Privacy
The short version
Live camera video stays in your browser. One selected still is sent to the studio and its configured model provider to make your portrait. The app requests no provider payload storage and does not persist that source still itself. Your finished portrait is private unless you choose to publish it.
What the studio receives
The browser checks framing and stillness on your device with a bundled detector. When you consent and continue, it sends one selected image, your chosen artist, your name, the current privacy notice version, and coarse camera-quality measurements. An email address is optional and is used for recovery or delivery messages. The studio does not infer your city, identity, or artist from your face.
Model processing
The selected still is sent to the studio’s configured image-generation provider to compose a study, which the studio converts into the ordered strokes you watch. The provider processes the image only to answer that one request; its own infrastructure, security, and retention practices are outside this app’s direct control.
What is kept
The app keeps the finished artwork, its ordered-stroke replay, and a private record with its studio number, artist, title, dates, consent version, optional name and recovery email, and operational status. Payment processors and email providers keep the records needed to carry out those services under their own terms. The app has no advertising profile, social feed, or behavioral-advertising tracker.
Measurement
The studio measures how the site is used: which page opened, which button was pressed, how far a sitting or gift got, and where one failed. The analytics service it uses also sees the usual coarse details of a visit, such as approximate location, browser, device, and language.
Portrait links, names, emails, titles, and gift notes are never sent to it, and none of it is used for advertising. A completed payment is counted as a sale, with its amount but no name or email. The sitting works the same if you block measurement.
For visitors in the EU/UK, this rests on the studio’s legitimate interest in understanding how a small site performs, and the data may be processed outside the EU/UK. You can object to it, or ask to see, correct, or erase what the studio holds about you, by writing to the studio. You can also complain to your local data protection authority.
Your private link
A portrait link is a bearer key: anyone who obtains the complete address can open the private record. It is unguessable, but it is not an account login. Keep it out of public posts, shared browser history, screenshots, and referrer-bearing messages. Publishing a portrait creates a separate public page; taking it down removes that public listing.
Deletion and retention
The erase action removes the app-controlled artwork, replay, and private sitting record. It cannot erase copies already downloaded or shared, provider and runtime internals, payment records that must be retained, delivered email, logs, or backups immediately. Those copies expire or are removed under the applicable provider, operational, legal, and backup schedules. The interface reports a deletion only after its app-owned deletion steps succeed.
Choices and contact
You can leave the email field blank, keep the portrait private, take a published portrait down, erase its app-controlled record, or block measurement with any tracking blocker; the sitting works the same either way. The sitting is for adults 18 and older. For an access, correction, or deletion request, or any other privacy question, write to studio@everyfaceproject.com. Before relying on this notice for launch, the studio owner must verify that address and obtain jurisdiction-appropriate legal review.
Last updated October 7, 2026.