Privacy Policy — Face Rater

The short version

• Free analysis runs locally in your browser. Your original photo is never uploaded to our servers. MediaPipe face detection and all measurements happen on your device.
• If you buy a report, we send only a small numeric measurement summary and the preferences you choose to share (hair length, texture, styling time, goal) to our server to generate the report. We never send your original photo or the full 478-point landmark mesh.
• Payments are handled by Stripe. We never see or store your full card number.
• Sign-in uses OAuth (Google or GitHub). We receive your basic profile (name, email, avatar) from the provider; we do not receive your password.

What we process, in detail

On your device (free tier)

When you use the free analysis, your photo is loaded into browser memory, analyzed by a locally running face-landmark model, and discarded when you leave or reload the page. The resulting measurements and the annotated overlay are rendered locally. None of this crosses the network.

On our servers (paid tier and accounts)

• Measurement summary: the numeric outputs of the analysis (sub-scores, ratios, photo-quality indicators) needed to generate your report. These numbers describe photo geometry; while derived from an image of you, they are not a biometric template and cannot be used to reconstruct your photo or recognize you elsewhere.
• Preferences: the optional styling/goal answers you provide at purchase, used to tailor suggestions.
• Account data: name, email, and avatar from your OAuth provider; order records (amount, status, timestamps) needed to deliver reports and handle refunds.
• Generated report content: stored against your account so you can retrieve it on another device.

We do not treat facial measurement data as absolutely anonymous — it is personal data derived from your image, and we handle it accordingly: access is limited to report generation and support, and it is never sold or shared with advertisers.

Third parties

• Stripe processes payments under its own privacy policy.
• Google / GitHub provide sign-in under their respective policies.
• A text-generation model provider processes the measurement summary and preferences to produce report text. The provider receives no photo and no direct identifiers from us in that call.

Cookies

We use strictly necessary cookies for sign-in sessions and language preference. If analytics are enabled, they are aggregate and do not include photos or measurements.

Your rights and controls

• Access / export: contact us for a copy of the data tied to your account.
• Deletion: contact us to delete your account and associated orders, measurements, and reports. Because the free tier never uploads your photo, there is nothing of yours to delete from the free tier.
• Refunds: see the refund policy.

Data retention

Account and order data are kept while your account is active (required for report retrieval and refund handling). Server logs are retained briefly for security and debugging.

Changes

If this policy changes materially, we will update the date above and, for significant changes affecting paid users, notify the email on your account.

Contact

Privacy questions: see the contact page or email hello@facerater.io. Operator: Face Rater is operated by Face Rater.