Privacy policy

Last updated: October 4, 2026

This policy explains how Attractiveness Test (“we”, “us”) handles personal data when you use Attractiveness Test.

The free test stays on your device

The attractiveness test and the face symmetry test run a face landmark model inside your browser. The photo you choose, or the camera frame you take, is analysed on your own device. For the free tests we do not upload, receive or store your photo, a camera stream, or the face mesh the model produces. The model files are served from this website, not from a third party.

The paid Face Report uses one photo, with your consent

A Face Report contains images generated from your photo, so it cannot be made on your device. After you pay, you choose a photo and tick a box confirming that it may be uploaded. Only then is it sent to us. We remove its metadata, check it for prohibited content, and store it privately with your report. To create the report we send the photo and your measurements to AI providers acting on our behalf: a vision and language model (Google Gemini by default) for the written analysis and an image model (Google Gemini image editing) for the styling concept and hairstyle images, both reached through fal.ai. We ask these providers to process the photo only to return your result. The photo and generated images are served only to the browser or account that owns the result. They are kept until you delete the result, and deleted with it.

Information we collect

Saved results. A test you do not save leaves nothing on our servers. If you choose “Save result”, your browser sends the numbers measured from the photo: ratios, angles and percentages such as eye spacing, facial thirds and head angle, together with three expression values (smile, open mouth, blink). We recompute your score from these numbers and store them with the time. They describe proportions; they are not a face template and cannot be used to recognise you or rebuild your photo. Because they are derived from your face, we treat them, and any photo you upload for a Face Report, as sensitive and process them only with your consent.

A copy in your own browser. When you save a result, a small annotated copy of your photo is kept in this browser tab’s session storage so the result page can show it. It never leaves your device and is removed when you close the tab.

Ownership cookie. A saved result is linked to a random, essential browser cookie, and to your account if you sign in. Only that browser or account can open it.

Report content. For a Face Report we store your uploaded photo, the generated images and the written analysis, which includes observations such as hair, eye and skin colouring. We do not ask the models for, or store, your age, gender, ethnicity or health.

Account data. You sign in only to buy a Face Report. If you sign in with Google or email, we receive your account identifier, name, email address and profile image so the purchase stays attached to your account.

Billing data. Stripe processes payment details. We receive the checkout session, payment status, amount and transaction identifiers, but not full card numbers.

Technical and analytics data. Essential logs may include IP address, browser details, timestamps, security events and errors. If you consent, Google Analytics 4 and Microsoft Clarity may collect page use, interaction, device and session data on public pages. Session recording never runs on the page where you take the test, and analytics never receive your photo, measurements or score.

How we use data

We use data to show saved results, create the Face Report you buy, process payments, secure accounts, prevent abuse, support customers and meet legal or tax obligations. We do not use photos or face measurements to identify anyone, to train models, for advertising, or for any decision about you. We never sell them. We may compute aggregate, anonymous statistics that cannot identify you.

Processing partners

We share only what is needed with Google for sign-in and optional analytics, Stripe for payments, Microsoft for optional Clarity analytics, fal.ai (and the model providers it routes to, such as Google) for creating a Face Report you bought, and our hosting and database providers. Photos and face measurements are never shared with analytics or advertising partners. These partners may process data in other countries under their terms and legally recognized transfer safeguards.

Retention and deletion

Saved results are kept until you delete them or request account deletion. You can delete any result from its result page at any time; this permanently erases its measurements, your uploaded photo, the generated images and the written report. Payment and tax records held by Stripe and us may be retained for the period required by law.

Cookies

Essential cookies keep your session and identify the browser that saved a result, so it stays private to you. Optional analytics run only after you choose “Allow analytics”, and you can change that choice in the cookie policy.

Where Clarity is enabled, with your analytics consent we associate signed-in visits on approved public pages with a site-prefixed internal account ID to understand visits across devices. Clarity hashes this identifier before transmission. We do not supply your email or name through this feature. Signing out or switching accounts ends the current recording and clears Clarity cookies. Private pages remain excluded. You can withdraw analytics consent in Cookie preferences.

Your rights

Depending on where you live, you may request access, correction, deletion, portability, restriction or objection, and may withdraw consent at any time by deleting your saved results. Email [email protected]. We may need to verify your identity. You may also complain to your local data-protection authority.

Other people’s photos

Only test photos of yourself, or of adults who have agreed to it. Do not use the service on photos of children.

Children

The service is not directed to anyone under 18.

Security and changes

We use access controls, secured cookies, server-side credentials, signed Stripe webhooks and encrypted transport. No system is completely secure. Material changes will be posted here with a new date.

Contact

Data controller: Attractiveness Test. Privacy questions: [email protected].