Privacy Policy
Last updated: 24 July 2026
1. Controller
[Operator name], [street, postcode, city, country]. Email: [contact email]. See our Imprint for full details.
2. What data we process
- Your photo(s) — the selfie(s) and the glasses image you upload, used only to generate your try-on image.
- Your email address — only if you ask us to email your result.
- Basic usage data — standard server/CDN logs and, if enabled, privacy-friendly analytics (see section 6).
Your face photo is used to render an image, not to identify you. We do not run facial recognition and do not build biometric profiles.
3. Purposes and legal bases
- Creating your try-on image — performing the service you requested (Art. 6(1)(b) GDPR) and your consent for processing the photo (Art. 6(1)(a)).
- Emailing your result — your consent (Art. 6(1)(a)), given via the checkbox before sending.
- Occasional updates — only if you tick the separate, optional marketing box (Art. 6(1)(a)); you can withdraw anytime.
4. Recipients / processors
To provide the service we use the following processors, each under a data-processing agreement:
- Cloudflare — hosting/CDN for the site and API.
- OpenRouter — routes the image request to the AI model, configured to a no-logging, no-training policy.
- Google (Gemini image model) — generates the try-on image; not used to train on your input.
- Resend — sends the result email, only if you request it.
Some of these providers are based in the USA, so processing may involve a transfer outside the EU/EEA. Such transfers rely on the EU-U.S. Data Privacy Framework and/or EU Standard Contractual Clauses.
5. Retention
- Photos — not stored on our servers; used once to generate the image and not retained by the AI provider under the no-logging policy. The result image is only stored insofar as it is emailed to you (in your inbox and your email provider's systems).
- Email address — kept for up to 24 months, or until you withdraw consent / ask us to delete it.
6. Analytics
If web analytics (e.g. Google Analytics) is enabled, it may set cookies or process usage data; where legally required this only happens with your consent, which you can decline or withdraw.
7. Your rights
You have the right to access, rectification, erasure, restriction, data portability, and to object. Where processing is based on consent, you may withdraw it at any time with future effect. To exercise any right, email [contact email]. You also have the right to lodge a complaint with a supervisory authority.