Privacy

It is never transmitted. There is no upload endpoint on this site. Whether you use your camera or choose a file, the image is decoded into a canvas element in your own browser, measured there, and never sent anywhere. You can verify this yourself: open your browser’s network tab while running the analysis and you will see no request carrying the image.

The face-detection model runs locally too. We host the model file and its WebAssembly runtime on our own domain rather than loading them from Google, specifically so that running the analysis does not tell any third party that you are doing it.

One thing we do keep, on your device: a small cropped cut-out of your face, stored in your browser’s session storage. This exists so your report can still show your face after you come back from the payment page. It is erased the moment you close the tab, and it is never transmitted either. The original full photo is discarded as soon as it has been measured.

If you would rather nothing at all were kept, skip the photo step — the questionnaire alone still produces a result.

Your quiz answers are stored in your own browser’s local storage so that a refresh does not lose your progress. They stay on your device. Clearing your browser data removes them.

Payment is handled by Stripe on Stripe’s own checkout page. Your card details never touch this site. We receive a confirmation that a payment succeeded and the season slug attached to it — no name, no address and no card data are stored by us. Stripe’s own privacy terms cover what they hold.

No advertising pixels, no cookies and no cross-site tracking. We count page views using Cloudflare Web Analytics, which sets no cookies, builds no profile of you and cannot follow you to any other site. It records that a page was viewed, roughly where in the world from, and how fast it loaded. That is all we get, and we cannot single you out in it.

To be precise about one thing rather than claim more than is true: the small script that does the counting is served by Cloudflare, so it is technically a third-party request. We chose Cloudflare over the privacy-focused alternatives for exactly that reason — Cloudflare already hosts this entire site and serves every byte of it, so the counter tells them nothing their own server logs do not already show. Any other analytics provider would be a genuinely new company learning that you had been here. It is the same reasoning that makes us host the face-detection model ourselves instead of loading it from Google.

Nothing about your analysis is recorded anywhere. Not your answers, not your season, not your measurements, not whether you finished, and certainly not your photo. We can see how many people opened the quiz page. We cannot see what any of them got.