Privacy Policy

FaceReport was built privacy-first because the subject matter — your face — demands it. This privacy policy explains exactly what happens to your photos, your camera stream and your measurements when you use any of the fourteen tools on this site. The short version: everything is processed on your device, and nothing is ever uploaded.

What we collect

Nothing. FaceReport has no accounts, no sign-up forms, no analytics identifiers tied to you, no advertising cookies and no photo storage. When you upload a photo for a face analysis tool, the file is handed to your browser's own JavaScript environment and decoded into memory. When you close the tab or press "try another photo", that memory is released and the image ceases to exist. There is no upload endpoint in the application — not one that is disabled, but none at all.

How the face analysis tools process photos

Each analysis tool follows the same pipeline, entirely inside your browser:

1. Decode — your photo is read with its EXIF orientation applied, so measurements match what you see.
2. Detect — a face landmark model (about 4 MB, downloaded once from this site and then cached) locates 478 facial landmark points on-device.
3. Measure — transparent geometry formulas compute ratios, angles and symmetry offsets from those points.
4. Render — the annotated overlay and result cards are drawn in the page.
5. Discard — closing the tab erases the photo, the landmarks and every measurement.

The only file the tools can create is an image you explicitly download (the annotated photo or a geometry card), generated locally by your browser.

Camera use on the mirror pages

The True Mirror and Mirror Online tools request camera access through your browser's standard permission prompt. The video stream is displayed locally and is never recorded, transmitted or stored. Stopping the camera, switching away or closing the page releases the stream immediately — you can confirm this by watching your device's camera indicator light go out. Downloads from these pages are single frames rendered in memory and saved only when you click the download button.

What the measurements are used for

Nothing, beyond the screen you are looking at. Measurements are not sent anywhere, not aggregated, not compared across visitors and not used to build any dataset. There is no "we may use anonymized results to improve our models" clause in this policy because that pipeline does not exist. The geometry numbers you see exist for exactly as long as the page does.

The model file and third-party requests

To run face landmark detection without a server, your browser downloads a self-hosted model and WebAssembly runtime from this domain on first use. After that first load, analyses work offline. The only other network requests this site makes are ordinary page assets: fonts, styles, scripts and images served from our own domain. We do not send your photos, landmarks, measurements or any derived data to any third party, because no such request exists in the code.

Cookies and local storage

FaceReport sets no tracking cookies. The site may store a technical preference (such as your dark/light theme choice) in your browser's local storage; this never leaves your device and contains nothing identifying. We do not use Google Analytics or equivalent cross-site trackers.

Your data rights

Because we never receive your data, there is nothing for us to export, correct or delete — you hold all of it, and clearing your browser tab or history removes every trace. If you have questions about this policy or the site, the terms of service page explains the permitted use of the tools in detail.

Data minimization by design

Every technical decision on this site was made under a data-minimization rule: if a feature does not need a piece of data, the feature is built so it cannot collect it. That is why there is no user table, no upload service, no session tracking and no measurement history. The tools hold your photo in a JavaScript variable for as long as the analysis takes — typically a few hundred milliseconds — and the only persistent artifact is the file you choose to download.

This design also means the usual privacy paperwork shrinks: there is no data inventory to publish, no retention schedule to honor (nothing is retained), no processor list to maintain (no third party processes your data), and no breach scenario involving photos stored on our systems (none are).

Rights you keep

Because processing happens exclusively on your device under your control:

• Access and portability — you already have everything; the results are on your screen and in any file you downloaded.
• Rectification and erasure — reload the page to erase the session, or clear the downloaded files yourself; nothing exists on our side.
• Objection and withdrawal — simply close the tab; there is no ongoing processing to object to.

If you believe any part of this site behaves differently from what this policy describes, trust the network inspection of your own browser over any prose — and know that the discrepancy would be a bug we want to fix.

Children and sensitive use

The tools are intended for general audiences and are provided for entertainment and learning. They are not directed at children under 13, and we ask that minors use them only with a guardian's supervision. The tools perform no identity recognition, no demographic classification and no health or emotion inference — they measure geometric proportions of a photo and nothing more.

Please only analyze photos of yourself, or of people who have explicitly agreed to it. Uploading someone else's photo without consent disrespects them and is not what these tools are for.

Changes to this policy

If the architecture ever changes in a way that affects these promises — for example, an optional server-side feature — this page will be updated with the date of the change and the feature will be strictly opt-in. The current version was published on 23 October 2026.