Photo privacy and your data controls.

The free scan belongs on your device. The report belongs to you.

During your free scan

Your uploaded photo is decoded and measured in a browser worker. It is never sent to a face-analysis API, an image-generation provider or an analytics service. FaceRater downloads a model to your browser; the model does not upload your photograph.

When you sign in

Email sign-in stores your email address, verified status and a revocable session. Sign-in codes are stored as keyed hashes and expire after five minutes. Session records can include login time, browser and IP address for account security.

If you choose Google when it is available, FaceRater receives basic profile information: your name, email, Google identifier and profile-image URL. Provider tokens are encrypted at rest. This information signs you in and keeps your reports associated with your account. Signing in alone does not upload a scan or create a cloud report.

When you keep a report on this device

Saving a report, continuing to checkout from a device result, or unlocking the device preview keeps your prepared photograph, measurements and plan progress in this browser. You can remove the copy from “My reports → On this device”. This is device storage, not cloud backup. It will not be available in another browser or on another device, and clearing browser data removes it. An account purchase does not automatically download a cloud report to this device.

Operational event counts

FaceRater records counts of page views, scan completion, checkout, confirmed payment and delivery in its own Cloudflare logs. These events contain a general page category and action, without a photo, measurement, email, report identifier or URL query. Production page views and selected actions are also counted by our self-hosted Plausible Analytics service at app.pageview.app, without cookies or advertising identifiers. Private report URLs, photos, scores, emails and URL query strings are excluded. Referrers are reduced to their origin. No session replay is used. Login and storage records described separately are needed to operate your account.

When you share

The share card hides your photograph by default. Including your photo is a separate choice. Downloading a card does not publish a report link.

When you choose a cloud copy

Cloud storage is optional and requires a signed-in account and a separate choice for each report. It stores your prepared portrait, face measurements and plan progress with FaceRater, using private Cloudflare R2 storage and an independent Neon database. Your report and photograph are available only to your account. Signing in alone does not upload a photograph.

Remove a cloud copy from “My reports → In my account”. It becomes inaccessible immediately, and its stored photo and measurements are removed by a background task. The data-removal status shows “Complete” once that task has finished. A device copy is separate and must be removed on this device. Orders can retain their non-photo purchase record after a report is removed.

When you close your account

Close your account from “Your workspace → Your account data”. This requires a recent sign-in and confirmation of your account email. All sessions are revoked, new uploads stop, and a background task removes private cloud portraits, reports and account details. A private receipt on this device shows pending or complete status for seven days. Limited transaction records can remain without your FaceRater account or report link. Copies on devices and downloaded files need separate removal; the confirmation offers to clear this device’s account reports while keeping guest reports.

AI styling

AI hairstyle editing uses GPT Image 2.5 through Runware. When you choose to generate a style, your prepared portrait and hairstyle request are sent to that service. Results are stored in your FaceRater account. The provider’s own retention rules apply; we do not claim zero data retention. See Runware’s privacy policy at runware.ai/privacy. You can remove your generated images from the Styles chapter.

Your data controls

Age and scope

FaceRater is designed for adults aged 18 and older. Measurements describe photograph geometry. They do not assess health, personality, employment suitability or personal value.