Privacy and biometric notice
Short version: nothing derived from your face leaves your device. Not the photo, not the 478 landmark points the model places on it, not the measurements taken from those points, and not the result. There is no upload, no account, no database and no analytics on the measurement itself. The rest of this page is the long version, including the specific notice that biometric privacy laws require.
That sentence is deliberately wider than "your photo is never uploaded", and the difference matters. A tool can leave your photo on your device and still send the geometry of your face to a server: the landmark array is what a face measurement actually is, and a page that transmits it has transmitted your face whether or not an image went with it. Nothing on this site sends one.
One thing changes if you buy a report, and it is the only exception to the sentence above. The measurements, the numbers only, are stored for 30 days so you can open the report again if you lose the tab. Your photo still never leaves your browser, and neither does anything that describes the shape of your face. In full, below.
What actually happens to your photo
This is every step, for the free tools and for a paid report alike. The photo takes the same path in both, and that path has no network request in it.
- 1You choose a photo or open the camera.The file is read by your browser. No network request carries it.
- 2It is drawn onto a canvas in the page.Large images are scaled down here, on your device, to keep the measurement fast.
- 3Google's MediaPipe Face Landmarker runs on your device.The model file is served from this site and executes as WebAssembly inside your tab. It places 478 points on the face and returns coordinates.
- 4The numbers are computed from those coordinates.Ratios, angles and differences. Arithmetic, in the page.
- 5When you close the tab, all of it is gone.Nothing was written to a server, and nothing is kept in your browser either.
You can check this yourself rather than taking our word for it, and it is worth doing precisely rather than loosely. Open your browser's developer tools, switch to the network tab, and run a measurement. Sort by size and look at every request that leaves after you choose a photo. You will see the model and WebAssembly files download once, and nothing else. In particular you will see no request with a body at all, which is the check that matters: an upload can hide as a few kilobytes of coordinates just as easily as as a few hundred kilobytes of image. The site also sends a Content-Security-Policy restricting connections to this origin, so the page is not permitted to transmit anything even if a future bug tried to.
Biometric notice
Measuring a face from a photo can constitute processing biometric information under several laws, including the Illinois Biometric Information Privacy Act (BIPA), Washington's My Health My Data Act (MHMDA), and the GDPR's rules on special category data. Those laws are written around collection, storage, sharing and retention. This is our notice against each of them.
- Collected
- Free tools:Nothing. The photo is processed in your browser and is not transmitted to us.
- If you buy a report:The measurement numbers, which your browser sends when you click buy. Never the photo.
- Stored
- Free tools:Nothing. There is no database record of you, and no biometric identifier or template is saved anywhere.
- If you buy a report:Those numbers, in one row, for 30 days. No photo, no facial landmarks, no outline of your face, no account.
- Shared or sold
- Free tools:Nothing, to anyone, ever. There is nothing to share.
- If you buy a report:Nothing is sold or shared. Stripe processes the payment and holds your email for the receipt; we never write it down.
- Retention period
- Free tools:None, because nothing is retained. The data exists in your tab's memory and ends when you close it.
- If you buy a report:30 days, or the moment you delete it below, whichever comes first.
- Purpose
- Free tools:Showing you measurements of your own face for styling and curiosity.
- If you buy a report:Rebuilding your report when you open its link again.
- Automated decisions
- Free tools:None that affect you. Nothing here feeds a decision about employment, credit, insurance or access.
- If you buy a report:The same. A report is a description of measurements, not a decision about you.
Before any measurement runs you tick a box confirming you are 18 or older and agree to on-device analysis. That checkbox is the consent record, and it is checked again at the moment analysis starts rather than only when a button was pressed, so unticking it mid-flight stops the run.
If you buy a report
A report is assembled from the numbers your browser already worked out. To pay for one and to be able to open it again afterwards, those numbers have to exist somewhere other than a tab you might close. So they are stored, and this is exactly what that means.
- The photo still never leaves your browser.Not at purchase, not afterwards, not in any form. The step list above is the whole path a photo takes, and buying a report adds nothing to it.
- Neither do the 478 landmarks, or any outline of your face.A contour of a face is close enough to a biometric template that we will not hold one. The cost of that is honest: a report opened on a different device shows every number and every piece of advice, but not the drawings done on your own face. Re-measuring the same photo brings those back, in your browser, in a second.
- What is stored is about 1.4 kilobytes of numbers.Ratios, angles, percentiles and the measurement floors that go with them. The same figures the free tools already showed you on screen.
- There is still no account and no password.Your report is reached by a link, and the link is the only thing that opens it. We store a one-way hash of it rather than the link itself, so a copy of our database would not let anyone open anybody's report.
- Stripe handles the payment and your email address.They collect it to send your receipt, and they are the record of the sale. We do not store it. Our server sees it in the moment it checks that a payment succeeded, and writes nothing.
Deleting your data
If you have only used the free tools, close the tab. That is the whole procedure and it is complete: a deletion request is a request that somebody erase a copy they hold, and no copy is ever made outside the tab you are looking at. There is no account to close, no export to request and no record to correct.
If you bought a report, there is one row, and you can remove it yourself right now. You do not have to email anybody, wait for a reply, or prove who you are, because the link is the proof.
If you want to ask anyway. Privacy questions go to the contact page, which is read by the person who runs this site. You will get an answer even when the answer is that there is nothing of yours here to delete.
No session recording, and why that is a decision
Tools that replay what a visitor did, recording the page as they used it, are ordinary on sites like this one. We do not run one, and this is written down so it reads as a choice rather than as something we had not got round to yet.
The reason is specific. On this site the screen has your face on it. A session recorder captures the page, so it captures the photo you chose, which would route around every other promise here by a side door. That is a real cost to us, because it is exactly the data that shows where people get stuck. If we ever add behavioural measurement it will have to be something that cannot capture the page while a face is on it, and this section will say what it is before it ships.
What this site is not
It is not a medical device, a diagnostic tool, or a cosmetic consultation, and nothing it prints should be used to decide on a procedure. It does not rate attractiveness and does not rank anyone. The example portraits throughout the site are generated by an image model and are not photographs of real people. The measurements themselves are described with their own precision attached, and any number too small for the method to resolve is shown as unmeasurable rather than as a confident figure.