Privacy Policy
Last updated: October 8, 2026
Version: 0.1
This policy explains what happens to your information when you use HairTryOn at hair-tryon.pages.dev (the "Service"). The Service is operated by an independent developer ("we", "us").
The short version
- Your photo never leaves your device. Face detection runs inside your browser. We never receive, upload, or store your photo or your facial measurements.
- They're cleared when you close or refresh the page. We don't save them in cookies, local storage, or anywhere else.
- We use Google Analytics to see how the site is used, such as page views and button clicks. Analytics never includes your photo or face data.
- We don't sell your personal information.
1. Your photo and face data
When you choose or take a photo and tap "Agree & analyze":
- The photo is loaded into your browser's memory.
- Software in your browser (Google's open-source MediaPipe Face Landmarker) detects points on your face, such as the outline of your jaw, cheekbones, and forehead.
- Your browser uses those points to estimate your face shape (for example oval, round, or square) and shows hairstyle suggestions.
All of this happens on your device. The photo, the facial points, and the face-shape estimate are not sent to us or to any third party. They are not used to identify you. Once you close or refresh the page, they're gone.
We only start this processing after you tap "Agree & analyze". If you don't agree, don't choose a photo; the rest of the site still works.
If you use your camera, your browser will ask for permission first. We stop the camera as soon as the photo is taken.
2. Biometric privacy notice (Illinois, Texas, Washington and other states)
Some laws treat facial geometry, or face images from which an identifier could be extracted, as biometric data. Our practice:
- Collection: We do not collect, receive, store, or have access to your face image or facial geometry. Processing happens only in your browser, and only after you consent.
- Purpose: The only purpose is to estimate your face shape and show hairstyle suggestions during your visit.
- Retention and destruction: We do not keep this data. It exists only in your browser's memory while the page is open, and it is destroyed when you close or refresh the page. In any case it is never kept longer than your visit.
- Sale and disclosure: We never sell, lease, trade, or disclose face data, and we never profit from it.
3. Information we do collect
| What | How | Why |
|---|---|---|
| Usage data: pages viewed, buttons clicked, approximate location (city or country), device and browser type, referring site | Google Analytics 4 cookies and scripts | To understand which pages and features are used and to improve the Service |
| Technical data: IP address, browser user agent, time of request | Automatically sent by your browser when it loads our pages and the face-detection files | To deliver the website and the face-detection software, and to keep the Service secure |
We do not ask for your name, and we do not create accounts. We do not collect payment information; no paid features are available yet.
4. Cookies
We use Google Analytics cookies only:
| Cookie | Set by | Purpose | Expires |
|---|---|---|---|
_ga | Google Analytics | Distinguishes visitors | Up to 2 years |
_ga_<ID> | Google Analytics | Keeps session state | Up to 2 years |
If you visit from the European Economic Area, the United Kingdom, or Switzerland, these cookies are off until you click "Accept" in our cookie banner. You can change your choice at any time by clicking "Cookie settings" in the footer of any page.
Wherever you are, you can block or delete cookies in your browser settings, or install Google's opt-out add-on: https://tools.google.com/dlpage/gaoptout
Do Not Track: Our site does not change its behavior based on browser "Do Not Track" signals. Because we don't sell or share personal information for targeted advertising, there is no sale or sharing to opt out of.
5. Who processes data for us
| Provider | Role | Data | Privacy policy |
|---|---|---|---|
| Cloudflare, Inc. | Website hosting | IP address, request data | https://www.cloudflare.com/privacypolicy/ |
| Google LLC (Google Analytics) | Usage statistics | Cookie ID, usage data, approximate location | https://policies.google.com/privacy |
The face-detection software and model file are served from our own site through Cloudflare, not from a third-party server. None of these providers receives your photo or face data. Google Signals and ad personalization are not enabled, and we don't use your data for targeted advertising.
6. Email
We don't collect email addresses through the Service and don't send newsletters. If you email us, we use your address and message only to reply to you.
7. How long we keep data
| Data | Retention |
|---|---|
| Photo, facial points, face-shape estimate | Not kept. Cleared when you close or refresh the page |
| Google Analytics data | Google Analytics event data is kept for 2 months (the GA4 minimum setting), then deleted automatically by Google |
| Technical request data | Kept by Cloudflare and Google under their own policies; we don't keep copies |
8. Legal bases (EEA, UK, and Swiss visitors)
- On-device face analysis: your consent, given by tapping "Agree & analyze". We never receive this data.
- Analytics cookies: your consent through the cookie banner. You can withdraw it at any time.
- Technical request data: our legitimate interest in delivering and securing the website.
9. Your rights
Depending on where you live (for example in the EEA, the UK, or California and other US states with privacy laws), you may have the right to:
- access, correct, or delete your personal information;
- object to or restrict processing;
- withdraw consent;
- receive a copy of your data;
- opt out of the sale or sharing of personal information. We don't sell or share it.
To make a request, email hello@howtallai.com. We won't discriminate against you for exercising your rights. Because we never receive your photo or face data, there is nothing of that kind for us to delete or return. For analytics data, clearing your cookies breaks the link between you and past usage data.
If you're in the EEA or UK, you can also complain to your local data protection authority.
10. Children
The Service is not directed to children under 13, and we don't knowingly collect personal information from them. Users under 18 should use it only with a parent's or guardian's permission. If you believe a child has given us personal information, contact us and we will delete it.
11. International transfers
Our providers may process technical and analytics data in the United States and other countries. Where required, they rely on legal transfer mechanisms such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
12. Security
Face analysis runs on your device, so your photo is never exposed in transit to us or stored on any server. The site is served over HTTPS. No method of transmission or storage is perfectly secure, but we keep the data we hold to a minimum.
13. Changes
If our practices change, for example if a future feature processes photos on a server, we will update this policy before the change takes effect and ask for your consent where required. The "Last updated" date at the top shows the latest version.
14. Contact
HairTryOn, operated by an independent developer
Email: hello@howtallai.com