Privacy policy
Last updated 2026-10-04. Questions: support@getfacetwin.com
The short version
- Free lookalikes and face analysis run in your browser. Your photo, its landmarks and its face descriptor are never sent to us.
- Paid AI portraits and reports upload your photo once, only after a separate consent. It is passed to our AI provider, used for that single result and deleted right after. We never use it for training.
- Results are kept in your account for 7 days, then deleted automatically.
- We don’t sell data and we don’t run advertising.
What we collect
- Account: when you sign in with Google we receive your email address. We store it encrypted, plus a keyed hash to recognise you next time.
- Payments: handled by Stripe. We receive the payment status and amount, never your card number.
- Usage analytics: Google Analytics 4 records anonymous page views and button events (for example “analysis completed”). It never receives your photo, scores, matches, landmarks or email.
- Security logs: standard server logs (IP address, time, path) kept for up to 30 days to prevent abuse.
- Session cookie: one first-party cookie keeps you signed in. Google Analytics sets its own cookies when enabled.
Celebrity thumbnails
Thumbnails next to your lookalike results load directly from Wikimedia Commons. Your browser therefore contacts Wikimedia when results are shown; no photo or face data is included in that request.
Processors
Vercel (hosting), Supabase (database and storage of generated results), Stripe (payments), Google (sign-in, analytics) and OpenRouter with the model provider it routes to (AI generation, only for paid results you request).
Your rights
You can ask us to access, export or delete your account data at any time by emailing us from the address you signed in with. Deleting your account removes your credits and results. Residents of the EU/UK and US states such as California, Illinois, Texas and Washington have additional rights, which we honour for everyone.
See also our biometric policy and terms.