Privacy notice
Draft. Sentences marked [OWNER] need the owner's data or a legal check before this page goes live.
Who is responsible
[OWNER] Name and postal address of the owner, as on the imprint. Email: [OWNER] contact email.
The free tool
Your photo stays in your browser. The tool loads its measuring code and two model files from our server, then reads your photo on your own device. The photo, the measured colors and the result are not sent to us or to anyone else. We cannot see them and we do not store them.
A paid report
To make your report we need:
- one to three photos of your face,
- your first name, for the cover of the report,
- your email address, to send the report,
- your order reference, to match the photos to the payment.
We use this data only to make and deliver the report you ordered (Art. 6(1)(b) GDPR, performance of a contract). You also confirm on the upload page that we may use the photos for this purpose.
[OWNER] Legal check: we read colors from a face photo and do not identify anyone. Confirm that this is not biometric data under Art. 9 GDPR, or rely on explicit consent (Art. 9(2)(a)), which the upload page already asks for.
Measured on our own computer, never sent to an outside AI service. Photos deleted 30 days after delivery.
How long we keep things
| Data | Kept for |
|---|---|
| Photos on the upload server | Deleted automatically 30 days after upload |
| Photos and working files on our computer | Deleted 30 days after delivery |
| Your email and the report we sent | [OWNER] State the period, for example 30 days after delivery, or until the re-check period ends. |
| Invoice and payment records | [OWNER] The period German tax law requires. Confirm the number of years with a tax adviser. |
You can ask us to delete your photos sooner. Write to us and we delete them and confirm it.
Who else handles the data
- Cloudflare hosts this site and stores uploaded photos in its R2 storage, in the EU jurisdiction, as our processor. The storage is private. There is no public link to any photo. Cloudflare also logs technical data such as your IP address to deliver the site and to stop abuse.
- Checkout provider. [OWNER] Name the provider. It takes the payment and, as merchant of record, handles tax. We do not see your card details.
- Email. [OWNER] Name the email service used to send the report.
[OWNER] Legal check: data processing agreements with each processor, and the transfer basis for any processing outside the EU.
Cookies and tracking
This site sets no cookies and runs no analytics or advertising scripts. [OWNER] Update this section before adding any analytics.
Your rights
You can ask us for a copy of your data, for a correction, for deletion, or for us to stop using it. You can take your data with you and you can withdraw your consent at any time. Write to the address above. You can also complain to a data protection authority.
[OWNER] Name the supervisory authority of the owner's federal state.