Privacy Policy

Last updated: September 14, 2026

This policy explains how Ratioface at ratioface.org handles information in its current free beta. It also identifies services that are planned but not yet available. Questions and privacy requests can be sent to contact@ratioface.org.

1. What happens to your photo

When you select a photo, the analysis page reads that selected file, prepares a smaller working image and runs a MediaPipe facial-landmark model in your browser. The model and supporting files are downloaded from our own site. Loading these files makes ordinary website requests; it does not send your photo to a remote analysis service.

Your photo, full facial-landmark mesh and free analysis results stay in the browser during the current local analysis flow. Ratioface does not upload them, create a server-side photo history, or write them to localStorage or IndexedDB. We do not send your photo to a generative AI provider.

Choosing a file does not grant access to the rest of your photo library. The tool does not identify who you are or compare your face against an identity database.

2. Facial measurements and sensitive information

The tool derives facial geometry to estimate face shape and calculate an experimental harmony index. Facial images and measurements can be sensitive personal information; their legal treatment depends on the context and applicable law.

We use the selected image for the analysis you request, not for identity verification, advertising profiles or training our own models. The current tool does not infer your health, race, ethnicity or age. We do not sell or rent your photos or facial measurements.

A score is not a medical assessment or a decision about your eligibility for employment, credit, insurance or other services. See the Terms of Service for use restrictions.

3. Clearing results and saving a card

Replacing a photo discards the previous result and releases its preview URL. Clearing the analysis or leaving the analysis component stops the analysis worker and releases the active preview. Refreshing the page requires you to select a photo again.

This is application resource cleanup, not a promise of secure erasure from browser or operating-system memory. Clearing the tool does not delete the original file from your device.

If you request a downloadable result card, the browser creates it locally. It contains a score and face-shape estimate, not your photo or landmark coordinates. You control where it is saved and whether you share it. Files, screenshots and copies you send to other people remain outside Ratioface's control.

4. Website requests, cookies and browser storage

Our website hosting uses Cloudflare. Delivering pages, model files and other assets can involve processing an IP address, request URL, request time and browser or device information for delivery, diagnostics and security. Local photo processing does not make these ordinary network requests anonymous.

The current pages do not load advertising pixels, third-party audience analytics or session recording. We do not send local analysis values to those services. Browser storage may hold display preferences, and the browser may cache public website and model files. These are separate from your selected photo and results.

Hosting services may use technical cookies or similar mechanisms for security and delivery. You can manage cookies, cached files and site storage in your browser. Blocking resources may prevent the analysis model from loading.

5. Messages you send us

If you email us, we receive the address you use, your message and any attachments you choose to include. Our email providers also process that correspondence. We use it to respond, investigate the issue and maintain necessary support records.

Please do not attach a facial photo, full landmarks, a payment-card number or a private report access link to a general inquiry. Local analysis does not send us your photo, but a photo you deliberately attach to an email is part of that email.

We retain correspondence only as needed for the inquiry, necessary recordkeeping and any applicable legal obligations. You may request deletion; some records may need to be retained where the law requires it. Hosting and email providers have their own operational and backup retention arrangements, separate from the browser cleanup described above.

Hosted result links, checkout and paid report delivery are not available in this release. A price or report description elsewhere on the site describes a planned service, not an active purchase.

The planned sharing flow would send a limited summary only after you choose to create a link: algorithm version, face-shape estimate, component scores and quality warnings. It would not include your photo or full landmark mesh. Anyone with a public sharing link could read that summary and copy it.

The planned report flow would require your chosen email address and a snapshot of measurements and scores. The intended providers are Cloudflare for storage and delivery, Waffo Pancake for checkout, and Resend for a report email with a PDF attachment. Your photo is not part of that planned snapshot. A private report link would act as an access credential and must not be posted publicly.

Before these features open, we will publish their applicable retention periods, deletion and access controls, provider disclosures and purchase terms. We will not silently upload an existing local analysis to activate a future service.

7. Providers, security and international processing

Cloudflare processes website requests as described above; see Cloudflare's Privacy Policy. Email correspondence is also handled by the mail services involved in sending and receiving it. These providers may process information in countries other than your own.

We use HTTPS for website delivery and limit the information the local analysis flow sends over the network. No website, device or email channel can guarantee absolute security. Keep your browser updated and avoid using sensitive photos on a device you do not trust.

If a future feature changes where personal information is sent or requires additional international-transfer safeguards, that processing must be addressed before the feature launches.

8. Your choices and privacy rights

You can stop local processing by clearing the tool or closing the page, delete downloaded cards yourself, and clear site storage through your browser. We cannot retrieve or erase a photo or result that remains only on your device.

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of personal information we hold, restrict or object to processing, or withdraw consent where processing relies on consent. Withdrawal does not change the lawfulness of earlier processing. You may also complain to the relevant data protection authority.

Send requests to contact@ratioface.org. Tell us which interaction your request concerns without sending a facial photo. We may need proportionate information to verify a request and will respond within the period required by applicable law. The current service has no account or server-side photo collection to delete through an account dashboard.

9. Children

Ratioface is intended for adults aged 18 and over. Do not select photos of minors. The current tool does not collect a birth date or independently verify age.

If you believe a child has sent us personal information, contact us so we can investigate and take appropriate action, including deletion where required. We cannot remotely remove files that stayed on the child's device.

10. Policy updates

We will revise this page when our data practices change and update the date above. Material changes will be explained on the website before the relevant new processing begins, with additional choices or consent where required. Reading this policy or visiting the site is not blanket consent to future photo uploads.