Privacy

Your photo is processed entirely in your browser. It is never uploaded, never stored, and never seen by us. We could not look at your photo if we wanted to — there is nowhere for it to go.

Why this is more than a promise

Most sites that say this are asking you to trust them. Here it is enforced by how the site is built, and you can check every part of it yourself.

• There is no server to upload to. The site is a set of static files. It has no upload endpoint, no database, and no server-side code that runs on your photo.
• The browser is instructed to block it. Every page is served with a Content Security Policy whose connect-src rule permits network requests to only two addresses: cdn.jsdelivr.net and storage.googleapis.com. Those serve the face-detection software and nothing else. If this site ever tried to send your photo anywhere, your browser would refuse the request.
• You can verify it in about thirty seconds. Open your browser’s developer tools, switch to the Network tab, and crop a photo. You will see the page itself load, and you will see the face-detection files download the first time. You will not see your photo leave.

What happens to your photo

When you choose a photo, the browser decodes it into memory on your device. Cropping, the automated checks and the print sheet all run there. When you download the result, the file is written directly from your browser’s memory to your device.

Closing or reloading the tab discards everything. Nothing about your photo is kept between visits.

Facial measurements

The automated checks work by measuring your face, and you should know exactly what that means. When you run the checks, software running on your device calculates:

• the position of 478 points on your face — a map of your facial geometry;
• scores for expressions, such as how open your eyes and mouth are and whether you are smiling;
• the angle your head is turned and tilted;
• an outline separating you from the background, used for the background checks and, where it is offered, background replacement.

These measurements are what let the tool say your head is 63% of the frame or that you appear to be smiling. They are calculated on your device, held in the page’s memory only while you are using it, and used for nothing else. They are never transmitted, never stored, and never associated with you. Closing or reloading the tab discards them along with the photo. Nothing is kept between visits, and no record of your face exists anywhere after you leave.

This matters enough to spell out because a map of face geometry is treated as biometric information under some laws, including in Illinois, Texas and Washington. Those laws are principally concerned with organisations that collect, receive or retain such data. This site does none of those things: the calculation happens on your device and the result never reaches us.

What is downloaded to your device

The automated checks use Google’s MediaPipe face and segmentation models. The first time you run a check, your browser downloads that software from cdn.jsdelivr.net and storage.googleapis.com. That is a one-way download: the software comes to you, and your photo stays where it is. Those services will see your IP address and browser details, as they would for any file you download from the internet.

What is stored in your browser

One thing: the country you last selected, so you do not have to pick it again. It is stored in your browser’s local storage on your device and is never sent anywhere. Clearing your browser data removes it.

If you are shown a cookie choice, your answer is stored the same way.

Cookies and tracking

This site sets no cookies. It does not track you across sites, does not build a profile of you, and shares nothing with third parties. The only thing it remembers is the country you last selected, stored on your own device as described above.

Analytics

No analytics that identify you are used, and no analytics product has access to your photo.

Your rights

Because we hold no personal data about you, there is nothing to request, correct or delete. If you have a question about this, the address on the about page reaches a person.

Last updated 2026-08-27.