Scope and operator
This policy applies to airateface.com, its free on-device tools, optional account system, payment endpoints and Full Report service. “AI Rate Face,” “we” and “our” refer to the operator of this site. Contact: contact@airateface.com.
For a step-by-step technical view, read How We Process Your Photo.
Free on-device analysis
Every free tool decodes the selected image, detects landmarks, reads bounded pixel samples and calculates results in browser memory. The free photo, landmarks and result are not sent to our analysis API and are not written to our database or object storage.
Face-shape analysis stores a small summary in this tab’s session storage for up to 30 minutes: seven match weights, five measurements, the result source, model and classifier versions, and creation time. Hairstyle, glasses and haircut-guide pages use it without another photo. It contains no image or full landmark set. Clear the result in those tools to remove it; expired summaries are removed when the tools next read them.
Live scans process camera frames locally in a Web Worker and stop the camera when cancelled, completed, hidden or left. If you enable measurement downloads before scanning, accepted frame measurements remain in page memory until you start again, clear the result or leave. Downloads and research-comparison files stay on your device unless you choose to share them. Hair preferences stay in the current page and are not sent to analytics.
Ordinary site delivery still exposes normal network metadata—such as IP address, browser information, requested asset and timing—to Cloudflare so it can deliver and protect the website.
Optional account and payment data
Google sign-in provides a provider account identifier, display name, verified email and optional profile image. Better Auth also stores session identifiers, expiry, IP address and user-agent information. OAuth tokens are encrypted before D1 storage. We request only basic sign-in scopes, not Drive, Contacts or Gmail access.
Stripe Checkout handles payment details. We receive transaction identifiers, selected credit pack, amount, currency and status so we can reconcile payment and update the wallet ledger. We do not receive or store full card numbers or card security codes.
Full Report photo and output
After sign-in, a sufficient wallet balance and explicit consent, the browser sends a resized portrait through our Cloudflare Worker to OpenRouter and the configured model provider. The request asks for zero-data-retention routing and denies provider data collection.
Our code holds the image only for the active request and does not write it to D1, R2, logs or a public URL. We save the structured report text, scores, model and scoring versions, timestamps and associated account ID so the user can revisit it.
The paid model also checks face count, photo suitability and whether adulthood is reasonably clear. A safety refusal is not saved as an age estimate and automatically returns the 10 report credits.
Optional analytics and contact messages
Google Analytics loads only after affirmative consent. If enabled, it may receive page views and bounded product-funnel events. We do not include the selected photo, face landmarks, report text, score, Google email, Stripe identifier or image-quality values in analytics events.
With your consent, Google Analytics may set first-party cookies containing random identifiers and process device/browser information, page activity and IP addresses during collection. Google states that Analytics does not log or store IP addresses. This is usage measurement, not a promise of anonymity. See Google’s explanation of Analytics data collection.
We store your analytics choice in this browser’s local storage. You can decline it when prompted or clear this site’s data in your browser and choose again. Optional sign-in uses necessary session cookies separately. The current website does not serve display ads; any future advertising cookies and consent controls will be disclosed before ads are enabled.
If you email us, we receive your address, message and information you choose to provide. Do not attach a face photo or government identity document to an initial privacy request.
Retention
- Free photo and result: current tab only, unless you download a file to your own device.
- Paid photo: no application persistence; processor handling follows the request and provider policies.
- Sessions: normally up to seven days, with ordinary refresh behavior.
- Account and report text: until account deletion or a valid deletion request.
- Billing and webhook records: as needed for payment reconciliation, security, accounting, taxes, disputes, fraud prevention and legal obligations.
- Analytics: according to our configured analytics retention and only when consented.
Your choices and rights
You can use the free product without an account, decline analytics, avoid the Full Report, clear local state, download only what you choose, sign out, and delete your account from the Account page. Account deletion removes the profile, sessions, wallet ledger and saved report text; unused credits are forfeited unless applicable law requires otherwise. Some pseudonymous payment records may be retained where legally necessary.
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, request portability or complain to a regulator. Email contact@airateface.com with “Privacy request.” We may need proportionate verification before acting.
Adults only
The service is for people aged 18 or older. Do not analyze or submit a photo of a minor. If we learn that account or report data relates to a minor, contact us so we can investigate and remove it where appropriate.
Changes
We may update this policy as the product, providers or law changes. The effective date above identifies the current version. Material changes will be reflected here before or when they take effect.