Privacy Policy

Summary

FaceStats is a face analysis tool. The free scan and the seven tools run entirely in your browser: your photo is not uploaded for them. The free analysis (the one every "Start free scan" button opens) measures your photo on your device, asks a few questions and your email address, and keeps the measurements, your answers and your address on our server for 48 hours so we can email you the free report with a link to your results; then they are deleted. Only when you buy the full report is one photo uploaded, with the consent you give by pressing the button that buys it, so the report, its images and its PDF can be generated. The photo, the images and the PDF are deleted automatically 12 months after purchase, and you can delete the whole report sooner from the report page. An account is optional: you only need one to buy and use credits. We never use your photo to train models, never sell data, and never try to identify you.

This policy explains the details. It applies to facestats.app and its language versions.

What runs in your browser

When you use the free scan or a tool, a face-landmark model is downloaded to your browser and run on your device. The photo stays on your device: in the browser's memory and, after the free analysis, in the browser's own storage (IndexedDB) so the results page can draw the measurement lines and close-ups on it. A HEIC photo (the iPhone format) that your browser cannot open is converted to JPEG on your device by a decoder loaded for that purpose; it is not uploaded either. The share card you can save from a result is drawn in your browser as well; it leaves your device only when you save or share it yourself. The links of the reports you buy or open are remembered in the same storage, so My reports can list them in this browser. The tools keep nothing. The only things the free analysis sends to our server are the measurement record, your answers and your email address, described below.

Information we process

Measurements and answers (free analysis)

When the free analysis finishes, its numeric measurements (landmark coordinates, ratios, scores, the photo-quality check and the face shape, but never the photo) are saved with your visitor identifier, together with your answers to its questions (your goal, the occasion, the style you want, your hair, hair colour and glasses). Only the browser session that made the scan, or someone with the private link from the free-report email, can open them. They are deleted automatically 48 hours later, unless you buy the full report from that scan, in which case they are kept with the report and deleted with it; your answers then shape the report. You can delete them sooner with the button on the results page.

Your email address and the free report

The free analysis asks for your email address so we can send you the free report: your score, its estimated rank, your face shape, three readings and a private link back to your results. The address is stored with the measurements and deleted with them after 48 hours; if you buy the full report, it is kept with the report and receives the report link.

About 20 minutes after the free report, if you have not bought the full report from that scan, we send one follow-up email about it, which may offer a lower price for that scan until its results are deleted. Every email has an unsubscribe link; unsubscribing stops these follow-ups for the address. To honour an unsubscribe, and to send a follow-up to the same address at most once every 30 days, we keep a keyed hash of the address (not the address itself) with the date. An address receives at most five free-report emails a day. Emails are sent through Cloudflare Email Service.

Invite links

Each results page has an invite link with a random code. When someone finishes a scan after opening your link, your scan counts one more invite, which unlocks every measurement on your results page. Neither of you sees the other's photo, measurements or email address. If you tick the option to show your overall score, people who open your link see that one number and its tier; otherwise they see only that you invited them.

Rank and anonymous statistics

Your results show a "Top X %" rank. It is an estimate read from your overall score on a fixed reference curve of the scoring model, not a comparison with other people, and it is labelled as an estimate.

When the free analysis saves a scan without quality warnings, its seven scores (overall and the six radar dimensions) are added to the FaceStats statistics as counts in a distribution kept per score and scoring version. Nothing else is stored (no photo, no landmarks, no identifier), so the counts cannot be traced back to you. If you delete your results with the button on the results page, your counts are taken out again; when the results are deleted automatically after 48 hours, the counts remain, anonymously. Once enough scans are counted, the percentiles shown beside your scores come from these counts; the rank stays an estimate.

Photo and report (full report)

If you buy the full report, the photo you scanned is uploaded once when you press the button that buys it. The statement shown beside that button is your consent: that you are at least 18, that the photo shows you, and that it may be processed as this policy describes. We store the photo privately in object storage (Cloudflare R2, private bucket) under a random key. It is used only to generate your report: the written chapters, one styling concept image and six hairstyle previews. The generated images are stored the same way. The report text, the observations derived from the photo and your answers are stored in our database, together with the report language you picked before buying; the report, its PDF and the email with its link are written in that language.

The PDF of your report is produced by Cloudflare Browser Rendering: a browser run by Cloudflare opens a read-only link to your report page that expires after ten minutes and prints it. The PDF is stored privately with the report.

The skin map in the report is computed in your browser from the photo; it is not sent anywhere.

Visitor identifier and accounts

FaceStats works without an account. To remember which results and reports belong to you, we create an anonymous visitor identifier stored in a cookie. It contains no personal data. If you clear the cookie, you can still open your results and your report through the private links we email you.

You can also create a free account with your email address and a password, or sign in with Google or GitHub where offered. We then store your email address, your name if you give one, a hash of your password (never the password itself) or the identifier the sign-in provider returns, and the sessions you are signed in with. When you sign up with an email address we send a code to it to confirm that it is yours. An account is needed to buy and use credits.

When you sign up or sign in, what you made as a guest in the same browser (results, reports and orders) moves into the account. Reports you bought as a guest somewhere else move into it as well, but only if they were sent to the same email address and that address is confirmed; reports of another account never move.

Payment

Payments are processed by Stripe. The checkout page is prefilled with the email address from the free analysis, which you can change there. Stripe collects your card details and the email address used at checkout; we never see or store card numbers. We receive the payment status, the order amount and the email address. Credit packs are bought the same way; with your account we keep a ledger of the credits bought, spent and returned, with dates and the report they paid for. See Stripe's privacy policy for how Stripe handles your data.

Report emails

When your report is ready we send its private link and, when it exists, the PDF as an attachment to the address from the free analysis (or, if there is none, the one used at checkout or your account address). If you retry images that could not be generated, the email goes out again with the updated report, at most five emails per report. An attachment stays in your inbox: deleting the report on the site cannot recall it. You can request deletion of the email address together with the report.

Technical data

Our hosting provider (Cloudflare) processes standard request logs, including IP addresses, for security and operations, with short retention. If analytics are enabled on the site, they are configured without cookies where the provider allows it and never receive your photo or measurements.

AI providers

To write the report and generate its images, we send the photo, the measurements, your answers and the report language to the AI providers we use: OpenRouter (which routes the request to a language or vision model provider) for the written chapters and the visual observation, and fal.ai for the styling and hairstyle images. They process the data to return a result for your report. We do not give or sell your photo or report to anyone to train models, and prompts never include your name or email address.

Retention and deletion

• Free analysis: the photo is never on our servers; the measurements, your answers and your email address are deleted automatically after 48 hours (sooner if you delete them).
• Unsubscribe and follow-up marks: a keyed hash of the address, kept so an unsubscribe keeps working.
• A purchase that is never completed: the uploaded photo is deleted after 24 hours, and the measurements follow the 48-hour rule.
• Photo, generated images and PDF of a paid report: deleted when you delete the report, and automatically 12 months after purchase.
• Report text, observations, the scan's measurements, your answers and the email address stored with them: kept until you delete the report from the report page or ask us to delete it.
• Order records (amount, date, payment reference, email) and the credit ledger: kept as long as required for accounting and tax law.
• Account (email address, name, sign-in details): kept until you ask us to delete the account at support@facestats.app. Unused credits are lost when the account is deleted.

Deleting a report removes the photo, the generated images, the PDF, the report text, the observations, the scan's measurements, your answers and the email address stored with them immediately. The order record remains as proof of purchase.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to its processing and to lodge a complaint with a supervisory authority. Most of this you can do yourself from the results or report page. For anything else, email support@facestats.app from the address you used for the analysis or at checkout.

Children and other people's photos

FaceStats is for adults. Pressing the button that buys the full report confirms that you are at least 18 and that the photo shows you; only then is the photo uploaded. Use FaceStats only with photos of yourself, never with photos of other people or of children.

Security

Photos, images and PDFs are stored in private buckets and served only through authenticated requests on this site. Results and report links contain a random key; keep them private.

Changes

We will update this page and the date above when our practices change. The consent statement beside the purchase button always links to the current version.

Contact

support@facestats.app