Privacy Policy
Last updated: February 7, 2026
🔒 The Short Version
We don't store your photos. They're analyzed in real-time and immediately discarded. We don't sell your data. We use cookies only for basic site functionality. That's it.
1. Information We Collect
1.1 Photos You Upload
When you use Facelytics, you upload a photo for analysis. This photo is sent directly to our AI analysis provider (OpenAI) for processing. The photo is analyzed in real-time and is not stored on our servers. We do not maintain a database of uploaded images.
1.2 Analysis Results
Your analysis results (scores, categories, recommendations) are returned to your browser and stored temporarily in your browser's session storage. This data is automatically cleared when you close your browser tab. We do not store your analysis results on our servers.
1.3 Automatically Collected Information
Like most websites, we automatically collect certain technical information:
- IP Address: Used for rate limiting (to prevent abuse) and general analytics. IP addresses are not linked to analysis results.
- Browser Type and Device Info: Used to optimize the experience for your device.
- Pages Visited and Timestamps: Basic analytics to understand how the Service is used.
2. How We Use Your Information
- To provide facial analysis results when you upload a photo
- To generate personalized product recommendations
- To enforce rate limits and prevent abuse
- To improve the Service and fix technical issues
- To comply with legal obligations
3. Third-Party Services
3.1 AI Analysis Provider
We use OpenAI's API to perform facial analysis. When you upload a photo, it is sent to OpenAI for processing. OpenAI's use of data is governed by their API Data Usage Policy. As of the time of writing, OpenAI does not use API inputs or outputs to train their models.
3.2 Affiliate Links
Product recommendations may include affiliate links to third-party retailers (such as Amazon). When you click these links and make a purchase, we may earn a commission at no additional cost to you. These third-party sites have their own privacy policies that govern their collection and use of your data.
3.3 Hosting
The Service is hosted on Railway. Their infrastructure may automatically log certain request information as part of standard web server operations.
4. Data Retention
- Photos: Not retained. Processed in real-time and immediately discarded.
- Analysis Results: Stored only in your browser's session storage. Cleared when you close the tab.
- IP-based Rate Limiting: IP hashes are stored temporarily in server memory and cleared on server restarts.
- Analytics Data: Aggregated, non-personal analytics may be retained for up to 12 months.
5. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- With our AI analysis provider (OpenAI) to process your photo
- If required by law, subpoena, or legal process
- To protect the rights, property, or safety of Facelytics or others
6. Cookies
Facelytics uses minimal cookies for basic site functionality. We do not use advertising cookies or third-party tracking cookies. We may use analytics cookies in the future, at which point this policy will be updated.
7. Your Rights
Since we do not store personal data (photos or results), there is minimal data to manage. However, you have the right to:
- Request Information: Ask us what data, if any, we hold about you.
- Request Deletion: Ask us to delete any data associated with your use of the Service.
- Opt Out: Stop using the Service at any time.
For California residents: Under the CCPA, you have the right to know what personal information is collected, request its deletion, and opt out of its sale. We do not sell personal information.
8. Children's Privacy
Facelytics is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the Service, please contact us and we will take appropriate steps.
9. Security
We use industry-standard security measures including HTTPS encryption for all data in transit. Since we do not store photos or analysis results on our servers, the risk of data breach involving your facial data is minimized.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.
11. Contact Us
If you have questions or concerns about this Privacy Policy, contact us at blake@status.systems.