Photo and facial measurement data privacy

This policy explains photo and facial measurement data privacy for AI Attractiveness Test at attractiveness-test.co. The free local analysis, optional saved reports and checkout have different data flows, described separately below.

Free photo analysis: what stays on your device

The core face test processes the image in your browser. It does not upload the photo or calculated face measurements to our server or an AI provider. The face-detection model and runtime files are downloaded from this website. Loading those files is a network request; it does not include your photo.

After a scan, a reduced JPEG preview, landmark coordinates and the free result remain in this browser tab's session storage for up to 30 minutes so the separate /result page can display them and survive a refresh. If browser storage is unavailable, the result uses tab memory. Use Clear photo & start again to remove the stored result. Closing the tab normally ends its session storage; browser restore features can retain it, so the time limit is also checked when the result is opened. Face-shape estimates and cheek-patch image readings are also calculated locally from this preview. The cheek readings describe RGB brightness, left–right lighting differences and pixels near channel limits; they are not a skin-type or health assessment. They may appear on a result card you choose to download or share. These free results are not stored in localStorage or on our server. We do not create a server-side photo history, face gallery or result database for the core test. Your browser and operating system may retain their own file-selection or cache information outside our control.

Downloading and sharing result cards

Result cards are generated on your device. They exclude your photo by default; you can explicitly include it before downloading or sharing the card. Social links open the public test website, not an account report or a personal result page. Share text contains the score and website address. Example results are identified as illustrative.

Using a social link or your device's share menu can send the selected text, link or card to the platform or app you choose. That service's privacy settings and policies then apply. We do not automatically publish a result or upload a card to create a public share link. Clearing this test cannot remove copies you have sent to another app or saved on your device.

Optional reports: transferred measurements and saved data

When you explicitly agree to create a report, normalized facial landmark coordinates and image dimensions are temporarily sent to our server. We recompute 16 derived measurements there. The original image is not sent. We save the resulting derived metrics, score, report content, engine/report version and account/order association. Raw landmark coordinates are not stored in the report record. The draft records the consent version and creation time. Older drafts without the current report-processing consent cannot be sent to a third-party AI processing service automatically. A draft measurement record is created before checkout; payment is required for the deeper AI explanation.

After payment is verified, we send the derived numerical measurements, component scores and explanation instructions to a third-party AI processing service to generate the in-depth explanation. We do not include the original photo, raw landmark mesh, account name, email or payment details in that model request. The returned explanation is saved with internal generation metadata. This is remote processing of facial measurements, even though the photo stays local.

A separate AI processing service receives the numerical payload and may route it to an upstream model provider. We do not promise zero retention, a no-training policy or deletion from service logs without verified contractual support. Our report-data deletion control removes records from our application; it cannot recall data already held by a processing service. Contact us before purchasing if you have questions about remote processing.

To preserve your selection while signing in, the same pending measurement payload is kept in this browser tab's session storage. It is treated as expired after 30 minutes and cleared on the next read, or cleared after successful draft creation. This is not a background deletion timer. Clearing the free image does not delete a saved report. Derived report data is retained until you delete an eligible report or request assistance; it is not automatically erased after 30 minutes. My reports removes the saved snapshot and body while retaining the order association and deletion marker for accounting. Pending checkouts and active generation cannot be deleted while processing. A downloaded PDF remains on your device until you remove it.

Payments are processed through Stripe. The payment provider receives payment and checkout information; it does not receive your facial measurements or original photo from us. The report remains unavailable until payment is verified by the server. Refunded or refunding purchases no longer unlock saved report content; a copy already downloaded or shared cannot be recalled.

Downloaded results

Downloading a result card creates a file on your device. If you choose to include your photo, that file contains it. You decide whether to share the file and are responsible for deleting downloaded copies. Anyone receiving a shared file may keep it.

How to check the data flow

In browser developer tools, open Network before selecting a photo, filter for Fetch/XHR, run only the free test and inspect request payloads. Same-origin model/WASM downloads are expected; the free analysis should not submit image bytes or landmarks. For a report, inspect the separate consented POST to /api/reports. The third-party AI request is server-to-server and will not appear in browser Network; its disclosed input is derived measurements, not proof supplied by an empty browser log.

Our method and verification notes describe the current implementation and synthetic checks. These are implementation evidence, not an independent security audit or a guarantee about every browser extension or hosting log.

Website requests

The hosting infrastructure necessarily receives network information such as IP address, request time, requested resource and browser headers when serving the website. Infrastructure logs and caches follow the host's operational settings; the local-photo promise is not a promise that no network data exists.

Cookies and optional accounts

The public test requires no account. Appearance preferences may use browser storage or cookies. If you separately use the site's account area, authentication cookies and account records are handled to provide that account; they are separate from the local test. The free test requires no payment. Optional complete reports are sold as a one-time purchase.

On the production website, Google Analytics 4 is enabled to measure page views and website usage. The Google tag may process page addresses, referrers, browser/device information and analytics identifiers or cookies. It does not perform the face analysis. We do not configure analytics events to include your selected photo, facial landmarks, measurement values, face score or report text. Google describes its processing in its Privacy Policy. Browser controls can limit analytics scripts or cookie storage; the free measurement itself does not depend on analytics.

Choice and permission

Use only your own adult photo or an adult photo you have permission to analyse. Clearing a local result does not delete the original source image or downloaded files on your device. We do not use core-test photos to train a model because the core test does not receive them.

Questions and changes

For privacy questions, email support@attractiveness-test.co. See help for troubleshooting and what to include in a support request. This policy will be updated when the data flow or service changes; the date above identifies this version.