. We also record the signup source and registration time. If you opt in to Dispatch, we record the consent wording, consent time and your preference. Joining the Founding Community does not require newsletter consent and does not purchase a paid membership.

Creating a member account is a separate action. Sign-in credentials are handled by the authentication service. Account records include your profile, notification preferences and membership tier and status. These records support sign-in, account management and access checks. A free account does not automatically unlock paid-member publications or grant administrative access.

Founding Community records are private. Authorised administrators can review and export registrations for administration. A welcome email and Dispatch delivery are not currently active; registration does not guarantee an email or a publication schedule.

A visitor story submission collects your name, email address, city, country, story or research suggestion and historical context, plus optional sources and your relationship to the story. Correction submissions collect your name, email address, the page or article reference, your note and any optional sources. We record the submission type, related programme, privacy acknowledgment, time and internal review status.

Submissions are stored privately for authorised review and any necessary reply. Sending a story does not automatically publish it, transfer ownership or grant public-display rights. Please avoid unnecessary sensitive information and share information about other people only where you are entitled to do so.

Authorised staff may use an AI-assisted review tool through Lovable AI Gateway to draft a summary and suggest review tags. When staff invoke that tool, the story text and any context supplied to it are processed by the model service. AI-generated summaries and tags remain private review aids, are not automatically published and do not establish that a story is verified. Do not include confidential or sensitive details in your submission.

To request a correction or withdrawal, use the Privacy category on the Contact page and identify your submission. Requests are reviewed individually; legal obligations may affect what can be removed.

The Reading Room provides research publications for eligible active paid members and authorised staff. Access checks use your signed-in account and membership status; some publications may be limited to particular eligible tiers. A free Founding Community registration or community account alone does not grant access. The website does not currently collect membership payments.

When you read a published article, the Reading Room automatically records progress as you scroll. Saving or unsaving a publication also updates your personal library. Its records contain your account identifier, publication identifier, saved status, reading progress and creation and last-read timestamps. These records let you return to saved publications and continue reading across signed-in visits. They are not a public reading history; the personal-library permissions restrict reads and changes to the account owner.

Removing a saved item changes its saved status; it is not necessarily deletion of its progress record. You can request deletion of library information through the Privacy category on the Contact page. Publication drafts, editorial notes and revision records are separate from your personal library and are restricted to authorised editorial roles.

Inquiry forms collect the name you provide, email address, organisation if supplied, inquiry category, subject and message. Media requests may include an inquiry type and deadline. Accessibility feedback may include a page URL and assistive technology; a name is optional. Support inquiries may include a voluntarily selected contribution range. Privacy acknowledgments are recorded for the inquiry forms.

Dispatch registration collects your email address, chosen interests, consent wording, signup source, registration time and subscription status. Staff registration and sign-in use email and credentials handled by the authentication service; staff profiles, roles and editorial activity are retained for administration.

The website records public page paths, referral information and timestamps for first-party readership counts. Hosting, authentication and security services may also process IP addresses, device/browser information and request logs when delivering or protecting the service. This draft does not specify every provider log field or retention period.

The current public website does not process membership payments, donations, purchases or event bookings. Do not send payment credentials or sensitive personal information in an inquiry. The private collections inquiry form additionally collects country, material description, historical context, approximate date, ownership status, additional information and optional images. Governance inquiries may include an area of interest and professional background. Images are held privately for authorized administrators, not published; they may contain embedded metadata. Submission does not transfer ownership or grant publication rights.

You supply information through inquiry forms, Founding Community and Dispatch registration, visitor submissions and member or staff account actions. Saving Reading Room publications or updating progress creates personal-library records. Public page visits generate first-party readership records. Hosting and technical providers receive information necessary to deliver network requests and provide security.

If you later correspond outside the website, that correspondence may also contain personal information. Future services may require additional privacy information before they are offered.

Information is used to receive and manage inquiries and visitor stories, consider requested permissions or collaborations, address accessibility issues, administer Founding Community registrations, record publication interests and consent, manage member accounts and content access, maintain saved publications and reading progress, secure the website and understand readership.

Registering for Dispatch records an interest in future communications; editions are not currently being sent. We do not treat a general inquiry, story submission, free signup or Reading Room activity as newsletter consent. Staff may review information necessary for their assigned duties. Legal requests may require information to be preserved or disclosed when applicable.

The legal basis for handling personal information depends on the activity and the law that applies. Dispatch signup requests express consent, which may be withdrawn. Inquiry handling and site security may involve legitimate interests where recognised, subject to an assessment of those interests and individual rights. Specific legal obligations may require preservation or disclosure.

This draft does not establish which legal basis applies in every jurisdiction. Public browsing does not, by itself, create a contract with The MoSS.

The application uses browser storage for authentication sessions when members or staff sign in. Authentication services may also use essential cookies. First-party page counting sends a page path and referral information to the institutional data service; it does not intentionally attach an account ID or a visitor tracking identifier. Saved Reading Room items and recorded progress are stored with your account in the managed data service, separately from these page counts.

These pages do not use advertising pixels or third-party analytics software. The website does not currently offer optional-cookie preferences. Hosting services may collect technical information needed to deliver and secure the website; this draft does not provide a complete inventory of that information.

You can use your browser’s controls to restrict or delete cookies and storage; doing so can affect member or staff sign-in. Clearing browser storage does not delete account-linked Reading Room records. External font requests are made to Google Fonts, so Google receives network-request information when those resources load.

Website hosting and the managed data/authentication service are provided through Lovable Cloud. Google Fonts delivers the site’s web typography. Staff-invoked story review uses Lovable AI Gateway and a model service to process the submitted review text. These providers receive information relevant to their function. The model provider’s retention, training-use terms and processing locations have not been verified for this draft.

Inquiries, Founding Community registrations, visitor stories and subscriber records are not publicly readable. Access is restricted to authorised institutional roles; personal Reading Room library records are restricted to the account owner by the application’s permissions. We do not offer a data-sale or advertising-sharing function through this site. Information may be disclosed to appropriate advisers or authorities where necessary and lawful. This draft identifies current known providers and does not cover future email services.

The platform uses encrypted web connections, authenticated administrative access, role-based database permissions and private inquiry records. Validation and database submission limits help reduce obvious abuse. Editorial activity and institutional-document revisions are recorded for review.

No internet service can promise absolute security. Security measures cannot eliminate every risk. Avoid submitting passwords, financial details or unnecessary sensitive information.

A formal retention schedule is not yet approved. Fixed retention periods for inquiries, Founding Community registrations and consent records, visitor stories and AI review drafts, member accounts, Reading Room saves and progress, readership logs, editorial revisions and provider backups are not specified in this draft.

Retention may depend on the purpose of the record, ongoing correspondence, consent, security needs and legal obligations. You can request deletion through the Privacy category on the Contact page. Requests are reviewed by authorised staff; this is not an automated deletion service. Deletion from provider backups may follow a different schedule; this draft does not promise a specific timeframe.

The website may be accessed from multiple countries and uses networked hosting and technical services. Information may be processed outside the country in which you reside. Hosting regions, processor locations and any required transfer safeguards have not been verified for this draft.

This draft does not promise storage in a particular country or establish which international transfer safeguards apply.

Depending on applicable law and circumstances, you may have rights to access, correct, delete, restrict or object to processing, receive portable information or withdraw consent. Exceptions may apply, including obligations to preserve particular records. Withdrawing consent does not invalidate prior lawful processing.

Use the Privacy category on the Contact page to request assistance, change Dispatch preferences or withdraw your Dispatch registration. Provide only the information needed to identify your request. Staff may request proportionate verification before disclosing or changing records. Requests are reviewed individually, subject to the rights and obligations that apply under law.

Dispatch editions are not currently being sent. You can request withdrawal of your registration through the Contact page. If you believe rights have been infringed, you may have the right to contact a relevant supervisory authority under the law that applies to you.

The website provides cultural information for a general audience. Its inquiry and registration tools are not intended to solicit personal information from children under 13, or under a higher local consent age where applicable. No age-verification or parental-consent programme is currently operated.

Children should not submit personal information without appropriate involvement of a parent or guardian. If you believe a child’s information has been submitted inappropriately, contact us through the privacy pathway so it can be reviewed and, where appropriate, removed. The website does not offer child-directed interactive services.

Links may lead to publications, reference sources or other external services. Those services have their own privacy practices and terms. The MoSS does not control the information you submit to another website. Review its notices before sharing information.

Updates will be identified by a revised date on this page. Material changes may require additional notice or renewed consent where applicable. Institutional document revisions are preserved for authorised review. A draft’s appearance online does not mean unresolved legal details have been approved.

For privacy questions or requests, use the Privacy category on the Contact page. This is the current contact channel for privacy inquiries.

This policy remains a draft. Legal identity, jurisdiction, detailed retention periods and international processing arrangements are not finalised. You may still contact us about your information and privacy choices.

Draft first published: 28 October 2026. Last editorial update: 30 October 2026. Version: Founding Community, visitor submissions and Reading Room update. No final legal effective date has been set. These dates describe this draft, not the creation or incorporation of the institution.