Privacy Policy

Plain-English summary

We collect the minimum: an email if you ask for it, an order record if you buy, and anonymous usage events. That's it. Face Rate is built so that the free tools need almost no data at all. Your photo is processed on your device: for the free scan we do not receive it, store it, sell it, or use it to train AI. The two narrow exceptions both require a separate, explicit action from you — the prepaid AI tools, and the styling concepts included in a paid report — and both are described in full below.

Your photo

For the free scan your photo is processed on your device and is never uploaded, stored, sold, or used to train AI. The optional AI styling concepts included in a paid report are the only exception, and need a separate, explicit consent on the report page. Only numeric scores are kept for 2 hours, then deleted. Re-drawing into a canvas strips EXIF metadata including GPS. A report contains numbers, your questionnaire answers and written chapters — no photo and no thumbnail of the photograph you scanned. There is no setting that adds your original to the report, and no admin screen that displays one: the report is built from the numbers your browser posted, so the original image does not exist on our side to look at.

Styling concepts included in a paid report

Each paid report includes one (Face Report) or three (Dating Report) AI styling concepts rendered on your own photo. They are optional. On the delivered report you must tick a separate, explicit consent box before anything is sent; nothing is uploaded by default, and the free scan is unaffected. The source photo is sent once to the image provider (Google Gemini), held only for that request and never written to storage. It is never used to train a model, never sold, and never shown on any admin screen. Only the GENERATED concepts are stored: they are labelled AI-generated, kept with the report for up to 12 months, erased with a data deletion request, and deletable at any time. Included concepts cost no credits and no photo is kept with the report object itself.

Reference-band percentiles

"Where you sit" is answered with a reference band first: pure arithmetic on published ranges, which works with no data about anyone. When at least 50 scans exist, a second column shows the real distribution of anonymous scans measured on this site, with its sample size and self-selection bias stated. What we store is integer counters per score bucket and per dimension bucket — no scan ID, no email, no image and no per-person row. Buckets under five are hidden, and nothing is broken down before the sample floor is reached. Deleting your photo after two hours never deletes a counter, and a counter can never be turned back into a photograph.

Photos in the prepaid AI tools

The credit tools are the one place a photo is uploaded: after you press Generate (or Analyse), and only then, the photo is sent once to the AI provider (Google Gemini), used for that single run, and the copy on our side is deleted within 2 hours — the same TTL the free scans keep their numbers. Generated images and full analysis results are also deleted after 2 hours; download or save anything you want to keep. The photo is never used to train any model, never sold, and never shown to any admin screen. A fr_credit cookie (below) ties the browser that bought credits to the balance, so a run works without a separate sign-in; deleting your data removes the balance and the ledger with it.

The free progress board

Decision checks (Photo Audit, Photo Duel, Progress Check, Bio & Opener Studio) write one small summary each to your Dating Profile & Progress board: three bounded numbers, a date, the tool used and a one-line headline. That row contains no image, no thumbnail, no written bio and no full analysis text, which is why it can outlive the 2-hour photo TTL. A signed-out browser keeps its copy locally; signing in ties the summaries to your account so the curve follows you across devices. Viewing the board is free, never spends a credit and needs no account. Clearing the device history or deleting your data removes it, and a data export includes every row.

Skin tone: measured, never labelled

The free scan measures how light your skin is, using ITA° — the angle dermatology uses for skin lightness — computed from your own pixels on your own device. It shows you which of six bands you fall in. The band, the angle it came from and a three-way warm/neutral/cool hue axis are the only attributes we keep. They are stored as short codes next to the numeric scores and are deleted with them after two hours.

There is no ethnicity field. We do not infer one, we do not accept one from the browser, and there is no code path in which one could be written — the endpoint only accepts six fixed tone codes, three fixed hue codes and bounded numbers. Tone is a property of the pixels in your photo: room light shifts it by a whole band, which is why we refuse to report it at all when the colour cast is too strong to trust.

After the two hours, one thing survives: a running count of how many scans landed in each band, such as tan: 41. That counter has nothing attached to it — no scan ID, no email, no date per person, no way back to an individual — so it is a statistic about the site rather than information about you, and deleting your data does not change it. The dashboard will not break the numbers down at all until 20 scans exist, and it hides any bucket under 5 people, because a distribution of three people is a description of three people.

If you choose to tell us who the read is for — a man, a woman, another answer, or prefer not to say — we store that choice, because it is yours to give. It is a single selected option, never an inference from your face.

Payments

Payments are handled by Stripe Checkout. We never see or store your card number. There are two products — a $12.90 Face Report and a $17.90 Dating Report — each a single payment. There is no subscription and no automatic renewal.

Cookies

One first-party cookie counts unique visits. Analytics are optional and off until you accept. Reject and Accept are equally prominent and equally one step. See the Cookie Policy.

Your rights (GDPR / CCPA)

• Access / export: export your data — we respond within 30 days.
• Delete: Delete my data — completed synchronously, with a hashed receipt kept as proof. An anonymised order record is retained for 7 years where tax law requires it; it contains no email, name or photo.
• Do Not Sell or Share: see the dedicated section below.
• Unsubscribe: one click, no login required, from any email we send.

Do Not Sell or Share (CCPA)

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use advertising pixels or data brokers. If that ever changes, we will update this page and notify confirmed subscribers before the change takes effect. You can still delete your data in one step at any time.

Subprocessors and international transfers

Stripe (payments), Resend (transactional email), Cloudflare (hosting, CDN and private object storage), and — only if you accept analytics — Google Analytics 4 (aggregate traffic measurement). Each only receives what it needs. Transfers of personal data out of the EEA/UK rely on the European Commission's Standard Contractual Clauses (SCCs) and the UK Addendum, together with each processor's data-processing addendum. We will give confirmed subscribers advance notice before adding or replacing a subprocessor. We do not use advertising pixels or sell data to data brokers.

What Google Analytics receives, and when

Nothing, until you click Accept analytics. The tag is not injected into the page before that choice — this is not a "load it and deny consent" arrangement, and no request reaches Google on a first visit. If you accept, Google receives the page path, a pseudonymous client identifier, your approximate location derived from IP, your device and browser type, and the events listed in the cookie policy. We configure it with IP anonymisation on, Google Signals off, ad personalisation off and advertising storage denied, so it cannot be used to build an advertising profile. Withdrawing consent removes the tag and clears the granted state. Our own first-party counters are separate from this and never leave our infrastructure.

If you would rather not be measured by Google at all, click Reject — every feature of the site, including the free scan and checkout, works identically.

Security incident response

We log access to the admin dashboard, monitor webhook and delivery failure rates, and review the daily cleanup log. If a personal-data breach occurs, we assess it within 24 hours, notify affected users and the relevant supervisory authority within 72 hours of becoming aware where required, and publish a short postmortem. A complaint to privacy@facerate.co stops all marketing email immediately.

Contact and age

Email privacy@facerate.co. Face Rate is for adults 18+. For adults 18+. Lost your report? Enter your email and we will resend the links. Face Rate · Score — dating standards, not a verdict. Entertainment & self-insight only.