Privacy Policy

Your photo is never uploaded

When you choose a photo, your browser decodes it into the memory of the tab you are looking at. A face-landmark model then runs on your own device and measures the image there. The measurements, the score and the report are all computed on your device.

No part of the photo reaches our servers or anyone else. This is not a promise we could quietly break. It is how the tool is built: the face model is a file that runs inside your browser, and the page makes no request that carries image data.

When the analysis finishes, the browser releases the image from memory. We keep no copy, because we never receive one.

We never collect biometric data

While it measures your photo, the face model produces a set of geometric points. Those points exist only in the memory of your browser tab, and only for as long as the analysis runs. They are never transmitted, never written to disk and never stored.

We do not collect, capture, receive, store, sell, lease, trade or otherwise profit from biometric identifiers or biometric information. We hold no face template and no face geometry record. There is nothing about your face for us to disclose, retain or destroy.

What we do collect: anonymous usage counts

We use PostHog to count how many people reach each step of the tool. We configure it to store nothing on your device: no cookies, no browser storage, no session recording and no automatic click tracking. Because nothing is stored, we cannot recognise you on a later visit, or on any other site.

Each visit receives a random identifier that exists only while the tab is open. It is not derived from your face, and it is not linked to you.

These are all the events we record, and everything each one carries:

• photo_selected — you chose a photo. No other information.
• face_detected — the tool found a usable face. No other information.
• detection_failed — the photo could not be used. No reason, image detail or measurement is sent.
• score_computed — the on-device calculation finished. The score itself and all measurements stay on your device.
• upgrade_clicked, checkout_started, checkout_failed, checkout_cancelled, purchase_completed and report_unlocked — the six steps and outcomes of a purchase. No other information.
• restore_link_copied — you copied the private restore link after purchase. The link and access token are not sent.
• paid_report_viewed — the full report opened on your device. The score and measurements are not sent.

What reaches our analytics provider automatically

Like any web request, these events arrive at PostHog with your IP address, the address of the page you are on, and the browser and operating system your device reports. PostHog uses the IP address to derive an approximate country. We do not use it for anything else.

We never combine any of this with information about your face, because we hold none.

What is stored on your device

If you buy the report, your browser saves two small values in its local storage: an access token that proves the purchase, and the payment reference that token came from. That is everything.

Neither value contains your name, your email address, your photo or any measurement. Both stay on your device. They are what lets your report open again when you return.

You can remove them at any time by clearing site data for this site in your browser settings. Doing so removes your access to the report on that device. The Terms explain how to restore it.

Payments

Stripe handles payment completely. You enter your card details on a page that Stripe hosts, not one that we host. We never see or store your card number.

Stripe collects what it needs to take the payment and send you a receipt, which includes your email address and billing details. Stripe handles that information as its own controller, under its own privacy policy.

The only thing our server receives is the payment reference that Stripe generates. It uses that reference once, to confirm the payment and issue your access token. Our server keeps no database and stores nothing.

Hosting

Cloudflare serves this site. Like any web host, Cloudflare processes the technical details of each request, including the IP address and the browser type, in order to deliver the page and to protect the site from abuse.

What we do not do

For the avoidance of doubt:

• No accounts. There is nothing to sign up for.
• No advertising, and no ad networks.
• No selling or sharing of personal information.
• No email marketing. We never collect your email address. Stripe collects it only to send your receipt.
• No cross-site tracking, and no third-party tracking pixels.

Children

This site is not intended for children under 13, and we do not knowingly collect information from them. If you are under 18, you must have the card holder’s permission before you buy anything.

Your rights

Depending on where you live, you may have the right to see, correct, export or delete the personal information a business holds about you, and to object to how it is used.

Our honest position is that we hold almost nothing to act on. We have no account for you, no photo, no measurements and no email address. The usage counts described above are not linked to a person, and we could not connect them to you even if you asked us to.

For anything Stripe holds as part of your payment, you can contact Stripe directly, or write to us at support@omogleai.com and we will help.

Where information is processed

Our hosting provider, our analytics provider and our payment provider run servers in several countries, including the United States. The limited information described on this page may be processed there.

Changes to this policy

If we change how the tool handles data, we will change this page and update the date at the top.

If we ever made a change that weakened the promise in the first section, we would say so plainly at the top of this page rather than bury it further down.

Contact

Write to support@omogleai.com.