Privacy Policy

Last updated: October 21, 2026

The short version

  • The free face scan runs in your browser. Your photo is not uploaded for it.
  • Your photo is uploaded only when you choose to buy the Full Report and give your consent.
  • Uploaded photos are deleted within 2 hours. A purchased report keeps a private copy for up to 12 months, or until you delete it.
  • We never sell your data or use your photos to train AI models.
  • You can delete your data yourself, or email support@faceanalysis.io.

This policy explains what Face Analysis (“we”, “us”) collects when you use faceanalysis.io, why we collect it, who processes it for us, how long we keep it and what you can do about it. By using the site you agree to this policy.

1. What we collect

Free face scan

When you run the free scan, facial landmarks are detected in your browser using Google’s MediaPipe Face Mesh model. Your photo and any live camera frames stay on your device; they are not sent to our servers for this scan.

To show and share your result, we save the numbers the scan calculates: your scores, measurements and the few landmark points needed to draw the result. We do not store the full 478-point face mesh or the photo.

If you continue to the Full Report, your browser keeps a local copy of the photo for up to 2 hours so you do not have to choose it again. It stays on your device until you give consent and pay.

Full Report (paid)

When you buy the Full Report, you are asked to confirm your birth year, that you are 18 or older, that the photo is of you (or that you have the person’s explicit permission), and that you agree to AI processing. Only then is the photo uploaded to private storage.

To create your report we:

  • send the photo and your measurements to Google Gemini, which describes visible features such as hair color, hair type and length, eye color, facial hair, glasses, apparent skin tone (Fitzpatrick type) and the age you appear in the photo;
  • send the photo, your measurements and that description to Anthropic’s Claude, which writes the report text;
  • use Google’s image models to create your hairstyle previews from the photo;
  • keep a downscaled copy of the photo and close-up crops of your eyes, nose, lips and jaw so the report can show them next to the measurements.

We do not infer race or ethnicity, health conditions, personality or identity.

Account and email

We collect the email address you enter at checkout. It is used to send your report, your PDF and one-time sign-in links so you can open the report on another device. We never ask customers to create a password.

Payments

Payments are handled by Stripe. We never see or store your card number. We receive your name, email address and billing address from Stripe, along with the order amount, the order status and a reference to your analysis.

Information collected automatically

  • Cookies and browser storage. A first-party session cookie (kept up to 1 year) links your results and purchases to your browser. We also store your consent choices and your age-check result (pass or fail only, never your birth year).
  • Device and usage data. Your browser type, pages visited and basic events such as starting a scan or opening a report.
  • Analytics. If we use analytics tools, they measure how the site is used. Where the law requires it, they run only after you accept analytics cookies.

2. Biometric data notice

Facial geometry may count as biometric or sensitive data under laws such as the Illinois Biometric Information Privacy Act, Washington’s My Health My Data Act and the EU and UK GDPR. We handle it as follows:

  • The free scan calculates facial geometry on your device and saves only the derived numbers listed above.
  • Before any photo is uploaded for AI processing, we ask for your explicit consent. You can refuse and still use the free scan.
  • Photos are sent to our AI providers over encrypted connections, only to produce your report.
  • We keep biometric-related data only for the periods in section 4, then delete it.
  • You can withdraw consent and delete your data at any time (section 6).

3. How we use your information

  • To run the scan, show your result and let you share a result link.
  • To create, store and deliver your Full Report and PDF.
  • To process payments, refunds and customer support requests.
  • To keep the service secure and prevent abuse.
  • To understand how the site is used and improve it, using aggregated or de-identified data.

We do not sell your data, use it for advertising profiles, or use your photos to train AI models. We do not make automated decisions that have legal or similarly significant effects on you.

4. How long we keep it

DataHow long
Photo used for the free scanNot uploaded; stays on your device
Local copy kept in your browser for checkoutUp to 2 hours
Free scan results (scores and measurements)2 days, then removed in the next scheduled clean-up
Photo uploaded for the Full ReportDeleted within 2 hours of upload
Purchased report, its private photo copy, close-ups, AI images and PDFUntil you delete it, and no longer than 12 months
Consent recordsUntil you delete your data; up to 1 year if not linked to an email
Session cookieUp to 1 year
Email addressUntil you delete your data
Order and refund recordsAs long as tax and accounting law requires

Anyone who has the exact link to a free result page can view it until the result expires. Paid reports are shown only to their owner. Backups held by our hosting providers are overwritten on their regular schedules.

5. Service providers

We use these providers to run Face Analysis. Each receives only what it needs for its task.

ProviderPurpose
CloudflareWebsite hosting, private file storage (R2) and PDF rendering
NeonDatabase
Google (Gemini and image models)Visible-feature analysis and hairstyle previews
Anthropic (Claude)Writing the report text
StripePayments
ResendSending report, PDF and sign-in emails
Google (MediaPipe)The face landmark model your browser downloads for the free scan

6. Your choices and rights

  • Delete your data. You can delete a paid report from its report page. You can also ask us to delete everything linked to your browser or email by writing to support@faceanalysis.io.
  • Withdraw consent. Deleting your report and data withdraws consent for further processing of your photo.
  • Access, correction and export. Email us and we will respond within 30 days.
  • Object or complain. You can object to processing, and you can complain to your local data protection authority.

We may ask you to confirm you own the email address or browser session before acting on a request, so that no one else can access or delete your data.

7. Age requirements

The Full Report and every feature that uploads a photo are for people aged 18 and over. We check your birth year before any upload and store only whether the check passed. If you tell us you are under 18, no photo is uploaded, but you can still use the free in-browser scan. Do not upload photos of anyone under 18. If we learn that we hold a minor’s data, we delete it. A parent or guardian can ask us to delete a child’s data at support@faceanalysis.io.

8. International transfers

Our providers may process data in countries other than yours, including the United States. Where the law requires it, we rely on safeguards such as the providers’ standard contractual clauses.

9. Security

Uploaded photos and reports are kept in private storage and are reached only through short-lived signed links. Data is encrypted in transit. No system is perfectly secure, so please tell us at once if you suspect a problem.

10. Changes to this policy

If we make a material change, we will post a notice on the site or email you before it takes effect. The date at the top shows the latest version.

11. Contact

Questions or requests: support@faceanalysis.io. We reply within 3 business days.