Privacy Policy

Effective date: October 28, 2026 · Last updated: October 29, 2026

This policy applies to Attractiveness Check (attractivenesscheck.com, the "Service", "we", "us"). This policy explains:

• what personal information we collect,
• why we collect it,
• who receives it,
• how long we keep it, and
• your rights.

For photos and facial measurements, our Biometric Data Policy also applies. If you live in Washington, see our Washington Consumer Health Data Privacy Policy.

1. The short version

• The free score runs on your device. Your photo and facial measurements are not sent to us unless you buy a report.
• If you buy a report, your photo, your hairstyle previews and your facial measurements are kept with your report so it can show them, and deleted with it 12 months after purchase, or sooner if you click Delete my data. Backup copies are overwritten within 7 days.
• The exact positions of points on your face never leave your browser.
• No account needed for the free score. To buy a report, you sign in with Google or with a code we email you. Your account holds only your email, your name and your purchases, and you can delete it at any time.
• We don't sell your data. We don't show ads, and we don't use advertising pixels or cross-site tracking. On our public pages, including the free test and the face shape tool, we use Google Analytics to count visits and see how long people stay. We never send it your photo, measurements or score; in the EU, UK and Switzerland only if you allow it, and anyone can turn it off on our Cookie Notice.
• We don't use your photos or face data to train AI models.
• You can delete your data at any time with Delete my data, or by emailing support@attractivenesscheck.com.

2. Information we collect

Information you give us

• Age confirmation: that you are 18 or older. You confirm it before the free score, and again before you pay for a report, when you also agree to this policy and our Biometric Data Policy.
• Gender (man, woman, or prefer not to say). It doesn't change your score. If you buy a report, it is sent with your photo and decides whether your report covers beard or makeup.
• Your selfie. For the free score it stays on your device. If you buy a report, a smaller copy is uploaded after payment.
• Optional answers, after you pay: what matters most to you in the report, and how much time you want to spend on styling each day. You can skip them. If you answer, they are sent with your photo and shape your report.
• Hairstyle feedback: if you tap "Love", "Maybe" or "Not me" on a hairstyle in your report, we store that with your report.
• Account, when you buy a report: your email address and your name, if you give one. We use them to sign you in, to show your purchases under My reports, and to send your sign-in codes, receipt, report link and up to two reminders about your report. There is no password.
• Messages you send us, such as support, refund and privacy requests.

Information created during the analysis

• Facial measurements from your selfie, calculated in your browser. We receive them only if you buy a report. See the Biometric Data Policy.
• Photo readings and sampled colours: if you buy a report, your browser also sends a few readings of your photo (such as brightness, sharpness and head angle) and colours sampled from your skin, hair, eyes and lips. They are treated as Face Data under the Biometric Data Policy.
• Hairstyle previews: if you buy a report, an AI creates three images from your photo showing you with a different haircut.
• Results: your score, score label and the strongest part of your score. For the free score these stay in your browser. If you buy a report, we also store your report: presentation scores (such as lighting, expression and hairstyle), face shape, a colour palette, celebrity look-alikes, an apparent age range and written advice.
• "Dating photo review" interest: if you tap this button on your report page, we note that you're interested. We don't use it to contact you.

Your report describes how your skin looks in your photo and its light. We do not identify, diagnose or infer any skin, medical or health condition. The celebrity look-alikes are an AI's description of general features in your photo, for fun; we do not compare your face with any database of faces.

Information collected automatically

• Basic technical data: IP address, browser type, device type, pages visited, and error logs. We use it to run, secure and fix the Service.
• Daily visit totals. For every visitor, our own server counts visits to our public pages as daily totals: the page, the website or campaign that sent you, your country and your device type (phone, tablet or computer). This uses no cookies and runs no code in your browser, and we don't store your IP address or any identifier, so these totals can't be linked to you.
• Anonymous step and score totals. Your browser tells our server when certain steps happen, such as reaching a free result or creating a share card, and sends the scoring version and score of each free result. These messages contain no identifier, cookie or link to you or your photo, and we only keep them as daily totals. We use the score totals to check that scores are spread as intended.
• Google Analytics, on our public pages. On the home page, the free test, the face shape tool, the sample report, How scoring works, our policies, the sign-in page and My reports, Google Analytics sets its own cookies and tells Google which of those pages you open, how long you stay, the website that sent you, and your browser, device and approximate location. On the free test and the face shape tool it runs in the same page as your photo, but we send it nothing about your face: your photo is analysed on your device, and your photo, measurements and score are never sent to Google. It never on your report, the payment confirmation page, the page for adding a photo to your report or the password pages, whose addresses hold private keys, so it never sees your report or your report link. We turned off Google signals and ad personalization, and we don't send Google your name, email or any account identifier. Visitors from the EU, the EEA, the UK and Switzerland, or whose country we can't tell, are asked first and it stays off until they choose Allow. Elsewhere it is on unless you choose Decline on our Cookie Notice or your browser sends Global Privacy Control.

Information from Google, if you sign in with Google

Google tells us your name, your email address and that the address is verified. We don't receive your Google password, and we don't store your Google profile photo.

On pages that never handle your photo (the home page, the sample report, our policies, the sign-in page and My reports), Google may also show a one-tap prompt that offers to sign you in with the Google account already open in your browser. To show it, Google's code loads from Google in your browser on those pages, and Google can see that you visited them. It never loads on the free test, the face shape tool, your result, your report or the payment confirmation page. If you use the prompt, we receive the same information as above.

Information from our payment provider

Stripe processes your payment. We never see your full card number. Stripe tells us:

• that the payment succeeded,
• the amount,
• your email,
• your billing country, your card's country and brand, and
• a card "fingerprint". This is a code that tells us when the same card is used again, so we can apply our once-per-customer refund rule.

3. How we use information

• To provide the free score and the report you request.
• To sign you in and show your purchases under My reports.
• To process payments, send receipts and report links, and handle refunds.
• To answer your messages and requests.
• To keep the Service secure, prevent fraud and abuse (including refund abuse), and fix errors.
• To understand, in aggregate, how the Service is used and improve it, using only the daily totals described above. We do not use photos or face data for this.
• To comply with the law.

We don't use your information for advertising, and we don't make decisions about you that have legal or similarly significant effects.

4. Who receives your information

We do not sell or rent personal information, and we do not "share" it for cross-context behavioral advertising. We disclose it only to the following.

Service providers (processors) that work for us under contract, only to run the Service:

Provider	What it receives	Why
OpenRouter and the AI companies it routes to (Anthropic and OpenAI)	If you buy a report: your photo, your gender answer, your optional answers, your score, and broad bands derived from your measurements, photo readings and sampled colours (not the values); to check the report, also the report text. No email, payment details or other identifiers.	Writing your report and checking it before it is sent
OpenRouter and the AI companies it routes to (OpenAI and Google)	If you buy a report: your photo and a written description of each hairstyle. No email, payment details or other identifiers.	Creating your hairstyle previews
Cloudflare	All Service traffic; if you buy a report, your photo and hairstyle previews in private storage until deletion	Hosting and storage
Neon	Reports, facial measurements, photo readings and sampled colours (until deletion), order and consent records	Storage
Stripe	Email, payment details	Payments, fraud prevention, refunds
Google	Your sign-in request, if you sign in with Google. On pages that never handle your photo, Google's code also loads in your browser, so Google sees that you opened those pages (never the free test, the face shape tool, your result or your report)	Signing you in, and showing the one-tap sign-in prompt
Google (Google Analytics)	On our public pages (not your report, payment confirmation or add-photo pages), and only as described in Section 3: the pages you open there, how long you stay, the website that sent you, your browser, device and approximate location, and a random ID in a Google Analytics cookie. No photo, measurements, score, report link, email or account ID	Counting visits and seeing how long people stay, so we can improve those pages
Resend	Email address, sign-in codes, and a link that opens your report. No photos, scores or measurement values are put in emails.	Sending sign-in codes, receipts and report emails
Cloudflare (Email Routing) and Google (Gmail)	Emails you send us, such as support, refund and privacy requests	Our support mailbox

Other cases

Photos and facial measurements are only ever disclosed as described in our Biometric Data Policy. The cases below do not widen the consent you gave on the biometric consent page.

• When a law, court order, warrant or subpoena requires it.
• To protect the rights, safety or property of our users, the public, or us.
• To a buyer or successor, if the Service is sold or transferred, for example to a company formed to run it. They must keep this policy's protections. Face Data is still deleted on the same schedule; it is never transferred as a business asset.

5. How long we keep information

Information	How long
Facial landmark positions	Never leave your browser
Photo, measurements and free score, if you don't buy a report	Never sent to us; they stay in your browser
Photo and measurements kept in your browser tab while you pay	Removed when sent, after 30 minutes, or when you close the tab
Photo and hairstyle previews, after you buy a report	Kept with your report; deleted 12 months after purchase, or sooner if you delete your data
Facial measurements, photo readings and sampled colours, after you buy a report	Kept with your report; deleted 12 months after purchase, or sooner if you delete your data. Backup copies are overwritten within 7 days. See the Biometric Data Policy.
Report: scores, face shape, gender answer, optional answers, hairstyle feedback, written advice	12 months after purchase, then deleted. Save it as a PDF if you want to keep it longer.
Account: email, name, the date you joined, and which purchases are yours	Until you delete your account
Sign-in session	7 days after your last visit, or until you sign out. We don't store your IP address or browser details with it.
Sign-in codes	10 minutes, or until used
Order records: email, amount, date, Stripe references	As long as tax and accounting law requires, usually up to 7 years. If you delete your account, they are no longer linked to it.
Consent records (no face data)	5 years, to show that we asked for and received consent
A test you start but don't pay for (consent link and payment session only, no face data)	24 hours
Support and privacy emails	24 months after the conversation ends
Server and error logs	30 days
Copies held by OpenRouter and the AI companies it routes to (Anthropic and OpenAI)	Up to 30 days (longer only if a provider's automated safety systems flag a request as violating its usage policy, up to 2 years at Anthropic, or if the law requires it)
Copies held by OpenRouter and the AI companies it routes to (OpenAI and Google)	Up to 30 days at OpenAI and 55 days at Google (longer only if the law requires it or a provider needs it to prevent harm)

If you request a refund, we deactivate your report link and delete the order's face data and report. We keep the order record for tax purposes.

6. Security

We use:

• HTTPS,
• encryption at rest,
• private storage with no public links for uploaded photos,
• long random keys for report links, kept out of logs,
• administrative access limited to the operator, and to service-provider staff who need it to do their contracted work, and
• short retention periods.

No system is perfectly secure. If a breach affects you, we will notify you as described in the Biometric Data Policy, Section 9.

Keep your report link private. Anyone who has the link can open the report.

7. Your rights and choices

Wherever you live, you can ask us to:

• access the personal information we hold about you, and get a copy;
• correct it;
• delete it; or
• withdraw your consent. This doesn't affect anything we did before you withdrew it.

How to ask

• Click Delete my data on your report page, or use My reports to delete one report's data or your whole account. Access stops immediately, and deletion follows the schedule in Section 5. If you haven't bought a report, we hold no photo or face data about you; you can remove your photo from your browser with Remove my photo from this device or by closing the tab.
• Or email support@attractivenesscheck.com from the email you used at checkout, or include your report link. We use these to confirm that the request is yours. You don't need to sign in to make a request.

What happens next

• We reply within 45 days. If we need more time, we'll tell you why within those 45 days, and take at most 45 more.
• When we delete your data, we also instruct our processors to delete it.
• We never charge more, or give a worse service, because you used your rights.

Appeals

If we decline your request, you can appeal by replying with the subject line "Appeal". We answer appeals in writing within 45 days. If we still decline, we'll tell you how to complain to your state attorney general, or to your data protection authority.

8. State-specific information

• Illinois, Texas and Colorado: our Biometric Data Policy is our public biometric retention and destruction policy. We ask for written consent before measuring your face.
• Washington: see our Washington Consumer Health Data Privacy Policy.
• California: we don't sell or share personal information for cross-context behavioral advertising. We use Google Analytics only to measure our own pages, with Google signals and ad personalization turned off. If your browser sends Global Privacy Control, we treat it as Decline and Google Analytics stays off.
• Other US states: you can use the rights in Section 7 wherever you live.

9. Users in the EU, UK and Switzerland

Controller: Attractiveness Check. Contact: support@attractivenesscheck.com.

Legal bases for processing

Purpose	Legal basis
The free score and the report you request; sending receipts and links	Performance of a contract
Facial measurements and photos	Your explicit consent, given on the consent page
Security, fraud prevention, and the anonymous daily totals in our own database	Our legitimate interests
Google Analytics cookies on our public pages	Your consent, given with Allow; you can withdraw it on our Cookie Notice
Tax records	Legal obligation

The only cookies that need your consent are Google Analytics cookies, and they stay off until you choose Allow. The browser storage we use, and the sign-in cookie set when you sign in, are strictly necessary to provide what you asked for; see our Cookie Notice.

International transfers

Our providers process data in the United States and other countries. Where required, we rely on the transfer safeguards in our providers' data processing terms, such as the European Commission's Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards at support@attractivenesscheck.com.

Your rights

You have the rights in Section 7, but we reply within one month rather than 45 days. Where the law allows, we may extend this by up to two more months, and we'll tell you why within the first month. You also have the rights to:

• restrict or object to processing,
• data portability, and
• lodge a complaint with your local data protection authority.

Refunds: you can request a refund within 14 days. See the Refund Policy.

10. Children

The Service is only for people aged 18 and over. We ask you to confirm this before the free score and again before you pay. We don't knowingly collect information from anyone under 18. If you believe a minor has used the Service, email support@attractivenesscheck.com and we will delete their data.

11. Photos of other people

Only use a photo of yourself, with no one else in it. If we detect more than one face, we ask for a different photo and don't score it. We never measure anyone's face but yours.

12. Changes

We'll post any changes here and update the effective date. If a change is material, we'll show a notice on the site. We will not use data already collected in a materially different way without asking for your consent.

13. Contact

Attractiveness Check · support@attractivenesscheck.com