Privacy Policy

Version 0.1, last updated July 29, 2026.

The plain-language summary

• Face analysis (landmarks, proportions, face shape) runs entirely on your device. Your photos and measurements are not uploaded for it.
• The live selfie camera runs in your browser. The camera feed never leaves your device.
• When you choose to render a style, your anchor photo is sent to the image provider once for that render and is not stored by us. That is the only time a photo ever leaves your device, and it happens only after you confirm it.
• There is no account, no password, and no photo library on our side.
• We do not sell personal information, run third-party ad trackers, or use your photos to train models.

What stays on your device

Your scan progress (one anchor photo, your answers, and your face shape result) is saved in your browser's local storage so an interrupted scan can resume, and it expires after 7 days. "Start over" clears it immediately. It is stored on your device only; we cannot see it.

Payment

Payment is handled by Stripe. Stripe collects your card details; we never see them. We keep a render-credit record keyed to your checkout session so your unlock works, associated with no name, email, or photo.

Analytics

We record first-party funnel events (for example "scan started", "verdict shown") under a random anonymous ID stored in your browser. No photos, no face data, no cookies, no third-party trackers.

What we deliberately do not collect

Photo libraries, face geometry, biometric identifiers, names, or email addresses. Haircut Verdict measures visible proportions to recommend haircuts; it does not identify anyone and is not a biometric identification system.

Deletion and contact

Because there is no account, there is nothing for us to delete: clearing your browser data removes everything on your side. Questions or requests: kelvin@doorstopper.io. Material changes to this policy will be dated at the top of this page.