Privacy

Your photo is not uploaded

Every measurement on this site — symmetry, golden ratio, face shape, score — runs in your browser using a face mesh model downloaded to your device. Your photo is held in your browser's memory for the duration of the analysis and is never transmitted to us, never written to a server, and never stored.

You can verify this without taking our word for it. Open your browser's developer tools, go to the network tab, and run any tool on this site. You will see the model file download. You will not see a request carrying your image, because there is not one.

What that means legally

Because the analysis happens on your device, we do not collect, capture, receive or store biometric identifiers or biometric information as those terms are used in the Illinois Biometric Information Privacy Act and comparable state laws. There is no biometric template on our servers because your face never reaches them.

This changes only if you choose to use the paid simulation feature, which necessarily sends an image to a GPU service. That step asks for explicit consent before anything is sent, and it is entirely optional — every free tool on this site works without it.

What we do collect

If you create an account: your email address and the Google account identifier, so we can attach purchases to you. If you buy credits or a plan: Creem processes the payment as merchant of record and we store the resulting purchase record. We never see or store your card details.

We use privacy-preserving analytics to count page views and which tools get used. That data is aggregate and is not tied to an identifiable person.

The simulation feature: what leaves your device, and where it goes

This is the one part of the service that uploads your photograph, and it deserves to be spelled out rather than summarised. It always asks before the first render, and it is never a precondition for using any measurement tool.

When you run a simulation, the photo you selected is uploaded to our storage, passed to an AI image-editing model, and the generated result is stored against your account so it appears in your history. Three companies are involved and each receives the image:

Google (Firebase) — our own backend. Servers in the United States. Receives the photo, the generated result, your account record and your credit balance. Stored until you delete it or we do.

fal.ai (Features and Labels, Inc.) — United States. Runs the image-editing model and hosts the generated result on its content delivery network so the page can display it. When you delete a result we instruct fal to delete the request and its files.

OpenAI, L.P. — United States. The image-editing model is executed on our behalf through fal.ai. Data submitted through the API is not used to train OpenAI's models; abuse-monitoring logs are retained for up to 30 days.

Creem processes payments as merchant of record and receives a purchase record and your identifier. It never receives your photograph. Our hosting provider serves the pages and does not process images.

What we do not do with your face data

We do not use it for facial recognition, identification or authentication of any kind. We do not create or store a biometric face template, faceprint or signature that could identify you, and we do not match your face against any database, any other user or any external source.

We do not use it for advertising, retargeting or audience building, and we never share it with ad networks, data brokers or social SDKs. We do not sell, rent or trade it. We do not use it to train, fine-tune or improve any AI model, and our AI processors are contractually prohibited from using data submitted through their APIs to train theirs.

There is no feed, no gallery and no sharing function. Your simulations are visible in your own account only, unless you choose to download one and share it yourself.

Deleting your data

Account deletion removes your profile, your purchase history and any stored simulation images. Request it from your dashboard, or email hi@thefaceanalysis.com.

There is nothing to delete for the free tools, because nothing about them was ever stored.

How to check this yourself

A privacy claim you cannot verify is a promise. This one is checkable in under a minute, and it is worth doing rather than trusting the sentence above.

Open your browser's developer tools — F12 on Windows, Option-Command-I on a Mac — and select the Network tab. Leave it open, then load any tool on this site and run an analysis on a photo. You will see the WebAssembly model and its weights download, which is a few megabytes on the first run and cached afterwards. Scroll the whole list. There is no request carrying your image, because the analysis happens in the tab you are looking at.

The one exception is the paid simulation, which does upload. It is a separate action, it asks first, and you will see that request appear if you run it.

What your browser stores on your device

Two things are kept in your browser's local storage, both on your device and neither sent to us. The first is your theme preference, so the site does not flash the wrong colour scheme when you return. The second is your measurement history: when you run an analysis, the resulting numbers — score, symmetry percentage, face shape, canthal tilt, pupillary distance — are saved locally so the dashboard can show them over time.

The photograph is not saved, only the numbers derived from it. This history never leaves your device, is not attached to an account, and does not follow you to another browser. You can view it and delete it from the dashboard, or clear your browser's site data, which removes it just as completely.

Cookies and analytics

We do not use advertising cookies and we do not run third-party trackers for advertising purposes. Analytics are aggregate: page views, which tools get used, and which pages people arrive on. They are not tied to an identifiable person and they do not follow you across other sites.

If you sign in, an authentication token is stored by Firebase so you stay signed in between visits. That is a functional cookie in the sense the law uses, and removing it signs you out.

The measurement side, by contrast

The face mesh model is served to you as a static file. Once downloaded it runs on your device, reports nothing back, and no landmark, ratio or score is transmitted anywhere at any point — not to us, not to an AI provider, not to analytics. If you never run a simulation, no image or measurement of your face has ever left your browser.

That asymmetry is the whole design. It is also why the two halves of this page read so differently: one of them has a list of companies and a retention schedule, and the other has nothing to list.

Your rights

If you are in the EU or UK, the GDPR gives you the right to access, correct, export and delete the personal data we hold, and to object to processing. If you are in California, the CCPA gives you comparable rights, including the right to know what is collected and to request deletion. We do not sell personal information under any definition of that term.

Exercise any of these by emailing hi@thefaceanalysis.com. For the free measurement tools there is nothing to request, because nothing was collected — the only data that exists is on your device, under your control.

Changes to this policy

If the way this site handles data changes — particularly if any free tool were ever to start transmitting your photo — this page would be updated before that change shipped, and the change would be described here rather than buried in a version number.

Children

This service is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.