PRIVATE BY DESIGN

Your face is not our data.

Your photo is analyzed directly in your browser. It is not uploaded to our servers.

Policy for the free MVP · Updated November 11, 2026.

Local processing

Image decoding, face landmark detection, quality checks, measurements, shape matching and recommendations run on your device. This site has no image upload endpoint, remote image API, facial recognition service or backend analysis. We do not create user accounts or infer identity or sensitive characteristics.

What the browser downloads

The browser requests the site’s static HTML, styles, scripts, illustrations, MediaPipe software and face landmark model from the same website host. The homepage loads the model after you select or capture a photo. The detector page prepares the model when you open the tool. These files contain no user photo. The hosting provider necessarily receives ordinary web requests and may process connection metadata such as IP address, requested URL and time according to its own policy.

Your photo and measurements

The tool creates a resized analysis copy in memory and leaves your original file unchanged. It does not put images or landmarks in cookies, localStorage, sessionStorage or IndexedDB. There are no analytics scripts, advertising trackers, or events containing facial data. The tool does not put results or landmarks in URLs.

Camera access

We request camera access only after you choose to open the camera, and request video only, never audio. The live view stays in the browser. Camera tracks are stopped after capture, when closing the camera, when the page is hidden, or when leaving the tool. Your browser manages permission settings; you can revoke permission there at any time.

Resetting and leaving

Reset releases the image object URL and clears the photo, landmarks and results from application memory. Leaving the tool terminates the analysis worker and stops camera tracks. Memory is managed by the browser; this is not a promise of forensic secure erasure. Downloaded site assets may remain in the browser cache, but we do not cache your photo.

Reports are your choice

Printing, saving a PDF and downloading a PNG happen only when you select those actions. Your photo is excluded unless you explicitly choose to include it. Files you save are managed by your device and any print destination or cloud folder you choose. Resetting the tool does not delete files you have downloaded.

Questions and control

You can use the guides without selecting a photo, close the tool at any time, or delete a downloaded report yourself. For project feedback, see the contact page. Please do not send private photos or reports in a support message.