Privacy & storage

The short version

Fit Grades has no user accounts and does not maintain an application database of body profiles. We process the sex category, height, and weight you submit to calculate a result. Your browser keeps those inputs in session storage for up to 12 hours so they can follow you through this tab and its product pages. The 12-hour period starts when you submit the measurements or import an explicit share link; moving between pages does not extend it. The profile is normally removed when that browser session ends, and the footer’s Forget saved measurements control removes it sooner.

Information you provide and results we derive

The service processes the sex category, height, and weight you enter. It derives BMI, percentile estimates, conditional estimates of unmeasured body dimensions, and product-fit results. The model is based on adult population data; the service is not intended for children and is not medical advice or a safety certification.

How a fit request works

When you request a score, your browser sends the three inputs over HTTPS to the Fit Grades analysis server. The server uses them to calculate and return the result. We do not intentionally place body inputs in ordinary page URLs, analytics events, or application database records. Successful results and handled validation or service responses are marked private and not to be cached.

If you explicitly create a share link, the link contains an encoded—not encrypted—copy of the three inputs in its browser fragment. Anyone who receives that link can recover them. The fragment is not sent to the web server in the normal page request.

Browser storage, cookies, and analytics

• Session storage: sex category, height, weight, version, and save time.
• Local storage: only the US/metric display preference.
• Analytics: Cloudflare Web Analytics records aggregate visits, referring sites, requested pages, and site performance. It does not use cookies, local storage, cross-site tracking, or a persistent client identifier. Body measurements, derived dimensions, and grades are not sent to analytics. The analytics beacon is loaded only after Fit Grades has removed any profile-bearing share fragment from the browser address.

Cloudflare receives an IP address as part of the analytics network request but states that it discards the address at the nearest data center rather than storing it in its analytics databases. Cloudflare may also set strictly necessary security cookies when it protects the service from abuse. These are used to deliver and secure a service you requested, not for advertising. Because Fit Grades currently has no optional cookie-based service, it does not show a consent banner. We will add prior consent before loading any future non-essential cookie or marketing technology that requires it.

Technical and operational data

Hosting and security providers may process IP address, browser and device information, timestamp, requested path, response status, and security diagnostics. We use this data to deliver, troubleshoot, measure, and protect the service. Fit Grades uses Fly.io for hosting and analysis and Cloudflare for DNS and privacy-focused web analytics. Google currently supplies the site’s web fonts and receives ordinary request metadata when those fonts load.

For fit-analysis requests, the dedicated application access log is configured to include only operational metadata: client network address, time, the fixed analysis endpoint, request method, response status, and request time. That access log omits query strings, request bodies, referrers, and user agents. Hosting and security infrastructure may generate separate diagnostics when a request fails. Fly.io and Cloudflare may retain delivery and security records under the settings and retention periods that apply to their services. We retain any records available to us only as long as needed for reliability, security, legal compliance, or an active incident.

Email and update requests

The update field in the footer does not submit an address to Fit Grades or a mailing-list database. It opens a draft in your email application. If you choose to send that message, your email address and message are processed and retained by your email provider and ours so we can respond to the request. You can ask to be removed at any time by emailing hello@dfhv.org.

Referral links and other sites

If a link is marked as a referral or affiliate link, DfHV may earn a commission when you buy. The retailer or referral network will receive the request and may use cookies under its own policy after you leave Fit Grades. We do not put body measurements or grades in referral tracking parameters. See the affiliate disclosure.

Sale, advertising, and disclosure

We do not currently sell personal information, use body measurements for targeted advertising, or disclose body profiles to data brokers. We may disclose limited information to service providers acting for us, when required by law, or when necessary to protect the service and its users.

Your choices

Use Forget saved measurements in the footer, close the browser session, or clear site data in your browser to remove the stored profile. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, or information about our processing. Contact hello@dfhv.org.

Security, changes, and contact

We use reasonable technical and organizational measures, but no internet service can guarantee absolute security. We may update this policy as the product, providers, or law changes; the date above will change when the revision is material. DfHV is a project operated by Matthew Parkinson and operates Fit Grades. Privacy questions and requests can be sent to hello@dfhv.org.