Privacy Policy
Last updated: October 21, 2026
The short version
- The free face scan runs in your browser. Your photo is not uploaded for it.
- Your photo is uploaded only when you choose to buy the Full Report and give your consent.
- Uploaded photos are deleted within 2 hours. A purchased report keeps a private copy for up to 12 months, or until you delete it.
- We never sell your data or use your photos to train AI models.
- You can delete your data yourself, or email support@faceanalysis.io.
This policy explains what Face Analysis (“we”, “us”) collects when you use faceanalysis.io, why we collect it, who processes it for us, how long we keep it and what you can do about it. By using the site you agree to this policy.
1. What we collect
Free face scan
When you run the free scan, facial landmarks are detected in your browser using Google’s MediaPipe Face Mesh model. Your photo and any live camera frames stay on your device; they are not sent to our servers for this scan.
To show and share your result, we save the numbers the scan calculates: your scores, measurements and the few landmark points needed to draw the result. We do not store the full 478-point face mesh or the photo.
If you continue to the Full Report, your browser keeps a local copy of the photo for up to 2 hours so you do not have to choose it again. It stays on your device until you give consent and pay.
Full Report (paid)
When you buy the Full Report, you are asked to confirm your birth year, that you are 18 or older, that the photo is of you (or that you have the person’s explicit permission), and that you agree to AI processing. Only then is the photo uploaded to private storage.
To create your report we:
- send the photo and your measurements to Google Gemini, which describes visible features such as hair color, hair type and length, eye color, facial hair, glasses, apparent skin tone (Fitzpatrick type) and the age you appear in the photo;
- send the photo, your measurements and that description to Anthropic’s Claude, which writes the report text;
- use Google’s image models to create your hairstyle previews from the photo;
- keep a downscaled copy of the photo and close-up crops of your eyes, nose, lips and jaw so the report can show them next to the measurements.
We do not infer race or ethnicity, health conditions, personality or identity.
Account and email
We collect the email address you enter at checkout. It is used to send your report, your PDF and one-time sign-in links so you can open the report on another device. We never ask customers to create a password.
Payments
Payments are handled by Stripe. We never see or store your card number. We receive your name, email address and billing address from Stripe, along with the order amount, the order status and a reference to your analysis.
Information collected automatically
- Cookies and browser storage. A first-party session cookie (kept up to 1 year) links your results and purchases to your browser. We also store your consent choices and your age-check result (pass or fail only, never your birth year).
- Device and usage data. Your browser type, pages visited and basic events such as starting a scan or opening a report.
- Analytics. If we use analytics tools, they measure how the site is used. Where the law requires it, they run only after you accept analytics cookies.
2. Biometric data notice
Facial geometry may count as biometric or sensitive data under laws such as the Illinois Biometric Information Privacy Act, Washington’s My Health My Data Act and the EU and UK GDPR. We handle it as follows:
- The free scan calculates facial geometry on your device and saves only the derived numbers listed above.
- Before any photo is uploaded for AI processing, we ask for your explicit consent. You can refuse and still use the free scan.
- Photos are sent to our AI providers over encrypted connections, only to produce your report.
- We keep biometric-related data only for the periods in section 4, then delete it.
- You can withdraw consent and delete your data at any time (section 6).
3. How we use your information
- To run the scan, show your result and let you share a result link.
- To create, store and deliver your Full Report and PDF.
- To process payments, refunds and customer support requests.
- To keep the service secure and prevent abuse.
- To understand how the site is used and improve it, using aggregated or de-identified data.
We do not sell your data, use it for advertising profiles, or use your photos to train AI models. We do not make automated decisions that have legal or similarly significant effects on you.
4. How long we keep it
| Data | How long |
|---|---|
| Photo used for the free scan | Not uploaded; stays on your device |
| Local copy kept in your browser for checkout | Up to 2 hours |
| Free scan results (scores and measurements) | 2 days, then removed in the next scheduled clean-up |
| Photo uploaded for the Full Report | Deleted within 2 hours of upload |
| Purchased report, its private photo copy, close-ups, AI images and PDF | Until you delete it, and no longer than 12 months |
| Consent records | Until you delete your data; up to 1 year if not linked to an email |
| Session cookie | Up to 1 year |
| Email address | Until you delete your data |
| Order and refund records | As long as tax and accounting law requires |
Anyone who has the exact link to a free result page can view it until the result expires. Paid reports are shown only to their owner. Backups held by our hosting providers are overwritten on their regular schedules.
5. Service providers
We use these providers to run Face Analysis. Each receives only what it needs for its task.
| Provider | Purpose |
|---|---|
| Cloudflare | Website hosting, private file storage (R2) and PDF rendering |
| Neon | Database |
| Google (Gemini and image models) | Visible-feature analysis and hairstyle previews |
| Anthropic (Claude) | Writing the report text |
| Stripe | Payments |
| Resend | Sending report, PDF and sign-in emails |
| Google (MediaPipe) | The face landmark model your browser downloads for the free scan |
6. Your choices and rights
- Delete your data. You can delete a paid report from its report page. You can also ask us to delete everything linked to your browser or email by writing to support@faceanalysis.io.
- Withdraw consent. Deleting your report and data withdraws consent for further processing of your photo.
- Access, correction and export. Email us and we will respond within 30 days.
- Object or complain. You can object to processing, and you can complain to your local data protection authority.
We may ask you to confirm you own the email address or browser session before acting on a request, so that no one else can access or delete your data.
7. Age requirements
The Full Report and every feature that uploads a photo are for people aged 18 and over. We check your birth year before any upload and store only whether the check passed. If you tell us you are under 18, no photo is uploaded, but you can still use the free in-browser scan. Do not upload photos of anyone under 18. If we learn that we hold a minor’s data, we delete it. A parent or guardian can ask us to delete a child’s data at support@faceanalysis.io.
8. International transfers
Our providers may process data in countries other than yours, including the United States. Where the law requires it, we rely on safeguards such as the providers’ standard contractual clauses.
9. Security
Uploaded photos and reports are kept in private storage and are reached only through short-lived signed links. Data is encrypted in transit. No system is perfectly secure, so please tell us at once if you suspect a problem.
10. Changes to this policy
If we make a material change, we will post a notice on the site or email you before it takes effect. The date at the top shows the latest version.
11. Contact
Questions or requests: support@faceanalysis.io. We reply within 3 business days.