Sign in

2026-08-03

Privacy

A face photo is biometric data. This page says exactly what we take, where it goes and how long we keep it.

What we hold

  • Your email address and a hash of your password. We never store the password itself.
  • The photo you upload, stored on our server outside any public directory.
  • The report: matched page URLs, similarity scores and the thumbnails returned by the search engine.
  • Payment records: amount, currency, and Stripe's identifiers. Card details go straight to Stripe and never reach our servers.

Who else sees your photo

  • Running a search sends your photo to the third-party provider that supplies the face-matching index. Nothing before that does: if you upload a photo and never pay, it never leaves our servers. Whether the photo contains a face at all is worked out in your own browser. Their handling of what we do send is governed by their own policy, and we will tell you who they are on request.
  • Stripe processes the payment and receives your email address.
  • Meta is told that a purchase happened, its amount, and your email address as an irreversible hash — never in readable form. It is never told what you searched for, what the report found, or which page you were on.
  • Nobody else. We do not sell data, and we do not add your photo to any index.

How long we keep it

  • Your photo and report stay until you delete them or close your account.
  • Deleting a search removes the photo from disk and the report from the database.
  • Payment records are kept as long as tax and accounting rules require.

Your rights

  • You can ask for a copy of your data, correct it, or have it erased. Write to us and we will action it.
  • In the EU and UK, biometric data is special category data under GDPR Art. 9 and we process it only on your explicit consent — the consent you give by uploading a photo, which you can withdraw at any time by deleting it.

Cookies

  • A session cookie to keep you signed in, a language cookie for your TR/EN choice, and an anonymous id that ties a photo you upload before registering to the account you then create. The site does not work without these. Google Analytics and the Meta pixel set their own cookies on top of them — measurement and advertising cookies, described below. If you would rather not have them, block them in your browser or with an extension; nothing on the site stops working.
  • Google Analytics and the Meta advertising pixel run on this site. They tell us how many people arrive and which of our ads led to a purchase. Your searches, your reports and your photos are never included in what they measure — not the photo, not the results, not the address of the page they are on.
  • The Meta pixel is not loaded on your search or report pages. The address of those pages contains the handle to your photo, and the pixel reports the address of every page it runs on — so on those pages it is simply absent. What we measure there is sent from our own servers instead, without that address.