Privacy Policy — Face Rater

The short version

• Free analysis runs locally in your browser. Your original photo is never uploaded to our servers. MediaPipe face detection and all measurements happen on your device.
• If you buy a report, you pay first; nothing is uploaded before payment. After payment you give two separate consents, and only then is the photo you choose uploaded over an encrypted connection for the requested report. It is reviewed by our image safety gate and used to create seven styling concept images. The temporary source photo is deleted from our storage after the generation stage; the generated images remain private report content so you can retrieve the report.
• Payments are handled by Stripe. We never see or store your full card number.
• Buying needs no sign-in. Stripe collects the email you pay with, and payment creates an account for your report. Linking Google is optional; if you do, we receive your basic profile (name, email, avatar) from Google, never your password.

What we process, in detail

On your device (free tier)

When you use the free analysis, your photo is loaded into browser memory, analyzed by a locally running face-landmark model, and discarded when you leave or reload the page. The resulting measurements and the annotated overlay are rendered locally. None of this crosses the network.

On our servers (paid tier and accounts)

• Measurement summary: the numeric outputs of the analysis (sub-scores, ratios, photo-quality indicators) needed to generate your report. These numbers describe photo geometry; while derived from an image of you, they are not a biometric template and cannot be used to reconstruct your photo or recognize you elsewhere.
• Preferences: the optional styling/goal answers you give before checkout, used to tailor suggestions.
• Account data: the email you paid with (from Stripe), and name, email and avatar from Google if you link it; order records (amount, status, timestamps) needed to deliver reports and handle refunds. To prevent refund abuse we also keep the card fingerprint Stripe provides (not the card number); see the refund policy for how it is used.
• Generated report content: stored against your account; link Google to retrieve it on another device.
• Paid source photo: stored only in a temporary report-scoped location while the seven-image job needs it, then deleted. It is never included in the public site, sitemap, or analytics.
• Generated report images: stored behind owner-authenticated report access until the report is deleted or a refund cleanup removes its media.

We do not treat facial measurement data as absolutely anonymous — it is personal data derived from your image, and we handle it accordingly: access is limited to report generation and support, and it is never sold or shared with advertisers.

Third parties

• Stripe processes payments under its own privacy policy.
• Google provides optional sign-in under its own policy.
• SeeAPI reviews the paid input photo and generated images before delivery. A failure in either review stops the paid job.
• Kie.ai's image provider receives the paid photo through a short-lived capability URL to create the seven requested styling images. The URL expires and our source object is deleted after the generation stage. Provider-side handling remains subject to the provider's current contract and privacy terms; FaceRater does not use your photo to train a FaceRater model.
• A text-generation model provider processes the measurement summary and preferences to produce report text. That call receives no photo.

Photos of minors

Face Rater is for adults, and photos of anyone under 18 are not allowed. We don't identify people or estimate age, and we never sell photos or use them to train a FaceRater model. If a child's photo reaches us, email hello@facerater.io and we delete it within 24 hours of a valid request.

Cookies

We use strictly necessary cookies for sign-in sessions and language preference. Optional Google Analytics 4 cookies are loaded only after you select Allow analytics. Rejecting analytics does not change access to the tools. You can change your choice using Cookie settings on any public page.

If you opt in, Google Analytics receives visits to fixed public page addresses, referral domains, and standard browser/device and approximate geographic information. We remove URL query strings and fragments. We do not send photos, face measurements, account identifiers, private report addresses or payment links. Analytics is disabled on account, payment and private report routes.

Advertising personalization, Google signals and enhanced measurement are disabled. The four optional account-level data-sharing settings with Google are off. Google still processes analytics data to provide the Analytics service under its privacy policy. Analytics cookies expire after 60 days; withdrawing consent stops collection and removes this site's analytics cookies.

Your rights and controls

• Access / export: contact us for a copy of the data tied to your account.
• Deletion: contact us to delete your account and associated orders, measurements, report text, and generated report images. The free tier has no server-side photo. A paid source photo is designed to be deleted automatically after generation; contact us if you believe a temporary upload remains.
• Refunds: see the refund policy.

Data retention

Account, order, report text, and generated report images are kept while your account is active (required for report retrieval and refund handling). Paid source photos are transient: they are uploaded only after payment and consent, and deleted after the generation stage. Server logs are retained briefly for security and debugging and do not contain face photos, landmarks, or report content.

Changes

If this policy changes materially, we will update the date above and, for significant changes affecting paid users, notify the email on your account.

Contact

Privacy questions: see the contact page or email hello@facerater.io. Operator: Face Rater is operated by Face Rater.

Anonymous daily funnel totals (without session, user, report or photo identifiers) are retained for up to 400 days to compare reporting periods. Raw event and attribution records expire after about 30 days. Daily session counts are not unique people across a period.