Quiz answers
Your answers are saved in your browser's local storage so you can return to your results. They are not sent to a server and we cannot see them. Clearing your browser data removes them. If you copy your results link, your answers are encoded into that URL, so treat the link as personal.
Photos, when you have no account
This is the default, and it is what happens unless you take a deliberate step to change it.
If you use the optional photo feature, the image is checked for brightness, focus and size entirely inside your browser. It is only transmitted when you press the analyze button. At that point it is sent to Anthropic's API for analysis and returned. It is not written to disk, not added to a database, and not used to train anything. If you never press analyze, the photo never leaves your device. If you choose to give an email address anywhere on the site it is passed to MailerLite, who run our mailing list, and is never linked to a photo.
Photos, when you choose to keep one
A free personal account exists so you can watch something change over months. That only works if a photo is kept, so this is the one place where an image is stored, and only because you asked for it.
- Nothing is kept until you turn it on. Keeping photos is off by default. You switch it on in your account, and we record when you did. If it is off, we refuse to store an image even if something asks us to.
- You are asked every time. A scan is only saved when you press "Keep this scan". Running a scan does not save it.
- You can keep the reading without the picture. If you want the description of what was seen in your history but not a photograph of your face on a server, that is supported, and it is a reasonable thing to want.
- Stored privately. Images sit in a private store, not on the public web. They are shown to you through links that expire after five minutes and are created fresh each time you look. There is no lasting public address for your photo.
- Kept until you delete them. There is no automatic expiry, because a comparison against last spring is the entire point. That means the decision to remove them is yours.
- Deletion is real. You can delete one scan or your whole account. Either way the image files are removed from storage before the records pointing at them, so we can never tell you a photo is gone while it is still there.
We do not use your photos to train anything, we do not use them for advertising, and no other user, and no professional account, can see them.
Generated images of your face
The makeup application guide can draw the look on your own face. This is off unless you switch it on, on a separate tick box from the one about keeping photos, because it is a separate decision: it means a photograph of your face is sent to Google, whose image model generates the picture and returns it.
- Your photo is sent to Google once, to build a mannequin that looks like you. It is not stored by us, and it is never displayed anywhere, including back to you. Every frame of the guide after that is drawn on the mannequin, so your photograph is not sent again.
- The mannequin and the generated frames are stored privately with your account so you are not charged twice to see the same picture. They are reached only through links that expire in minutes, and they are deleted when you delete your account.
- Google states that data sent to its paid API is not used to train its models. We rely on that statement and cannot independently verify it.
- If you would rather not send a photograph at all, you can describe yourself in words instead and the mannequin is built from the description. No photograph of you is sent.
- Image models are known to lighten skin and narrow features. We measure the mannequin against your photo, and every frame against the mannequin. Anything that comes back materially lighter is deleted immediately, never shown to you, and not counted against your allowance.
- You can turn this off at any time on your account page. Turning it off stops anything further being sent; it does not delete frames already made, which you can remove by deleting your account.
Professional accounts
Salons and makeup artists can hold a paid account and run consultations for their own clients. In that case they decide what to collect and we hold it on their behalf, so their agreement with their client governs it and this policy covers how we handle it for them.
What they store is a client's first name, optionally an email address, their own notes, and the routine produced. The photo their client is scanned with is not stored. A follow-up scan keeps the reading, meaning the words describing what was seen, so the two can be compared. Not the image.
Each consultation gets a private link. It is a long random value, it is not listed anywhere, and it is not indexed by search engines, but anyone holding the link can open it, so treat it as personal. If you are a client and want a consultation removed, ask the professional who ran it, or contact us and we will pass it on.
HEIC conversion
iPhones save photos in HEIC, a format browsers cannot display. If you upload one, a conversion library is loaded from a public code CDN and the photo is converted to JPEG inside your browser. The image itself is not uploaded anywhere during that step. The CDN sees a request for the library file, as it would for any script, and nothing about your photo.
Who else handles your information
We use a small number of companies to run the site. They act on our instructions and are not permitted to use your information for their own purposes.
- Vercel hosts the site and runs its server code.
- Supabase holds accounts, saved scans and stored photos.
- Anthropic analyses a photo when you press analyze, and returns the reading. The image is not retained for training.
- Stripe handles subscription payments. We never see or store card details.
- Resend sends sign in links.
- MailerLite runs the mailing list, if you subscribe. Subscribing is a tick box on the sign in form, off unless you tick it, and you are only added after you click the emailed link, which is the point at which the address is known to be yours.
- Google provides analytics and advertising measurement, subject to your cookie choice. Separately, and only if you switch it on, Google's image model generates the makeup guide rendered on your face, from a photograph you send it.
Analytics and cookies
We use Google Tag Manager, which loads Google Analytics, to understand which pages are useful and where visitors come from. This records information such as pages viewed, the site that referred you, approximate country, and device type. These tools set cookies in your browser.
We record four things you do on the site, so we can tell which parts are worth improving: completing a quiz, subscribing to email, clicking through to a retailer, and running a photo analysis. These are recorded as anonymous events. They are recorded without a name or an email address, and are not joined to your account if you have one.
If we run advertising, Google may also use these cookies to measure whether an advert led to a visit, and to show our adverts to people who have visited before. You can opt out of personalised Google advertising at adssettings.google.com, and browser settings or an extension can block these cookies entirely. The site works normally without them.
Your cookie choice
The first time you visit you are asked whether to allow analytics and advertising cookies. In the EU, the UK and Switzerland nothing is loaded until you say yes. Elsewhere they start enabled, in line with local law, and rejecting takes effect straight away.
You can change your mind at any time using the Cookie settings link in the footer of any page. Your choice is stored in your own browser and nowhere else, so clearing your browser data resets it.
Affiliate links and cookies
When you click a link to a retailer, that retailer may set a cookie to attribute the visit to us so we can be paid a commission. This is standard affiliate tracking and is controlled by the retailer, not by us. Their privacy policy applies once you are on their site.
What we do not do
- We do not sell or rent personal information.
- We do not require an account or a name to use the quizzes, the photo scan or the guides. An account is optional and exists only if you want to keep scans or run client consultations.
- We do not use face recognition, we do not identify anyone from a photograph, and we do not derive biometric identifiers from your images. Generating a picture of you wearing makeup does not identify you and produces no identifier; it produces a picture.
- We do not use your photographs or generated images to train anything, and we do not share them with anyone beyond the companies listed above doing the jobs described.
- We do not build advertising profiles about you.
Your rights
Depending on where you live, you may have the right to access, correct or delete personal information we hold, and to opt out of its sale or sharing. We do not sell or share personal information.
If you use the site without an account there is usually nothing for us to delete, because we hold nothing that identifies you. If you have an account, you can delete any single scan, or your entire account with every photo, from your account page at any time, without asking us. If you would rather we did it, or you cannot get in, use the contact page and we will do it and confirm when it is done.
If you have subscribed to email updates, every message contains an unsubscribe link, and you can ask us to remove you at any time. The mailing list and your account are separate: deleting your account does not remove you from the list, and unsubscribing does not delete your account. Ask us and we will do either or both.
Children
This site is not directed at children under 13, we do not knowingly collect information from them, and accounts are not for them. The hair quiz includes an option for a parent shopping for a child, which collects nothing about the child beyond hair characteristics used to generate the routine.
Changes
If this policy changes materially we will update the date at the top of this page.