Privacy Policy

The short version

• Photos and Private mode videos never leave your device. Face detection and blurring run inside your browser. We do not receive, store or see the file.
• We find where faces are, not who they are. The tool draws boxes around faces and follows each box by its position. It does not recognise people, does not build face templates or face prints, and does not compare faces between videos.
• We do not sell your data and we do not use your files to train models.

Photos and videos

Photo blur and Private mode (on this device). Your file is opened by your own browser. The face detector (Google MediaPipe) is downloaded from our server as a model file and then runs locally. The blurred result is made in your browser and saved straight to your device. No copy is uploaded to us or to anyone else.

Cloud mode. Cloud mode, which processes a video on our servers with a stronger detector, is not open yet. Before it opens we will update this page to say where uploaded videos go, which provider processes them, and when they are deleted. Nothing is uploaded unless you choose Cloud mode yourself.

Face data

When you pick who stays clear, the page shows a small thumbnail of each face it found. The thumbnails are made in your browser and disappear when you close the page. We do not collect or keep biometric identifiers, face geometry, or anything that could identify a person by their face.

Account data

If you create an account we keep your email address, your name if you give one, and how you sign in (email and password, or Google). Passwords are stored only as a one-way hash.

Payment data

Paid plans are not on sale yet. When they are, checkout will run through PayPal, and you will be able to pay by card without a PayPal account. We never store full card numbers or your PayPal password. We keep the order amount, date and status so we can add your credits and answer billing questions.

Visit counts

To know how many people visit, we count page views without cookies. For each visit we store a one-way code made from your IP address, your browser type and a random value that changes every day, plus the page you landed on and the kind of site that sent you (for example a search engine). We do not store your IP address or browser details, and the code cannot be linked across days or tied to your account. Automated browsers are not counted. These counts are deleted after 90 days.

Optional usage statistics

This is separate from the cookies that keep you signed in. It stays off until you choose Allow at the bottom of a page, and you can change the choice there at any time. Sign-in, blurring and payment work either way.

If you allow it, this site stores two cookies on this browser: fb_anon (up to 400 days) and fb_sid (30 minutes). Both are HttpOnly and SameSite=Lax, and Secure on HTTPS. A third cookie, fb_measure, remembers only the words Allow or Don't allow. A fourth, fb_erase, is a retry flag used while a deletion is being confirmed.

While it is on, we record page views, sign-ups, downloads and checkouts. After you sign in, these events can be tied to your account id and order id, so they are not anonymous. We never record your email, payment details, file names or file contents. Events are deleted 90 days after we receive them.

Choosing Don't allow stops new statistics on this browser immediately and deletes the rows already stored for this browser. If that deletion does not go through, the page says so and you can try again. A browser Do Not Track or Global Privacy Control signal is treated as Don't allow.

Your rights

You can ask us to show you or delete your account and data at any time by email. Depending on where you live (for example under the GDPR or the CCPA) you may have more rights, and we will honour them.

Children

FaceBlur.org is not meant for children under 13, and we do not knowingly collect their data.

Contact

Questions about privacy: support@faceblur.org