Privacy Policy

What the app does

Real Face Shape Detector is a free, browser-based styling tool. You can choose a JPEG, PNG, or WebP photo, or use a live camera on a supported device, to estimate visible facial proportions. The report can include a closest face-shape reading, alternative readings, measurement ratios, a capture-quality assessment, a visible skin-tone estimate, and deterministic styling suggestions.

The tool is for general informational and styling purposes. It is not a medical, dermatological, identity, age, gender, or attractiveness assessment. See the Terms & Conditions and methodology and limits for those boundaries.

Photos and camera processing

Photos you choose

The app reads the file you select through your browser’s File API. The image is decoded with createImageBitmap, scaled in a local canvas, and converted into pixel data. Those pixels are passed to a Web Worker for the bundled MediaPipe Face Landmarker model, with a main-thread fallback if a worker cannot start. The model, WebAssembly runtime, fonts, and other assets are served from this website’s own origin.

We verified in the application code that there is no image upload endpoint, no external AI API call, and no request that sends the photo or its pixel data to us or to a third-party server during analysis. The analysis is performed on your device. The app does not write the photo into localStorage, sessionStorage, or IndexedDB, and the photo is not included in a saved report or JSON export.

The preview you see before analysis is a temporary browser object URL. The photo remains in browser memory for the current session and is released when you remove it, analyze another photo, close or reload the tab, or leave the page. The session report described below contains derived measurements and landmark coordinates, not the image itself.

Local processing does not mean that nothing about your visit is visible outside your device. Your browser, operating system, extensions, network, and our hosting provider may still process ordinary technical information such as an IP address, user agent, requested URL, or security signals. Those parties are described below. The app itself does not attach your photo to that information.

Live camera

The live camera feature asks your browser and operating system for permission. If you allow access, the app displays a local camera preview and captures a frame to a canvas when you press “Capture photo”. The captured frame is then processed by the same local pipeline described above. You can deny or revoke camera permission at any time using your browser or device settings.

The app stops the camera tracks when you close the camera dialogue, navigate away, or the page is hidden. Camera access generally requires HTTPS and is not available in every browser or embedded context. If you do not want to grant camera access, the photo picker remains available.

Temporary memory and browser-local storage

The app uses browser storage, not its own account system. These are the only app-specific storage keys we found in the production code. They are stored on your device and are not synced to us.

The report data can include landmark coordinates and a visible skin-tone estimate. Treat it as potentially sensitive even though it does not contain the photo. If you enter optional quiz answers or free-text notes before saving a report, those answers and notes may be stored with it. Avoid adding information you would not want left on a shared device.

You can remove the saved report with “Delete saved report” on the results page, and you can clear the theme preference or all site data through your browser’s settings. Closing the tab clears the session report and the in-memory photo. The app itself does not create a server-side copy of these items.

Email and the contact form

The contact page does not use a form backend. When you complete the form and choose “Open email draft”, your browser builds a mailto: link and asks your default email application to open a draft addressed to [email protected]. The website does not receive or transmit the form contents, cannot create the message on a server, and cannot confirm whether an email application opened or whether a message was sent.

If you send an email, you voluntarily provide the information in it, typically your email address, display name, message, and any attachments or technical headers added by the email system. Your email provider and ours process that message to deliver, store, and respond to it. Do not send a face photo or other sensitive information unless you are comfortable doing so; a description of the issue is usually enough.

We use email correspondence to respond to you and to maintain reasonable business records. Retention depends on the issue and legal obligations, and messages may remain in email archives until deleted. You can ask us to delete correspondence by contacting the same address, subject to any records we are required to keep.

Cookies, hosting, and third-party providers

As of the date above, the application code does not set its own cookies, run analytics, use advertising pixels, perform session recording, or load third-party tracking scripts. It does use the browser storage described above, which is not a cookie.

The site is a static website delivered through Cloudflare Pages, a hosting and content-delivery service. Like any hosting or security service, that provider may process standard request information, including IP address, user agent, requested path, timestamps, and security signals, in order to deliver files, prevent abuse, and maintain service reliability. It may also set strictly necessary security or load-balancing cookies depending on its configuration. Those activities are controlled by the provider and its own terms and privacy policy, not by the detector.

Links to other websites are governed by those websites’ policies. We do not control their cookies, analytics, or content. The app does not currently embed third-party media, fonts, or model APIs at runtime; the font and model assets are served from this site.

Advertising and future data collection

This site does not currently display Google AdSense or other advertising. The following describes what would need to change if advertising is introduced. It is not a claim that advertising is active today.

If we add Google AdSense or another advertising service, the provider may use cookies, local storage, web beacons, IP address, device and browser information, approximate location derived from IP, and information about pages viewed to deliver, measure, and protect ads. Google and its partners may use advertising cookies to serve personalized ads based on your visits to this and other websites, subject to your choices and applicable law. Advertising providers may also process data for frequency capping, fraud prevention, and aggregate reporting.

Where required, such as in the European Economic Area, the United Kingdom, and Switzerland, we would use an appropriate consent mechanism, including a Google-certified consent management platform where Google requires one, before setting non-essential advertising cookies or using personal data for personalized advertising. Consent would need to be freely given, informed, and as easy to refuse as to accept, and you would be able to change or withdraw it later.

Depending on where you live, you may also be able to:

• manage personalized advertising through Google Ads Settings and Google’s ad-personalization controls;
• use industry opt-out tools for participating advertising companies;
• block or delete cookies and site data in your browser;
• exercise applicable rights to access, delete, correct, or object to processing, or to opt out of sale or sharing for cross-context behavioral advertising;
• use a legally recognized opt-out preference signal where required.

Blocking cookies or advertising scripts may affect how ads are displayed but should not prevent you from using the detector. If advertising is added, we will update this policy, identify the providers and categories of data involved, and implement any consent or opt-out mechanism required for the regions we serve before the advertising goes live. We will not add fake consent controls or advertise a compliance status we have not verified.

Data security and its limits

Local processing is a deliberate privacy measure: the photo is not transmitted to us, so there is no server-side photo store to breach. Browser storage and email still carry risk. Device malware, shared devices, browser extensions with broad permissions, insecure email, and provider incidents can expose data. Email is not necessarily end-to-end encrypted.

We use reasonable measures appropriate to a small static website, but we cannot guarantee absolute security, availability, or confidentiality. Do not use the tool on a device you do not trust, and do not send sensitive information by email unless you accept those risks.

How long information is kept

• Photo: held in browser memory during the session and released as described above. Not stored by the app.
• Session report: until the tab is closed, or until you start a new photo or delete it.
• Saved report and theme: until you delete them, clear site data, or your browser removes them.
• Email: for as long as needed to handle the request and maintain reasonable records, then deleted or archived according to operational and legal needs.
• Hosting logs: controlled by the hosting provider’s retention settings.
• Advertising data (if introduced): controlled by the relevant provider and your consent choices, as disclosed at that time.

Your privacy rights

Privacy laws differ by location, and this policy does not claim that a particular law applies to you or that the site is certified under a particular framework. Where a law gives you rights, you may have some or all of the following:

• the right to know whether we hold personal information about you and to request access to it;
• the right to request correction of inaccurate information;
• the right to request deletion of information, subject to legal exceptions;
• the right to restrict or object to certain processing;
• the right to data portability where applicable;
• the right to withdraw consent where processing is based on consent;
• the right not to be discriminated against for exercising a privacy right;
• the right to complain to your local data-protection authority.

Because the detector does not require an account and does not receive your photo, we may have little or no information that identifies you. Browser storage stays on your device and is best deleted through your browser. For email correspondence or a privacy request, contact [email protected]. We may ask for enough information to understand and verify the request, and we will respond within the time required by applicable law.

We do not currently sell personal information or share it for cross-context behavioral advertising. If that changes with advertising, this policy and the available choices will be updated before the change takes effect.

Children

The site is a general-audience styling tool, not a child-directed service. It does not require an account and does not knowingly collect personal information from children through the detector. A parent or guardian should supervise a minor’s use of a photo or camera. If you believe a child has sent personal information by email, contact us and we will take appropriate steps to delete it.

International processing

This website and its hosting provider may be accessed from many countries. A hosting provider or email provider may process information in a country other than yours under its own terms and applicable law. The detector’s local photo analysis does not transfer the photo to us.

Changes to this policy

We may update this policy when the app, hosting, email handling, or legal requirements change. The “Last updated” date at the top shows the current version. If a change materially affects how personal information is handled, we will provide a clear notice on the site before or when the change takes effect. Continued use after an update means you should review the revised policy.

Contact

Questions about this policy, the detector’s data handling, or a privacy request can be sent to [email protected]. You can also use the contact page, which opens a draft in your own email application.

This policy describes current practices in plain language. It is not legal advice and does not by itself establish compliance with any particular privacy law.