Privacy & Photo Handling

Your photos

Use fully clothed photos of yourself only if you are at least 18. Do not upload children, intimate images, identification documents or other people. Selecting a file prepares a local preview; it does not by itself send it for analysis.

Before upload, the browser reduces the image and removes its original metadata. Prepared photos go to Cloudflare, OpenAI and Google for safety checks, analysis and, for Your new look, image editing. We do not publish a photo gallery or use your uploads to train our own models.

Temporary storage

Accepted tasks use private, encrypted Cloudflare R2 storage for prepared photos. Access to task inputs ends 24 hours after acceptance. Cleanup is queued after completion, cancellation, final failure or refund; physical deletion is asynchronous and may finish later.

Reports contain personal feedback and thumbnails made from your uploaded photos. Your new look also contains your appearance selections and an AI-generated preview. Free reports are accessible for 24 hours after completion; paid reports for 7 days. Content is encrypted in application storage. At expiry, access stops and scheduled cleanup removes the saved content.

Report email and PDF

Report email is optional. You can buy, view the report and download its PDF without a report-delivery address. If you want an emailed copy, enter the same address twice at checkout. Matching entries reduce typing errors but do not verify mailbox ownership. Use an address you control. Paid report PDFs contain feedback, uploaded-photo thumbnails and, where included, the generated preview. These are ordinary PDF attachments, without password protection. Cloudflare creates the PDF and sends it to your mail provider. Copies in your mailbox or downloads remain under your control after deletion from this site.

We encrypt the delivery address in application storage. It is used for requested delivery and related service messages, not marketing. Scheduled cleanup removes it 90 days after checkout once no unexpired report still needs it. Delivery tracking is removed after 90 days once the saved report is unavailable. Unpaid checkout records may be removed earlier.

Each report email includes a “Stop report emails” link, valid for 90 days. Opening it shows a confirmation. Confirming blocks future report emails to that address, including new orders. Website reports and PDF downloads remain available within their normal access periods. Dodo receipts and support replies are unaffected. An email already being sent may still arrive. To honor your choice, we retain a one-way identifier derived from the email address and the request time, not the address itself in the stop record. We keep this record while the preference applies, separately from the 90-day delivery-address retention above. Contact support if you need help.

Browser access and payments

A necessary cookie connects purchases and reports to an anonymous browser session lasting 30 days. Email delivery does not create an account. Clearing cookies or changing browsers does not automatically restore unused allowances or report access.

Dodo Payments processes checkout, tax and payment details under its own privacy notice. It may collect an email address for checkout and receipts even when you leave the optional report email blank. A receipt email does not request delivery of your private report. Our application keeps order references, payment and refund status, and allowances. It does not need your card details. Financial records are retained separately for accounting, refunds, disputes and applicable legal duties; they do not expire with a report.

Service statistics and necessary cookies

We review aggregate Cloudflare request counts and daily totals of orders, tasks, reports and email delivery to operate the service. We do not add browser analytics beacons, analytics cookies or visitor identifiers for these statistics. The session and security cookies needed to provide and protect the service remain in use.

We do not install Google Analytics, advertising scripts or session replay. Aggregate service statistics do not include photos, report text, email addresses or payment references. Hosting and security providers still process network information needed to receive requests and protect the service.

When you choose a language manually, we save only that language preference in your browser for later visits. It is not used for analytics or to identify you. If browser storage is disabled, we cannot remember your choice.

Providers and international processing

Cloudflare, OpenAI, Google and Dodo Payments process relevant information to provide their services. Data can be processed outside your country. Their retention, security and international-transfer arrangements depend on the relevant service and account terms. Disabling our application logs does not give every provider zero retention.

We use information to perform the service you request, protect it from abuse, manage payments and support, and meet applicable legal duties.

Deletion and copies

Clearing a report requests deletion of saved report content for the current browser session and cancels waiting email delivery. A refund revokes saved report access and cancels pending delivery. We cannot recall an email already sent or being handed to the mail service. Delete mailbox copies and downloaded files separately.

Removing selected photos clears the local preview. Closing a tab does not cancel an accepted task. Use its cancellation control to stop a pending task. Deleting a report does not erase financial records that must be retained separately.

Your requests

Contact support@myfacerating.com to request access, correction, deletion or other rights available under your local law, or to raise a privacy concern. Flow the Moment Studio operates MyFaceRating and handles these requests. We may verify your connection to a record before disclosing it. You may also complain to the relevant data protection authority.