Privacy & Biometric Data Policy
Effective October 20, 2026
This policy explains what Vban LLC, which operates TheFaceRating (“we”, “us”), collects when you use thefacerating.com, why, who processes it for us, how long we keep it and how to have it deleted. It also serves as our publicly available retention schedule and destruction policy for biometric information.
Summary
- The free face scan runs entirely in your browser. Your photo is not uploaded for it.
- Your photo is uploaded only if you tick a consent box that is unticked by default, or when you use a paid report or the Try-On Studio.
- Uploaded selfies are deleted within 2 hours. Free results are deleted after 48 hours.
- We never sell your photos, facial geometry or personal data, never use them for advertising and never use them to train AI models.
1. Information we process
Photos (only when needed)
A compressed copy of your selfie (at most 1280 pixels on the long edge) is uploaded only when you: (a) tick the consent box for the free AI color analysis, (b) generate a paid report, or (c) use the Try-On Studio. Reference images you upload in the Studio are processed to render the look and are not stored.
Facial geometry
The free scan uses Google's MediaPipe Face Landmarker, running on your device, to place 478 landmarks on your photo. The landmarks and the photo stay in your browser's temporary session storage (cleared when you close the tab). We receive only derived measurements, such as your symmetry score, facial ratios and face shape, so that your results page works. We consider these measurements biometric information and handle them under this policy.
Results and generated images
Your scan results, AI color season, styling text and the try-on images we generate for you, plus Studio compatibility ratings and renders.
Account and purchase information
Your email address (for purchases, sign-in links and the “report ready” email), your purchased plan, Studio credit balance and order references. Card details are entered on Stripe's checkout page and never reach our servers.
Technical and usage information
A salted, one-way hash of your IP address (used to limit free AI analyses to 2 per day and as consent evidence), your browser type, the cookies listed below and aggregated analytics.
2. How we use it
- To compute your facial measurements, face shape and bone-structure match.
- With your consent, to determine your 12-season color palette and render styling previews on your photo.
- To generate and deliver paid reports and Studio renders, and to manage credits.
- To send sign-in links and the email telling you your report is ready.
- To prevent abuse, keep the service secure and understand which pages and campaigns work (aggregated analytics).
Facial measurements are not used to identify you, to verify identity or to recognize you across photos or services, and are never combined with data from other sources to do so.
3. Consent
Before any photo leaves your device for the free AI analysis, we ask for your explicit consent with a checkbox that is not pre-ticked. We record the time, the exact consent text, a hashed IP address and your browser type as evidence of that consent. Consent records contain no photo or facial data. You can withdraw consent at any time by emailing us; it does not affect processing already carried out.
4. AI and service providers
We share data only with providers that process it on our behalf to run the service, under their data-processing terms:
- Google Gemini: analyzes your photo for the color season and Studio compatibility rating, and edits your photo to render virtual try-ons.
- OpenAI GPT: writes your styling guide and 30-day plan. It receives only text (your measurements, face shape, color season and the names of recommended looks), never your photo.
- Cloudflare: hosting, database and private file storage.
- Stripe: payment processing.
- Resend: sending sign-in and report emails.
- Google Analytics 4: aggregated usage statistics (see Cookies).
AI requests are sent through an API gateway that forwards them to these models; it acts only as a processor and does not keep your photos. We do not sell or “share” personal information as those terms are defined in U.S. state privacy laws.
5. Retention and destruction schedule
Deletion runs automatically every hour. Deleted files are removed from storage and the corresponding database records are erased.
| Data | Deleted |
|---|---|
| Uploaded selfies (free analysis, paid reports, Studio) | Within 2 hours of upload |
| Studio reference images | Not stored; discarded after the request |
| Free scan results, measurements and the free preview image | After 48 hours |
| Paid reports, including measurements and all generated try-on images | 12 months after purchase |
| Studio ratings and renders | 12 months after creation |
| Consent records | 3 years after consent |
| Hashed IP rate-limit counters | After 24 hours |
| Email address and credit balance | Kept while you have credits or a report; deleted on request |
In every case biometric information is destroyed no later than when the purpose for collecting it has been satisfied, and never later than three years after your last interaction with us. Records of purchases may be kept longer where tax or accounting law requires it; these contain no photos or facial data.
6. Cookies and analytics
fr_anon_session(1 year): an anonymous session ID that links your scans to your browser.fr_acq(90 days): the campaign source (utm parameters) of the link that brought you here.fr_ref(7 days): a referral code, if you arrived through one.fr_sessionandfr_signed_in(30 days): keep you signed in to the Studio.- Google Analytics 4 cookies (
_ga, up to 2 years): aggregated page and event statistics. Google signals and ad personalization are turned off and IP addresses are anonymized.
We do not use advertising pixels or sell data to advertisers.
7. Security
Photos and generated images are kept in a private storage bucket that is not publicly accessible. Generated images are shown to you through links that expire after one hour, and uploaded selfies are never served back to the browser. Connections are encrypted with HTTPS. No system is perfectly secure, but we limit what we store and how long we store it.
8. Your rights
Depending on where you live (including under the GDPR, UK GDPR, the California Consumer Privacy Act and state biometric privacy laws such as Illinois BIPA and Texas CUBI), you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict processing, to withdraw consent and to complain to your data protection authority. We do not discriminate against anyone for exercising these rights. Email privacy@thefacerating.com to make a request.
9. Delete my data
Most data deletes itself on the schedule above. To delete a paid report, Studio renders, remaining credits or your email address sooner, email privacy@thefacerating.com from the address you used at checkout with the subject “Delete my data”. We confirm and complete deletion within 30 days. Deleting your data also removes access to any report or credits linked to it.
10. Children
The service is intended for adults aged 18 and over. Do not upload photos of anyone under 18. If you believe a child's photo was uploaded, contact us and we will delete it.
11. International transfers
Our providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
12. Changes
If we change this policy we will update the effective date above, and for material changes we will give notice on the site before they take effect. See also our Terms of Service.
13. Contact
Vban LLC is the controller of your personal data.
Vban LLC, 30 North Gould Street, Ste R, Sheridan, WY 82801, USA
Email: privacy@thefacerating.com