Privacy
Your photos
- What you upload. One selfie per fitting. Before upload, your browser straightens it, shrinks it to at most 2048 pixels on the long edge and removes camera metadata such as location (EXIF/GPS).
- What your browser sends with it. A rectangle around your face (four numbers), whether you wear glasses, whether your skin is deep enough for our extra skin-tone instructions, and a coarse outline of where you are in the frame. We use these only to edit your hair and to check that your skin tone did not change.
- How long we keep it.
- Your original photo is deleted 7 days after upload.
- Your results are deleted 30 days after the fitting.
- You can delete a fitting at any time from your lookbook: the results and the original photo are deleted immediately. We keep a record that the fitting happened (date, looks chosen, credits) for billing.
- Who processes it. The image is sent to our image-generation provider (Replicate) to create the looks, and stored in private cloud storage (Cloudflare R2).
- What your browser loads. The fonts and the photo-check models are served from our own domain; pages make no requests to Google Fonts or another font or model CDN. Signing up by email loads Cloudflare Turnstile, a check that helps stop automated abuse, from Cloudflare. Pages also load Cloudflare Web Analytics from static.cloudflareinsights.com to count visits and measure page speed. It sets no cookies and works from aggregated visit data, such as pages viewed, referrer and browser type. It never receives your photos. They also send anonymous usage events to Umami, such as a started fitting or a download, so we can see which steps work. Umami sets no cookies and reports aggregated counts. We do not send it your email, your photos or your fitting ids. Pages also load Google Analytics, which counts visits and pages viewed, and Microsoft Clarity, which records how pages are used, such as clicks and scrolling. Both set cookies and receive your IP address and browser details. We keep them off sign-in, account and admin pages, and we hide your photos, your results and your email from Clarity's recordings. We also do not load them when we detect that you are visiting from the European Economic Area, the United Kingdom or Switzerland, or when we cannot tell where you are visiting from. We work this out from your IP address, so it can be wrong, for example if you use a VPN.
- Abuse prevention. Cloudflare Turnstile processes your IP address and browser signals to run its check.
- What we never do. We never use your photos to train or fine-tune AI models, never show them publicly, and never sell them.
Photos and biometric data
Before you can choose a photo, we ask you to agree to how it is handled. We record that you agreed, when, and which version of the wording you saw.
- On your device. Your browser runs a face detector to check your photo. It finds your face and the position of features such as your eyes, nose and ears, to judge the angle and whether you wear glasses. Those points stay in your browser. They are never sent to us.
- What we store. The face rectangle and coarse outline described above. We delete them when your photo is deleted, or when you delete the fitting or your account.
- What we do not do. We do not build or store a face template, and we do not use any of this to identify you or to recognise you across photos.
- Who else sees it. Our AI provider, Replicate, receives your photo to create the looks. By default, Replicate removes API inputs and outputs, including the images it generates, after about one hour. We copy the results to our own storage before then.
- How long. See the retention periods above. You can delete a fitting at any time, and you can delete your account from Settings.
Skin-tone checks
Every result is compared with your original photo before you see it. If the skin on your face came out lighter, darker or warmer than our limit, we correct the exposure or remake that photo. If it still fails, we discard it. We keep only the check numbers (pass or fail and three colour differences), not extra copies of the images.
Your choices
- Delete any fitting from your lookbook.
- Delete your account from Settings. This deletes your credit history at once, and your photos and results from our storage within about an hour.