YOUR FACE.
YOUR RULES.

What we collect

To deliver a paid personal rating we collect your email address, at least two photos of yourself (face close-up and standing photo), optional extra photos, your first name, age, chosen feedback tone, preferred reviewer group (men, women or mixed) and versioned consent, a transaction/order identifier and the final score/comment. The payment processor separately collects payment details. Our app does not receive your full card number.

Why we process it

Your photos and preferences are used only to create the private, subjective entertainment review you order. We do not create public profiles, sell submitted photos, or use them to train facial recognition or generative AI systems.

Who sees the photos

Multiple authorized human reviewers assess your photos privately. Each reviewer's identity is protected and is not disclosed with your verdict. There is no public gallery or AI scoring. We'll give you your verdict by email. The waiting page reports your order status.

How long we retain information

• Unpaid and failed-upload photos and their stored questionnaire copy are scheduled for deletion from active storage after 24 hours. Failed deletions are retried while the app is running. A limited unpaid submission record is kept for up to 90 days to reconcile late payments.
• For paid orders, normalized photos and the stored questionnaire copy are scheduled for deletion after Resend accepts the verdict email. Failed deletions are retried. Refunds and cancellations stop review access and request deletion. Pending reviews and failed deliveries have a maximum 30-day photo retention window, after which the review is stopped and support must resolve the order.
• The private verdict can be revealed once. Upon claiming it, the score and comment are removed from the active application database. Unclaimed verdicts expire after 7 days.
• Limited transaction data such as email, payment reference, payment status and order timestamps may be retained to comply with payment, accounting, anti-fraud and legal obligations.
• Infrastructure backups or processor records, where applicable, may have their own retention cycles. Do not interpret active-storage deletion as a guarantee of instantaneous erasure of every possible backup.

Security

Photo files are stored in private Cloudflare R2 and questionnaire answers in our restricted database. Temporary original uploads use signed, five-minute upload URLs and are scheduled for deletion after URL expiry and processing. Authorized reviewers see normalized images; we do not retain thumbnails or extra image variants. Older submissions may also have a private questionnaire copy in R2. Older local submissions, if any, remain outside the public website folder until deleted. They are available only through an admin-authenticated endpoint. The website must be deployed behind HTTPS and protected with a strong admin password. Transport encryption protects uploads in transit when HTTPS is enabled. Never deploy this service publicly over plain HTTP.

Age and consent

Use is restricted to adults aged 18 or older submitting photos of themselves. We don't knowingly accept images of children or images uploaded without the subject's consent. Do not upload nudity, intimate photographs or unlawful content.

Payments and email

Stripe handles payment processing (when enabled). Resend sends acknowledgments and secure verdict links, without photo attachments. Only the submission ID and service description are included in Stripe order metadata; questionnaire answers and image links are not sent to Stripe. Stripe collects its own checkout details. Those providers may independently retain data under their privacy terms.

Requests and contact

For data access or deletion requests and payment support, use the business contact provided at checkout or in the email from our service. The operator must provide a working contact address before launch.