Is It Safe to Upload Your Selfie? A Privacy Checklist

Why a selfie deserves more thought than a meme

A photo of a landscape reveals nothing about you. A photo of your face is different: it is a record of a physical characteristic that is unique to you and cannot be changed. In several jurisdictions that is enough for it to count as biometric data, which is a category with its own rules about consent and retention.

Whether or not a specific law applies to the tool you are using, the practical question is the same: what happens to the image after you press upload? Most people have never checked. This page is a checklist of the things worth checking, written as questions you can ask about any tool — not as legal advice, because the answers depend on where you live and what the tool actually does.

One rule first: if a tool cannot answer these questions plainly, that is your answer. A site that makes promises in vague language, or has no privacy page at all, is telling you something important.

The ten questions

1. Where is the image processed? In your browser, on the tool's server, or forwarded to a third-party service? These are very different situations. "Processed in your browser" means the file never leaves your device, which is the strongest possible answer. "Sent to our server" is normal but should be stated openly. "Sent to a third-party API" means a company you have never heard of is now handling your face.

2. Is it written to disk? Processing an image often means saving it temporarily. That is not automatically a problem — the question is whether the temporary copy is cleaned up, and whether anyone has committed to that.

3. How long is it kept? Seconds, days, or indefinitely? "As long as needed to provide the service" is vague to the point of being an answer of no. Look for a specific retention period.

4. Is there a delete path? If you want the image removed, what do you actually do? A working delete option, or a contact address, is a good sign. No delete path at all means you are trusting a promise rather than exercising a right.

5. Is the image used for anything else? Training a model, improving the service, and analytics are three different activities that all end up as "we may use your data". If your photo feeds a training set, that is worth knowing before you upload.

6. Is it shared with anyone? Payment processors, advertisers, analytics vendors, and cloud providers are typical. The point is not that sharing is always bad — it is that you should be able to find out.

7. What is the retention policy for face measurements, not just the photo? This is the question almost nobody asks. Many tools delete the image and keep the derived numbers: the landmarks, the ratios, the score. If the goal is to keep identifying information, the measurements may matter more than the JPEG.

8. Is the tool asking for more than it needs? A face scan needs a photo. It does not need your phone number, your email, your contacts, or your location. Sizeable requests for extra data next to a one-tap "upload" button are a warning sign.

9. Does the wording match the behaviour? Promises of "100% private" and "nothing is ever stored" are common and easy to write. Where a tool makes an absolute claim, ask what mechanism enforces it. A claim with no mechanism behind it is a marketing sentence, not a guarantee.

10. Who is responsible if something goes wrong? Is there a company name, an address, a way to contact a human? Anonymous tools with no accountability structure are the ones where a problem has nowhere to go.

How to run the checklist in practice

You do not need to interrogate anyone. A couple of minutes is enough.

• Find the privacy page before uploading, not after. If there is no privacy page, stop there.
• Search for the retention sentence. A specific timeframe is a good sign; silence is a bad one.
• Check whether the image is processed locally or uploaded. On some tools you can open your browser's network tab and watch whether a request carries the image. On others you simply cannot tell.
• Test with a photo you do not care about first. This tells you whether the tool works before you hand it a photo you would rather keep, and it tells you what the result page looks like.
• Do not test with someone else's face. This is the one case where the harm is not theoretical: you would be sharing a third party's biometric data without their knowledge.

What this site does

Since you are here, the honest thing is to describe our own pipeline rather than only handing you a list.

When you upload a selfie on this site, the image is sent to our server — it is not processed inside your browser, and you should be sceptical of any tool that puts "processed locally" on an upload button. On the server the image is held in memory while the landmark analysis runs and the score and share card are generated. It is not written into a gallery, and it is not stored in the database: the tables behind the login and referral features hold accounts and referral codes, not photographs.

One caveat, stated precisely rather than conveniently: a web framework can briefly spill a large upload to a temporary file of its own before the request handler even runs, and that file is cleaned up when the request finishes. So the accurate claim is "we do not store your photo", not "your photo never touches a disk". If absolute certainty matters to you, the reliable option is not to upload — that is true of every tool in this category, this one included.

Frequently asked questions

Is my selfie stored after the scan?

On this site, the uploaded image is processed in memory and is not kept — there is no photo gallery and no copy of it in the database. We are not asserting the same for other tools; you have to check each one. The single most useful signal is whether a specific retention period is stated, or whether the wording stays vague.

Can a face scan identify me as a specific person?

A consumer face scan test is doing geometry, not identification. It locates features and measures them; it does not match your face against a database of named individuals. That said, the important risk with biometric data is usually not instant identification — it is accumulation, and what a future system could do with a collection of face images that already exists.

Is it safe to upload a photo of someone else?

No, and this is the clearest rule on the page. Uploading a partner's, an ex's, or a friend's photo without their knowledge means you are sharing their biometric data without consent. It also invalidates the result, because the answer you get back would be meaningless regardless. If you have a real question about a relationship, ask the person.

What should I watch for in the wording?

Absolute claims with no mechanism: "100% private", "never stored", "fully anonymous". Ask what enforces the claim. If a privacy page describes a retention period, a deletion route, and who processes the image, it is doing more than most. If it describes none of those, its absolutes are decoration.

Is it legal for a website to process face photos?

That depends on where you live and where the site operates, and this page is not legal advice. Some jurisdictions treat face images as a special category of personal data with specific requirements around consent and disclosure. If that matters for your situation, treat it as a reason to read the privacy page carefully before uploading, not after.

What is the safest way to use these tests?

Use a photo you do not mind sharing, ideally one you have already posted publicly. Do not upload photos of other people. Do not link an account or a phone number if a photo alone is enough. And if you would be uncomfortable with the image existing somewhere you cannot control, the safest option is simply not to upload it — no amount of checking makes that risk zero.