What we store, and why

When you run a scan, the photos taken during the screen-flash sequence go to our processing service, where your color measurements are computed. We keep the measurements, keyed to an anonymous session ID. The photos are deleted as soon as the measurement finishes. They are never written to storage and never reviewed by a person.

Because color measurements can relate to ethnicity, we treat them as sensitive information. We never sell them and never use them for advertising.

Scanning requires an account. We store your name, your email address, and an age range worked out from the date of birth you give us at signup. We discard that date once the range is computed. There are no passwords, so we never store any. If you give us your email on the results page, it is stored alongside your scan solely to notify you about the full report.

Face data: the photos taken during a scan are covered in detail by our Biometric Data Policy, which sets out how long we keep everything and when it is destroyed.

Your rights: you can export everything we hold about you, correct it, delete it, or withdraw any agreement you have given, all from your account. Deleting your account removes your profile and every scan in it. We keep the records of what you agreed to for five years, and Stripe keeps payment records to satisfy financial record keeping rules.

Deletion: the results page includes a “Delete my capture” action that permanently removes your measurements. It works immediately and requires the device you scanned with (that's where your session token lives).

Payments: dossier purchases are processed by Stripe. Your card details go to Stripe directly and never touch our servers. We store the purchase record (which scan was unlocked, the amount, and the receipt email Stripe gives us) so your dossier stays unlocked.

No third-party analytics run on the capture page, ever. Server-side logging is limited to operational events (scan started / completed / refused / purchased). Our marketing pages and the results page may load standard advertising pixels (Meta, TikTok) so we can tell which ads work; these never see your photos or your measurements.