Free tools on your device. One upload, only if you buy.

The face-shape and eye-shape tools read your photo directly in your own browser and analyse it there. The photo and the measurements taken from it are not uploaded. The analysis runs on Google’s open-source MediaPipe Face Landmarker, served from this site’s own domain. Close the tab and it is all gone from memory.

What the site does measure is its own usage: we run Google Analytics, which sets its measurement cookies and tells us which pages are visited and which buttons are clicked - for the tools, that includes whether an analysis succeeded and the shape category it landed on (“oval”, say), so we can see which results people actually get. It never receives your photo or the underlying measurements. Beyond that: no advertising pixels, no session recording, no A/B testing, no account, no login, no email capture.

The paid The Full Style Report works differently, and says so before you pay. When you click through to checkout you are asked for explicit consent and your year of birth (the report is 18+). With that consent, your photo and your measurements are uploaded once to our report server, for one purpose: generating your report.

Who touches the data, and why: your photo is sent to Google (Gemini) to generate the hairstyle previews, the styling concept and the color-season read, and to Anthropic (Claude) to write your personalised plan - both under contracts that prohibit using it to train their models via the API. Payment is handled entirely by Stripe; we never see your card details. Stripe gives us your email address so the report can be delivered, which happens through Resend, our email provider. The report server runs on Railway and the order record lives in a database hosted by Supabase.

Retention: your photo is deleted from our server the moment your report is generated - typically within minutes of payment. If you start a checkout and don’t pay, the photo and analysis are deleted within 48 hours. What we keep afterwards: the order record (email, purchase, consent timestamp) and the finished PDF, so you can re-download it and so the 7-day guarantee can be honoured.

We never sell or share your data beyond the processors named above, and your photo is never used for anything except your own report - not for marketing, not for training, not for “improving the service”.

This site is hosted on Vercel and the report service on Railway. Like every web host, their infrastructure processes the technical request data needed to serve a page - IP address, browser user agent, URL and timestamp. We do not query, export or join these logs, and they expire on the hosts’ own schedules under their own privacy policies.

Fonts are bundled into the page at build time, so your browser makes no request to Google Fonts while you read this.

UK and EU visitors have rights under the UK GDPR and GDPR to access, correct, delete, port or object to the processing of their personal data. California residents have comparable rights under the CCPA/CPRA. Illinois and Texas residents: the consent step before checkout exists precisely because a photo of your face is sensitive - we process it only with your explicit, informed consent, and delete it on a stated schedule.

If you bought a report, the data we hold is your order record and PDF - email contact@faceshapereport.com to have it produced or deleted, and you will get a reply from the person who built the site. If you only used the free tools, we hold nothing that identifies you - the only record is aggregate usage statistics in Google Analytics, which we cannot tie back to you.

This site is not directed at children under 13, and the free tools collect no data from anyone of any age. The paid report requires you to confirm you are 18 or older before checkout.

If this site ever adds anything else that processes your data - an email list, affiliate tracking, advertising - this page is updated in the same change that adds it, and the date at the top moves. That is how Google Analytics arrived here: disclosed in the commit that added it. We will not quietly start collecting something and document it later.

Face Shape Report (https://faceshapereport.com) is published by Known by One, LLC, a Delaware limited liability company, at 131 Continental Dr, Suite 305, Newark, DE 19713, United States. It is the data controller for the purposes of the UK GDPR and GDPR.

Questions, or a data request: contact@faceshapereport.com. More about who writes this site is on the about page, and how the measurement works is on methodology.