Your photo. Your choice.
Local measurements
We decode and resize your image in your browser. MediaPipe performs geometric analysis on your device. The file is not sent to our server for this step. Browser memory may hold a resized copy while you decide whether to request AI analysis; it is released when you replace the photo, finish analysis or leave the page. Closing the tab ends the session.
Optional AI processing
With explicit consent, we send a JPEG no larger than 768 pixels on its longest side and no larger than 2 MB to our server, then to OpenAI. We do not intentionally write the image to disk, a database or application logs. OpenAI processing is subject to its own retention controls; API abuse-monitoring logs can contain customer content and may be retained for up to 30 days unless an applicable exception or approved data control applies. We cannot promise instant deletion by every processor.
Read OpenAI’s API data controls.
Analysis records
Completed AI analyses store a random ID, creation time, score, numeric breakdown, a truncated photo hash for possible deduplication, a keyed IP hash, country when supplied by our hosting provider, source path and mobile/desktop category. We store no original image, thumbnail or face embedding. Hashes are pseudonymous, not a guarantee of anonymity. Analysis records currently remain for statistical aggregation; sharing expiry does not delete the underlying numerical analysis.
Sharing & deletion
Only clicking Share creates a public result. Cards contain scores, not faces. We store the analysis reference, generated-card path, expiry, view-count field and a hash of the deletion key. Shared pages stop working after 30 days. A daily cleanup job removes expired share records when configured. Save your deletion key or keep the browser that created the result; the Delete my result control revokes the shared link. Copies or screenshots made by others cannot be recalled.
Rate limiting & local storage
Upstash stores keyed IP identifiers and rate-limit counters to limit AI requests to eight per hour. Your browser stores deletion keys for shared cards. We do not set advertising cookies in this version. Instrumentation emits local browser events only until an analytics destination is explicitly connected.
Email waitlist
If you separately join the future report waitlist, we store your email and signup time. No payment is collected and no automated email is sent by this version. Do not submit an email unless you agree to that storage.
Audience
The optional AI service is for consenting adults aged 18 or older. Use only photos you have permission to analyze. This site does not infer ethnicity, gender, health or personality.