Scope
This policy explains how Face Finder ("Face Finder", "we", or "us") handles personal information when you use face-finder.org, create an account, buy search credits, contact support, or run a face search.
Face images can be sensitive personal information and may be treated as biometric information in some places. Please read this policy before uploading an image.
Information we collect
- Account data: your name, email address, encrypted login credentials, Google sign-in identifiers if you choose Google, account role, and session records.
- Search data: the image you submit, its original filename, the search status, result images, confidence scores, public source links, timestamps, and technical error information.
- Payment data: plan, credit package, transaction status, Stripe customer and transaction identifiers, and billing status. Stripe collects and processes your full card details; Face Finder does not store them.
- Communications: information you send through our contact form or support email.
- Technical and security data: IP address, browser and device information, request logs, and information used to prevent fraud, abuse, or unauthorized access.
The image you select remains on your device while you sign in or choose a plan. It is sent to Face Finder only when an authenticated, paid search begins.
How we use information
We use this information to:
- provide, process, and display your face-search report;
- authenticate your account and protect the service;
- process purchases, manage credits, and issue automatic credit returns for provider failures;
- retain a private case history for your account;
- answer support requests and send essential account messages;
- diagnose errors, prevent misuse, and comply with applicable law; and
- improve service reliability and usability.
Face Finder does not use uploaded images to create its own biometric identity database, train a Face Finder model, sell advertising profiles, or certify a person's identity.
Face-search providers and other processors
To operate the service, we disclose only the information needed to service providers acting on our behalf or providing a feature you request. These include:
- an authorized third-party face-search provider, which receives the submitted image to perform the requested search;
- Cloudflare for application delivery, security, and short-lived R2 object storage;
- Neon for managed PostgreSQL database hosting;
- Stripe for checkout, payment, billing, and fraud prevention;
- Resend for transactional email; and
- Google when you choose Google sign-in.
These providers may process information in countries other than your own. Their own terms and privacy notices may also apply when you interact directly with their services, such as Stripe Checkout or Google sign-in.
We may also disclose information if required by law, to protect users or the service, in connection with a business transfer, or with your direction or consent. We do not sell personal information.
Retention and deletion
- Submitted search images and cached result thumbnails are written to a dedicated Cloudflare R2 prefix configured for deletion after 24 hours.
- The private case record—including timestamps, status, confidence scores, and source links—may remain in your account after the images expire so that you can retain an audit trail.
- Account, payment, security, and support records are kept only as long as reasonably needed for the service, legal compliance, dispute resolution, and fraud prevention.
Deleting your account removes or de-identifies account-linked data where we are not required to retain it. Copies can remain temporarily in encrypted backups or where retention is legally required.
Legal grounds and your choices
Depending on where you live, we process information to perform our contract with you, for legitimate interests such as service security and support, to comply with law, or with your consent where consent is required.
You may have rights to access, correct, delete, restrict, object to, or obtain a copy of your personal information, and to withdraw consent. You may also have the right to complain to your local privacy regulator. To make a request, email support@face-finder.org. We may need to verify your identity before completing it.
Your responsibilities
Upload a face image only when you have the legal right, permission, or other lawful basis to use it. Do not use Face Finder to stalk, harass, discriminate, identify children, or make employment, housing, credit, insurance, policing, or other high-impact decisions.
Security
We use technical and organizational safeguards designed to protect information, including encrypted network transport, access controls, private account-scoped case records, and server-side provider credentials. No online service can guarantee absolute security.
Children
Face Finder is for adults aged 18 or older. Do not upload images of children or use the service to try to identify a child.
Changes and contact
We may update this policy as the service or law changes. The date above shows the latest version. Material changes will be communicated through the site or account email when appropriate.
Questions, privacy requests, and image-removal concerns can be sent to support@face-finder.org or through our contact page.