Privacy Policy

Last updated October 22, 2026

In short: your photo is analyzed once to produce your score and is then gone. We don't save it, we don't create a face template or faceprint from it, we don't use it to identify you, and we don't sell or share it. There are no accounts.

Your photo

• Before upload, your browser resizes the photo to at most 1,024 pixels and re-saves it as a JPEG. This removes embedded metadata such as GPS location and camera details.
• The photo is sent over an encrypted connection to our server, which passes it straight to the AI service and holds it only in memory for the few seconds the request takes. It is never written to disk, a database, or our logs.
• The AI service is xAI (the company behind the Grok models). Our xAI account has Zero Data Retention enabled: xAI does not store the request or the response, and xAI does not train models on API data. Our server checks xAI's zero-retention confirmation on every request and does not show a result if it's missing.
• The AI returns only a score, sub-scores, and short text tips. We don't keep those either: they are shown in your browser and disappear when you leave the page.
• We do not extract or keep measurements of your face geometry, a face template, or any other biometric identifier, and we never try to identify who you are.

Consent and age

Before a photo can be analyzed you must confirm that you are 18 or older and that the photo is of you, and agree to it being sent to the AI service as described here. Don't upload photos of other people or of anyone under 18. The AI is also instructed to refuse photos that may show a minor.

Where the service is not offered

Because some US states have specific biometric privacy laws, the site is not available to visitors whose connection is located in Illinois, Texas, or Washington. Location is estimated from your IP address by our host, Cloudflare, and isn't stored by us.

Abuse prevention and daily limits

• Cloudflare Turnstile checks that a real person is using the test. Turnstile may process device and browser signals; see Cloudflare's privacy policy.
• To enforce the free daily limit, we keep a count of tests per visitor for the current day. The visitor is recorded only as a one-way hash of the date and IP address, not the IP itself, and all counts are deleted when the day changes (midnight UTC).
• We send xAI the same one-way hash as a “safety identifier” so that misuse can be traced to a single visitor rather than shutting the service down for everyone. It does not reveal who you are.

Hosting and logs

The site runs on Cloudflare, which processes standard request data such as IP address, browser type, and the page requested in order to deliver and protect the site. Our server logs record errors (for example, “AI service timed out”) but never the photo or the result.

Cookies, advertising, and analytics

We don't set our own cookies and don't use analytics today. Turnstile may use what it needs to tell people from bots. If we add advertising or analytics in the future, this policy will be updated before they go live.

Your choices

Because we don't keep your photo or results, there is nothing stored about you for us to hand over or delete. If you have a question about privacy, write to us through the contact page.

Children

The test is only for adults. We don't knowingly process photos of anyone under 18, and the site isn't directed at children.

Changes

If how we handle photos ever changes, we'll update this page and its date before the change takes effect.