Privacy

Photos and face search

Before you confirm a live search, the selected photo stays on your device. Selecting a photo for local checking does not upload it to our servers or a search provider.

Format and face checks run in your browser. Close the page to discard the current photo preview. A local check is not a completed face search.

After you confirm a live search and a credit is reserved, we upload the selected photo to private storage, validate it on our servers and send the full photo to an external face-search service to find possible visual matches. The circular crop is for display; it does not limit the photo sent for searching.

Accounts and sign-in

Google sign-in provides an account identifier and email information that we use to create, recognize and protect your account. Essential session cookies keep you signed in. Signing in does not start a search or a payment.

Your searches, credit balance and billing information require account access. You can sign out of one device or all devices from your account.

Search history and retention

Original photos and saved results have different lifetimes. The rules below apply to data stored by aifacesearch.net. External search processing is described separately below.

Our original-photo copies are scheduled for deletion as soon as processing finishes, usually within 2 hours of first receipt and no later than 24 hours. This limit covers our copies, not a search provider’s processing or content on source websites.

Saved previews and results expire 30 days after the search first finishes or fails. Reopening a search does not extend that period. Our encrypted database backups contain account, search and billing records, but no stored photo files or original search-provider responses. Production backup files are scheduled for removal after 7 days. Deletion records are applied before restored data can become accessible; backups are not a way to recover a search you have deleted.

Delete your data

You can remove a saved search or request deletion of your entire account. Access is revoked before background cleanup finishes.

Deleting a search or account here does not remove content from third-party source websites. Necessary payment and audit records are handled separately, including records needed to resolve an existing payment or refund.

Analytics

Our first-party analytics record fixed page and action categories, upload-button locations, the first public page visited in a session, random event identifiers and technical outcomes to help us understand product use.

A random, tab-scoped identifier is kept in session storage and resets after 30 minutes of inactivity. It is not a count of individual people. First-party analytics events are retained for up to 30 days. Browser events respect Do Not Track and Global Privacy Control.

Google Analytics records public-page visits and upload-button clicks only after you allow analytics. Google may process network and device information, including your IP address, when it receives these requests. We do not send search activity, account identifiers, query strings or page referrers to Google. Advertising features and enhanced measurement are disabled.

Your analytics choice and Google Analytics cookies expire after 30 days without renewal. Google Analytics has separate retention settings; our first-party 30-day event deletion does not delete Google's reports. Use Analytics settings in the footer to withdraw consent and clear Google Analytics cookies on this site. Withdrawing consent stops future collection; it does not erase previously collected reports. Learn more in Google's Privacy Policy.

Essential payment and security records are separate from optional product analytics.

Security

Search history and stored images are not public. Access requires a valid account session and authorization for the requested search. Private images are served through authenticated requests, with deletion and expiry checks.

Payment and credit records are kept separate from photos and search results. Signing out or deleting your account revokes the relevant account access; it cannot erase files you have already downloaded to your device.

Payments and third-party processing

Cloudflare hosts our website and background services and stores encrypted recovery backups. Supabase provides our database and private image storage. Google provides sign-in; Google Analytics is optional and follows the choices described above. Our infrastructure and service providers may process information outside your country, including in the United States.

Stripe processes checkout, subscription payments and refunds. We send the selected product and an order reference to Stripe. Stripe collects the contact, billing and payment information you enter at checkout and processes transaction and device information to complete payments and prevent fraud. We receive payment, subscription and refund status for credits and billing records. We do not send search photos or results to Stripe or store your full card number. See Stripe’s Privacy Policy for its own processing and retention rules.

The external face-search service processes your submitted photo separately from our storage. Its published policy says originals are discarded after face extraction, and extracted thumbnails and cached results are deleted after 24 hours. It states that uploaded photos are not indexed, published or shared. Visual descriptors may remain for functionality and security without a stated maximum period. Our 24-hour deletion promise therefore applies only to our copies, not every form of data held by that service.

Opening an original source takes you to another website. That website’s privacy practices and content are outside our control. Our retention and deletion rules apply to our systems, not the wider web.