Your photo never reaches us. All face detection, measurement and cropping happen inside your own
browser using JavaScript that runs on your device. No image is uploaded, transmitted or stored on any server —
not by us, not by our payment provider, not by anyone.
1. What we do not collect
- Your photos. They are read into memory, processed, and discarded when you close the page.
- Your face data. The 68 facial landmarks we compute are numbers that exist only in your browser's
memory. They are never sent anywhere.
- Names, addresses, phone numbers. We do not ask for them.
- Behavioural tracking. No advertising pixels, no session recording, no third-party analytics.
2. What we do collect
| Data |
When |
Why |
| Email address |
Only if you buy |
Collected by our payment provider so a receipt can be issued and so you can recover your purchase |
| Order record (order ID, product type, amount, status) |
Only if you buy |
To verify payment and unlock the full-resolution file |
| Purchase token in session storage |
After payment |
Keeps you unlocked when you refresh the page. Cleared automatically when you close the tab |
We do not use cookies for tracking. The only browser storage we use is one session-storage key holding your
purchase token.
3. Who processes your data
- Cloudflare — hosts the site and the small API that verifies purchases. Sees standard request logs
(IP, user agent), as every web host does.
- Creem — acts as Merchant of Record. Handles the payment, the card details, sales tax and the receipt.
We never see or store your card number.
- Resend — sends transactional email (receipt, recovery link). Receives your email address for that
purpose only.
We do not sell, rent or share personal data with advertisers or data brokers.
4. How long we keep things
- Photos and facial measurements: not stored at all — they cease to exist when the page is closed.
- Order records: kept for seven years, because tax and accounting rules require us to retain proof of
sale.
- Purchase token in your browser: cleared when you close the tab.
5. Your rights
You can ask us to:
- confirm what we hold about you (normally just an order record);
- correct the email address on an order;
- delete your order record — note that this forfeits your ability to recover a purchase;
- receive a copy of your order record in a portable format.
Email [email protected] and we will
respond within 30 days.
6. Biometric privacy (US state law)
Some US states — Illinois (BIPA), Texas (CUBI), Washington — regulate the handling of biometric identifiers
such as facial geometry. We are able to state plainly that we do not collect, capture, transmit, store or
profit from any biometric identifier: the analysis runs on your device and its output never leaves it.
7. Children
This service is not directed to children under 13 and we do not knowingly collect data from them. If you are
photographing a child for an application, do so as their parent or guardian.
8. Security
The site is served over HTTPS. Purchase tokens are signed with a server-side secret that never reaches the
browser. Because we hold almost no personal data, there is very little to breach.
9. Changes
If this policy changes materially, we will update the date at the top of this page. Continued use after a
change means you accept the revised policy.
10. Contact
[email protected]