Privacy Policy

Face Rating (face-rating.org) looks at a photo of a face and writes a report about it: a rating, symmetry, golden-ratio proportions, face and eye shape, an apparent age and, on one page, celebrity look-alikes. A face is personal, so this page explains exactly where your photo goes, what is kept and what is not. "We" and "us" mean the team behind face-rating.org.

The short version

• The face measurements are made by a program running inside your own browser.
• To write the score and notes, the photo is sent once, inside a single request, to an AI vision model. We do not save it anywhere: not on a disk, not in a database, not in our logs.
• We never sell or publish your photo, we share it only with the AI provider that writes your report, and we never use it to train models.
• To limit free reports fairly, we keep a scrambled (hashed) form of your IP address and a device identifier, never the raw IP address.
• If you use up the day's free reports and choose to leave an email address, we keep it to give you more reports that day and to contact you about the site.

• There is no account to create. We only learn your email address if you choose to leave it.

Your photo, step by step

1. When you pick a photo, your browser shrinks it (at most 1024 pixels on the long side) and converts it to JPEG. This happens on your device.
2. Still on your device, the open-source MediaPipe Face Landmarker finds 478 points on the face, and our code turns them into the measurements you see (symmetry, ratios, face shape, eye shape).
3. Your browser then sends the shrunk photo and those measurements to our server in one request. The server passes both straight to the AI model, waits for the written report, sends the report back to you and forgets the photo. Nothing in that request is written to storage.
4. The report lives only in your browser tab. Reloading or closing the tab removes it.

What the site records by itself

• Free-report allowance. A salted hash of your IP address, a salted hash of an identifier your browser computes from its own settings, and how many reports each has used per day. The browser identifier is also kept in your browser's local storage.
• Request logs. Like any website, our host handles your IP address, browser type and the pages you request, to deliver the site and to stop attacks. These logs never contain your photo.
• Errors. If the AI model fails, we log a short technical message (an error code, never the photo or the report) so we can fix it.

• Visit statistics. We count visits with Plausible Analytics, which sets no cookies and stores nothing that identifies you. We only see totals such as page views, countries and referring sites.

Your email address, if you leave it. When the day's free reports run out, you can leave an email address to get more that day. We store it with the page you were on, the date and the same hashed IP and device identifiers, so the extra reports apply to you. We use it only to contact you about this site (for example a new feature or a change to the free allowance), never sell it, and delete it whenever you ask.

Emails. If you write to us, we keep the conversation so we can answer.

Cookies and local storage

We set no cookies for visitors. Your browser's local storage holds the device identifier above and your light or dark theme choice; clearing the site's data removes both.

Who else handles your data

A few outside services help run the site. Each gets only what its job needs:

• Cloudflare — hosts the site and passes your request through; like any web host it sees your IP address when you connect.
• KIE (kie.ai) and Google Gemini — receive your photo and the measurements inside one request, run the vision model that writes your report, and send the answer back; we do not ask them to keep it.
• jsDelivr — serves the open-source face landmark program (MediaPipe) your browser downloads to measure the face on your device.

• Plausible Analytics — counts visits without cookies and without identifying you.

We hand over information only when the law requires it or when it is needed to stop fraud or protect someone's safety. We don't sell personal information or share it for advertising.

How long anything is kept

• Your photo: not kept by us. It exists on our server only for the seconds it takes the AI model to answer. The AI provider handles it under its own terms; we do not ask it to keep the photo.
• Your report: not kept by us; it is shown in your browser and gone when you leave the page. Save a screenshot if you want it.
• Free-report allowance records: daily counters, kept for as long as we offer free reports; they hold no raw IP address.
• Email addresses you leave: until you ask us to delete them.

Your rights

Email us and we will tell you what we hold about you, give you a copy, correct it or delete it. Since we don't keep photos or reports, there will usually be nothing but the hashed allowance records and, if you left one, your email address. We reply within 30 days. Depending on where you live (for example the EU, the UK or California), you may have further rights, including complaining to your data protection authority.

Children

Face Rating is for people aged 18 and over. Please don't upload photos of anyone younger; the AI is told to refuse photos of young children.

Security

Every connection uses HTTPS. The analysis endpoint accepts only JPEG, PNG or WebP images below a size limit, and only measurements in a fixed format.

Where data is processed

Our host and the AI provider run servers in several countries, so the request carrying your photo may be processed outside the country you live in.

Changes

When this policy changes, the date at the top changes too. If a change affects what happens to your photo, we will say so on the site before it applies.

Contact

Questions or data requests: support@face-rating.org