Privacy Policy

• You choose a clear, front-facing photo. The browser opens it and keeps it on your device.
• A facial landmark model runs inside your browser as WebAssembly. The model and application files may be downloaded; the chosen photo travels nowhere.
• The model produces 478 landmark coordinates. Your browser uses them to measure proportions, symmetry and angles, and calculate a composite score from four dimensions.
• When the scan finishes, the result remains in this tab’s sessionStorage so it survives a refresh or a visit to another page. A small photo preview and the landmarks may also be retained there for local measurement diagrams. If storage space is unavailable, the numeric result is kept where possible without the preview. Clear the result or close the tab to remove this local session data.

During the scan itself, the photo, landmarks, ratios and score do not reach FaceGrader servers.

If you choose Create and copy share link, the URL contains the total score, four dimension scores and engine version. It contains no photo, landmark coordinates or raw ratios. Opening the link sends that URL to FaceGrader so a public score card and preview image can be shown. Anyone with the URL can read or change its values; FaceGrader cannot verify the original photo from the link.

The URL can appear in browser history, messages where you paste it, and ordinary website request logs. We do not create a separate result database entry for the shared card. Do not create or send a link if you do not want these score values disclosed.

FaceGrader does not receive a photo or face landmarks from the free scan. Ordinary hosting infrastructure may process basic request information needed to deliver and protect a website, such as the requested address, browser type, and time of a request. A requested share URL includes the numeric score values described above.

We use Google Analytics 4 to count visits and to see which pages lead to a completed scan. It is configured for measurement only: advertising features, ad personalization signals and Google Signals are switched off, and we run no advertising or cross-site tracking with it.

Google Analytics sets first-party cookies named _ga and _ga_<stream id>. Google sets a two-year default expiry for both, though browsers cap how long a first-party cookie survives without a return visit. They contain a random identifier, not your name or your photo, and they exist to tell one browser from another so a returning visit and a completed scan can be counted. The addresses we send are redacted first: a shared score link is reported only as /s/[shared], so the score values in that link do not reach Google. Scan events carry no score and no measurement — one event says a scan finished, another says it was refused and names the refusal reason only. User and event-level data in Google Analytics is set to be deleted after 14 months; aggregated report totals are not affected by that setting. Google states that it does not log or store IP addresses when collecting Analytics data.

Analytics is enabled by default. Use Analytics preferences on this page to disable it or enable it again. Your choice is saved in this browser’s localStorage. Disabling prevents future analytics events and removes accessible _ga cookies for this site; it does not erase events already received by Google. You can also block cookies in browser settings or with a content blocker. The scan does not depend on analytics and continues to work when it is disabled. We do not sell personal information.

Illinois — Biometric Information Privacy Act (BIPA). BIPA treats a scan of face geometry as a biometric identifier whether or not it is used to identify anyone. During the free scan, the geometry remains on your device and is not collected by FaceGrader servers.

Washington — My Health My Data Act. Measurements of a person’s body can fall within the Act’s broad definition of consumer health data. FaceGrader does not collect or sell such data from the free scan.

EU and UK — GDPR Article 9. Article 9 covers biometric data processed for uniquely identifying a natural person. FaceGrader measures proportions, does not recognise or match anyone, and holds no matching database.

Use Clear result on the result page, close the tab, or clear browser site data to remove the retained local result, preview and landmarks. Some browsers can restore a tab session when you restore a closed tab, so Clear result is the direct way to discard it. If you made a share link, stop distributing it when you no longer want others to see it; a copy already sent to someone else cannot be recalled from their device.

For questions about this policy or information we actually hold, contact [email protected].

The free tool does not require a sign-in or transmit a chosen photo. Young people should use it with the guidance of a parent or guardian and should not choose another person’s photo without permission.

If the way the free scan handles information changes, this page will be updated and the effective date above will change.