Privacy Policy

Local face analysis

FaceShapeTryOn currently provides free face-outline estimates in your browser. A selected photo is decoded in a local Worker. Photo bytes, EXIF, filename, point locations, shape labels and the personal result are not uploaded by this feature and are not written to localStorage, sessionStorage, IndexedDB, analytics or application logs.

The preview is re-encoded from decoded pixels for orientation and displayed through a temporary in-memory Blob URL. This is a visible-outline styling estimate. Hair, beards, lighting and camera perspective can affect it; it is not an identification or medical service.

This feature does not persist photos or personal results in browser storage or cookies. Static resources can still be cached; they are not your selected photo or personal result.

Clear or replace a photo

Use Clear photo and result, replace the photo, refresh, or leave the page to discard the current analysis. Clear and replacement terminate the Worker and revoke the preview URL. The feature does not restore a photo after refresh. It does not delete the original file on your device or promise forensic erasure of all device memory.

Static requests and access metadata

Loading this website still requests pages, a font, an illustrative example and, only after choosing a photo, local model and WASM resources. A host can see ordinary request metadata such as IP address, user agent, requested static path and time. A model request is not a photo upload. The site can set a language preference cookie and a first-visit cookie containing an approved public landing path and time, plus allowed campaign or referrer fields. These contain no photo, point locations or face-shape result.

Optional page analytics

On the production website, Google Analytics 4 and pvuv.ai load only after you choose Allow analytics. Essential only keeps analytics off. Use Privacy choices to change or withdraw your choice at any time; the choice is stored locally. If your browser blocks storage, the choice lasts for the current page session.

Analytics measures visits to approved public pages. With Google Analytics, we send the public page address and title, without URL query parameters, fragments or referral URLs. Our Google Analytics integration does not send selected photos, filenames, face landmarks, face-shape results, account identifiers, order numbers or task details. Account and administration pages are excluded. Google can receive ordinary network and device metadata and use analytics cookies after consent. For Google Analytics, we keep advertising signals, enhanced measurement and session replay disabled. This is separate from the consent required for cloud image generation.

pvuv.ai sets persistent visitor identifiers in cookies on the site domain and in localStorage after consent, and uses session and first-visit cookies. Its script can collect the page URL (including campaign parameters), referral URL, time zone, platform and device signals, clicked element labels, form-start and form-submit metadata, and browser error messages. It adds a hidden nofollow link for bot detection. We do not connect it to account identifiers or send it photos or face-analysis results. Unlike our Google Analytics integration, it does not use our cleaned page-address fields.

With pvuv.ai enabled, navigation between approved public pages is recorded by its page-navigation listener without reloading the document. Leaving for a non-public page or withdrawing analytics consent reloads the document to clear its running script and in-memory event queue. Outgoing pvuv.ai requests are blocked immediately when consent is withdrawn or the current path is no longer approved, including the interval before reload. Until reload completes, its existing listeners may still collect locally or write identifiers, but the outgoing-request gate remains closed. Withdrawal does not undo requests already sent or delete existing analytics cookies and localStorage identifiers; you can remove these using your browser's site-data controls.

Application hosting may record ordinary access and security metadata. Private cloud images use Cloudflare R2 storage. Hosting logs are separate from photos and personal analysis results; we do not claim that a site visit makes zero requests or that every processor retains nothing.

Cloud hairstyle generation and consent

Selecting a photo or running local analysis does not upload it. Cloud try-on uploads a photo only after you separately check the cloud consent box and request generation, including a free watermarked preview. The server re-encodes the uploaded photo to remove EXIF metadata before processing it through our configured third-party AI image service (APIMart or Replicate, depending on the selected model).

Source photos are deleted from site storage when generation completes. Incomplete uploads and tasks are scheduled for source deletion no later than 24 hours after upload. The cleanup Worker must run to enforce this deadline; storage deletion errors are reported and retried rather than treated as successful deletion.

Generated images are stored privately for 7 days from successful generation. You can delete your images at any time in My try-ons. Deletion immediately revokes site access and removes site files; cleanup retries failures and removes late outputs so that a deleted image cannot become accessible again. Expired images cannot be read or have their watermarks removed, even before physical cleanup runs. Removing the watermark from a preview does not extend the storage period.

The site's 7-day image period is separate from the selected AI image provider's own handling and retention. Deleting a site image does not promise immediate erasure from every provider system. We do not claim unverified provider retention, training exclusions or forensic erasure.

Accounts, payments and support

FaceShapeTryOn is operated by FaceShapeTryOn team. Contact [email protected] for support, privacy questions or a manual refund request. Include an order number when relevant; do not email photos.

Signed-in cloud and support flows handle account, session, task, credit, order and support records separately from the free local detector. New accounts receive 1 trial credit for a watermarked preview. Email verification is required when enabled. The one-time packs cost $4.99 for 10 credits and $9.99 for 30 credits; credits remain valid for 12 months. Generation reserves one credit; success confirms the charge and confirmed failures return it. Paid users remove watermarks from saved previews in HD for free. An entirely unused pack can be submitted for manual refund review within 7 days of purchase. Payments are processed by the configured payment provider identified at checkout. When checkout is labeled Test Mode, no real payment is collected. A purchase is confirmed only after payment is verified and credits appear in your account.

Deleting a try-on image does not delete account, payment or support records. This MVP provides image deletion and an authenticated account support entry; it does not offer automatic account deletion or invent a billing-record retention period.

Read the terms, refund policy or return to local detection.