Privacy Policy
Last updated October 11, 2026
The short version: your full photo never leaves your device, we don’t create face templates, and the face crop you searched and your results disappear after 48 hours.
Your photo
The face detection happens on your device. Only a crop around the face is sent, over an encrypted connection, to our face search provider to run your search. We keep that crop alongside your results for 48 hours so your report can show which face was searched, then delete it automatically. Your full photo is never uploaded, and we don’t create or keep face templates.
What we do keep
- Your email: it identifies your account and is where we send your sign-in code, receipts and search results, plus at most one reminder before a free preview expires (every reminder has a link to turn them off).
- Search records: a one-way hash of the photo (not the photo), a hashed IP address, the match count and timestamps. We use these to prevent abuse and to give your credit back if a search finds nothing.
- Results and the searched face crop: stored for 48 hours at a private link, then deleted automatically.
- Sign-in sessions: kept until they expire (up to 180 days) or you sign out.
- Payments: handled by Stripe. We never see your card number; we keep only the confirmation that you paid.
Who we share it with
- The face search provider, which receives the face crop to run the search and has its own policy.
- Stripe, for payments.
- Our hosting, email delivery, bot-protection and error-monitoring providers, so the service runs.
We don’t sell your data and we don’t use it for advertising.
Removing your face from results
Because we don’t hold any face data, we can’t remove a face from search results ourselves. Matches come from a third-party provider’s index of public web pages. To get a face out of the results, ask the websites that host the image to take it down, and use the opt-out offered by the search provider. Email us and we’ll point you to the right place.
Your rights
You can ask to see or delete the data we hold about you (your email and search records) at any time. Under Canadian privacy law (PIPEDA) and equivalent laws elsewhere you may also withdraw consent and lodge a complaint with your privacy regulator.
Cookies
We use a single cookie to keep you signed in. No advertising or tracking cookies. We count visits and steps (such as how many photos are chosen each day) without cookies or identifiers, using Cloudflare Web Analytics and our own daily totals. To improve the site, anonymous usage events (such as which page you arrived on, which button you tapped and which plan you picked) are sent to PostHog, in the US, through our own domain. They carry no cookies and no stored identifiers, there are no session recordings, and they never include your photos, your email or your results.
Children
socialfinder is for adults. We don’t knowingly process photos of minors or data from anyone under 18.
Changes
We’ll update this page and its date if our practices change.