Privacy Policy
Effective [Effective date — set in src/config/launch.ts]
[Legal name — set in src/config/launch.ts] ([Postal address — set in src/config/launch.ts]) operates Lookslate and is responsible for your personal data. Contact us about privacy at [Contact email — set in src/config/launch.ts].
What we collect
- Quiz answers: age range, skin tone, eye and hair color, makeup experience, products you use, skin concerns, goals and preferences, and the look you choose.
- Email address: to save your result and send sign-in codes.
- Your photo, if you add one: your browser resizes it (longest side at most 1280 pixels) before upload. We store it with the generated preview. If you choose a sample face, no photo of you is collected.
- Sign-in records: a hashed one-time code and a session for signed-in visits.
How we use it
To create your preview, show your color tips and guide, save your result, let you sign in, and protect the service (for example, limiting repeated requests from one connection, which uses your IP address briefly in memory). We also measure how the site is used, to improve it. We do not sell your data or show advertising.
Who receives it
- Image service: a photo you upload is sent to our AI image service to apply your look. A temporary cloud-storage copy is created so the service can read it; we delete that copy when processing finishes. If deletion fails, we log it for follow-up.
- Email service: receives your email address and the sign-in code it delivers.
- Hosting and database providers: store the data above to run the site. They may keep standard server logs.
- Analytics services: Microsoft Clarity records visits to our pages (what the page shows, clicks and scrolling) so we can replay and improve them, and PostHog records steps such as finishing the quiz or signing in. They receive your IP address, browser and device details and the pages you visit. We do not send them your email address or a result link: signed-in visits carry a coded identifier instead, text you type is hidden, Clarity does not record pages that show your email, photo or result, and it hides your photo while you take the quiz.
Result links
Each result has a private, hard-to-guess link. Anyone who has the link can see that result's answers and images, but not your email address. Share it only with people you trust, and delete the result if you no longer want it available.
On your device
Your browser stores your quiz progress so you can continue after a refresh. When you sign in, an HttpOnly session cookie keeps you signed in for up to seven days. Clarity and PostHog store identifiers in cookies and local storage to recognize repeat visits, and Clarity may also set a Microsoft cookie.
How long we keep it
- Photos from quizzes you do not finish: deleted after 24 hours.
- Saved results, with their answers, photo and preview: deleted [Retention period in days — set in src/config/launch.ts] after they are created, or sooner if you delete them.
- Sign-in codes expire after ten minutes and are deleted after a day; sessions end after seven days.
Your choices and rights
Sign in and open My looks to view or delete a look, or to delete your account and all of its data. Depending on where you live, you may have further rights, such as access, correction or objection, and you may complain to a data protection authority. To exercise them, email [Contact email — set in src/config/launch.ts].
Children
Lookslate is not intended for anyone under [Minimum age — set in src/config/launch.ts].
Changes
We will update this policy and its effective date when our practices change.