Privacy policy.

The short version: your photo and the headshot made from it are processed on your own computer and are never sent to us or to anyone else. The only data that leaves your browser relates to advertising and page analytics, and in the EEA, UK and Switzerland that happens only after you have given consent.

Who we are

Free Headshots (free-headshots.com) is an independent website. You can reach us at hello@free-headshots.com.

Your photo and your headshot

When you choose a photo, it is read by the browser on your device into a canvas. Segmentation, face landmarking and every subsequent adjustment run locally. No part of the image, its filename, its EXIF metadata or the resulting headshot is transmitted to our servers or to any third party. We could not see your photo even if we wanted to.

The result exists only in the browser tab until you download it. Closing the tab discards both the photo and the result. Nothing about either is written to storage.

Faces and biometric data

A photograph of a face is personal data, and in some jurisdictions a face template used to identify someone is a special category of it. We want to be precise about what happens here: the face mesh is computed in your browser, used to place masks and choose a crop, and discarded when the tab closes. It is never transmitted, never stored, never used for recognition, and never compared against any other face. We operate no face database and hold no biometric identifiers.

Because no personal data from your photo ever reaches us, there is nothing for us to disclose, retain or delete in relation to it.

Model files

The first time you generate a headshot, your browser downloads about 20 MB of model weights and stores them in its cache so later visits are instant and work offline. That download is an ordinary web request: the host serving the weights sees your IP address and the file requested, as any web server does. You can remove the cached models by clearing site data in your browser.

Advertising

The site is funded by advertising served by Google AdSense. Google and its partners use cookies and similar technologies to serve ads, to measure them and, where you have consented, to personalise them based on your visits to this and other websites. Google's use of advertising cookies is described at policies.google.com/technologies/ads. You can opt out of personalised advertising at google.com/settings/ads or at aboutads.info/choices.

If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent through a Google-certified consent management platform before any advertising cookies are set. You can change your choice at any time using the privacy settings link in the footer.

Analytics

We use Google Analytics to count visits and to learn which pages lead people to a completed generation. IP addresses are anonymised. The analytics events we record never include file names, image content or anything derived from your photo. Where consent is required, analytics run only after you have agreed.

What we do not collect

• No account, no email address, no name, unless you write to us.
• No photos, filenames, face data or generated images.
• No server-side logs of what you generate, because there is no server-side generation.

Server logs

Our hosting provider keeps standard request logs (IP address, user agent, requested URL, time) for security and abuse prevention. These are retained for a short period and are not combined with any other data.

Children

The site is not directed at children under 16 and we do not knowingly collect data from them.

Your rights

Because we do not hold personal data about you beyond what is described above, most requests under the GDPR or similar laws will be answered by pointing you to your browser settings and to Google's controls. If you believe we hold data about you, email us and we will respond within 30 days.

Changes

We will update this page when the site changes. The date at the top tells you when it was last revised.