Privacy Policy

This service has no accounts and collects nothing that identifies a person. A face photo is personal data, so we ask about it separately. Reading a photo starts only after you turn the switch on, and until then the photo chooser does not even open.

How a face photo is handled

• The photo you choose is read inside the browser only. It is not sent to a server, not sent to any external AI, and there is no upload feature at all.
• When the reading finishes the photo is dropped. No original, no reduced copy, and the photo is never drawn on the screen.
• The program and model that find face points are hosted on our own server. No outside script is loaded.
• What remains is numbers and a drawing on the screen, and they disappear when you close it. There is nowhere to save them.

Is this biometric identification data

Under the enforcement decree of the Korean personal information protection act, biometric data counts as biometric identification data when it was produced for the purpose of recognising or authenticating a person. That is not what this app does. It does not recognise anyone, it performs no identity check, and it neither creates nor keeps a value that singles a person out. It uses point coordinates to point at places, and those coordinates vanish when the page closes.

That said, we could not find an official interpretation on whether processing entirely on the device counts as no collection at all. We are saying so rather than hiding it. So we did not settle the question. We chose the safer path instead: ask separately, process only on the device, and store nothing.

If you are under fourteen, please look at this with a guardian. This app has no account, so it has no way to check an age, and it does not claim to.

What we never send

• Not the photo. Not the face coordinates, not the numbers we computed, not which place you looked at.
• We do not read your IP address or your device details (User-Agent), and we use no cookies.
• Connections leaving this site are blocked at the browser level, so even code that tried to send something could not.
• The face library we use (Google MediaPipe) contains code that posts usage statistics to a Google address. That is statistics rather than photos, but we did not put it there, so the same block stops it as well.

This site is served through Cloudflare, which automatically injects a visit-tracking script into our pages. We did not add it, so we have configured your browser to refuse it. That means the tracking call does not go out. The tag itself is still injected by that layer though, so we would rather you know about it than not. We do not use cookies.

What stays on this device

• One marker saying that reading a face photo was switched on. That is a single value in this browser.
• It starts off. It is off for everyone who arrives.
• Switching it off clears the marker, and the erase now button sits there whether it is on or off.
• On a shared computer we ask you, right at that spot, to press erase when you are finished.

The anonymous signals a server receives

• A step name (arrived, opened a place, switched reading on, finished a reading, shared), the interface language, the referral label we wrote into our own links (a short word carried in the link, or the domain of the previous page, never a path or a search term), and the date you came (year, month and day, with no time).
• Nothing about a face travels with it. Not which photo it was, not what any number came to.
• If something breaks on screen, that fact reaches the same place: we send only the error name (TypeError, for example) and an eight-character fingerprint of where it happened. We never send the error message, the stack, or the address, because what you wrote could be inside them. At most three per visit.
• These signals live in short-lived server logs and are not shared with third parties. To cover running costs we may show Google AdSense ads, in which case Google may use cookies or advertising identifiers for ads, under its own policy.

How to erase

Press erase now on the reading screen, switch the toggle off, or clear this site's data in your browser. That finishes it. There is no personal record on a server, so there is nowhere to file a request.

Business registration details and a contact address will be published here once registered.