KnowYourFaceShape
Menu

Free · No sign-up

Privacy

The short version

Your photo never leaves your device. We cannot see it, and we never could.

What that means technically

Face shape analysis on this site runs entirely inside your browser, using Google’s MediaPipe Face Landmarker compiled to WebAssembly. When you upload a photo or take one with your camera:

  • The image is read into your browser’s memory
  • Landmarks are detected on your device
  • Ratios are calculated on your device
  • The result is shown to you

At no point is image data included in a network request. You can verify this yourself: open your browser’s developer tools, switch to the Network tab, run an analysis, and inspect every request. None of them carry your photo.

What we do collect

  • Nothing about your face. We do not receive, store, process, or see any image data. We do not use any face data to train models, because we never have any face data.
  • Page views, counted by Cloudflare Web Analytics. This site is hosted on Cloudflare, which adds its analytics beacon to every page it serves. That beacon sets no cookies and shows no consent banner. Each page view reports the path of the page you are on, the time you arrived, the site that sent you, your browser and operating system family, and how long the page took to load. Cloudflare states that it does not store your IP address; that is their written commitment, not something we can verify from inside a browser.
  • Page views, counted again by Google Analytics 4. This one we load ourselves, as a script on every page. Each page load reports the address of the page you are on, cut short at the ? — a result page reaches it as /result/triangle/, the same form Cloudflare Web Analytics sees. It also reports when you arrived, the site that sent you with the same cut applied to its address, and your browser and operating system family. Unlike the beacon above, this tool writes a cookie: first-party, on this domain, holding a random identifier, and that identifier is how it tells a returning device from a new one. No consent banner asks you first; loading the page is what enrolls you, which is why the addresses worth knowing are these three — beacon.min.js, googletagmanager.com and google-analytics.com. Run document.cookie in your console to see what your browser holds. Block all three and nothing here changes for you: they only count visits, and the analysis runs on your device either way. What Google Analytics 4 does with what it receives is described by Google, in their own words rather than ours.

What your browser keeps while the tab is open

Two small things are written to your browser’s session storage, so the result page can draw its diagram and notice when two of our tools disagree:

  • the coordinates of the detected landmarks and your photo’s aspect ratio — a list of numbers, not pixels;
  • the name of the last face shape you were given, and which of the three tools produced it.

Session storage belongs to this tab alone. It is never sent to us, never readable by another site, and no image data is ever written into it.

What your device keeps until you clear it

When you reach a result page through one of our own tools — the quiz, the calculator, or a photo you just analyzed — that page saves a small record in your browser’s local storage: the durable kind, which outlives the tab. It holds the face shape you were given and which of the three tools produced it, a copy of the result page’s own address (which already contains your numbers; the next section explains what that address carries), and, for the photo and calculator routes only, those same numbers in the form the result page displays them. A quiz result has no numbers, so the quiz route saves none. Only the latest result is kept — a new one replaces the old.

It is only written when the result page follows directly from the tool you just used. Opening someone else’s shared result link saves nothing, and the record is never sent to us — it stays in your browser and is read only by this site, on your device, to show you the small “your saved result” line on articles, on tools, and — where your shape matches — on face-shape and hairstyle pages. To remove it, clear this site’s data in your browser’s settings (local storage, or “cookies and other site data”). Nothing else on this site writes to local storage.

What a result page address contains

Your numbers travel inside the result page’s own address. That is what lets a result link show the same numbers to whoever opens it. This site never uploads them — but anything you do with that address carries them with it, so it is worth knowing which numbers are in there. Which ones depends on the tool you used:

  • photo analysis: the three ratios between your four measurements, your jaw angle, and a confidence percentage;
  • tape-measure calculator: those same ratios and that angle, plus the four numbers you typed in, in centimetres or inches;
  • quiz: your seven answer scores, as percentages.

No image data and no landmark coordinates are in any of those. They are the ratios this site shows you on the result page anyway, in the same form.

We checked whether Cloudflare Web Analytics picks those numbers up, since it reports the page you are on. It does not. We read the beacon’s own source and captured the reports it actually sent from a result page carrying measurements: everything after the ? is removed before the report is built, so it sees /result/triangle/and never the numbers behind it (beacon version 2026.9.1). Sending that link to another person is still entirely your choice, and we cannot see who you send it to.

The Google Analytics 4 script added on 23 September 2026 is told to do the same: the address we hand it is built from the path alone, so those numbers are not part of what it sends either.

What happens when you close the tab

Your photo and your landmarks are gone. They existed only in your browser’s memory, which the operating system reclaims when the tab closes, and the session-storage numbers described above are scoped to the same tab, so they go with it. There is no server-side copy of either to delete, because we never had one. The saved-result record is the exception: it lives in local storage, not session storage, and stays on your device until you clear it.

The other thing that outlives the tab is the page-view record: which path was visited, and when, in the Cloudflare Web Analytics and Google Analytics 4 dashboards. It is a visit count, not a profile — there is no name, no account, no photo and none of your numbers attached to it — and we have no way of our own to reach into either one and delete a single visit. Whether their own controls go that far is a question for the policies linked above, and we would rather say so than imply otherwise.

Biometric data laws

Face images are classified as biometric data under GDPR Article 9 (EU), BIPA (Illinois), CUBI (Texas), MHMD (Washington), and as sensitive personal information under CCPA/CPRA (California).

Because we never collect your photo, we never process an image or a face template — the thing these laws are actually written about. What can leave your device is the handful of ratios described above, and only inside a result address you share or your own browser’s history. They sort you into one of seven very broad buckets; nobody can rebuild a face from those, and on our side there is nothing held, so there is no explicit consent to obtain, no retention period to publish, and no deletion mechanism to build.

We will not promise that a visit can never be tied back to you, because that depends on what Cloudflare Web Analytics and Google Analytics 4 keep under their own policy rather than on anything we control.

Third-party advertising

This site will show third-party advertising. The page you are reading right now carries no ad code — when advertising goes live, this section will name the ad network before the first ad appears, and will say exactly what it stores.

What ad networks generally do, and what stays in your control: an ad provider may use cookies and similar browser storage to choose which ads you see based on your prior visits to this and other sites, to limit how often you see the same ad, and to measure how ads perform. You can delete or block cookies in your browser settings without losing anything here — face shape analysis runs entirely on your device either way. Industry opt-out pages such as aboutads.info/choices (US) and youronlinechoices.com (EU) let you turn off interest-based advertising from participating companies.

No photo, landmark, or face measurement from this site can ever reach an ad network, for the same reason it can never reach us: none of it leaves your device.

If this ever changes

We have no current plan to send photos to a server. If we ever build a server-side API (for example, for developers who want to integrate face shape detection into their own products), it would be a separate service with its own terms, its own consent flow, a published retention period, a deletion mechanism, and a commitment not to use submitted images for model training. This privacy policy would be updated before, not after, any such change.

Contact

contact@knowyourfaceshape.com