Privacy Policy

Your photo stays on your device. Photos are processed locally, not uploaded or saved by this tool.

What happens to a photo

Your browser decodes your selected file in memory, checks its quality and uses a local model to estimate facial points. Those points and your result stay in memory. We do not write photos, landmarks or results to localStorage, sessionStorage, IndexedDB, Cache Storage or a service worker. Using Change photo, refreshing, leaving or closing the page discards the current session. Returning through browser history starts in the empty state rather than restoring the previous photo. Choosing Download Result creates a PNG locally and saves it through your browser.

What uses the network

The site and its fixed model and WebAssembly files are delivered by Cloudflare from the same site origin. Ordinary HTTP caching may retain public application assets, never your photo. The hosting provider necessarily handles connection information such as IP addresses and requested URLs to deliver the website. A local-processing promise does not mean the page makes no network requests.

Cloudflare currently adds Network Error Logging (NEL) response headers. A supporting browser may send network-failure diagnostics, including requested URLs and connection information, to Cloudflare. This hosting-managed reporting remains enabled; it is separate from this tool's local photo analysis and application events.

Analytics and SDK metrics

No application analytics destination, advertising tracker, session replay or application error-monitoring service is enabled. The application event wrapper is a no-op: it does not transmit or store events. The pinned MediaPipe package includes usage logging code; this tool blocks its outbound transport, and the content security policy independently prevents external connections. We do not send scores, file names, image hashes, pixels, landmarks or identifying result data.

Your choices

Use only photos you have permission to use. Do not upload sensitive documents or someone else's photo without consent. The tool has no account or stored history to delete. A result card that you choose to download is your own file; sharing that file is separate from using this site.