Privacy Policy
We keep as little as we can, for as short a time as we can. Here's exactly what we collect, why, and how to delete it.
Last updated: November 4, 202601Who we are
InsideMode is responsible for your data. Contact: [contact e-mail].
02What we collect
- Account: e-mail address, language, when you accepted the terms and confirmed you're 18+.
- Billing: purchases, credit history and a Stripe customer ID. Card details go to Stripe only; we never see them.
- Searches: what for (checking a match or your own photos), when, your fair-use pledge, a SHA-256 fingerprint of the photo file (not of your face), and the results: page links, scores and small thumbnails. For a username search, the username.
- Security: a hashed version of your IP address in our audit log, and rate-limit counters kept for one day.
03Your photo
Before anything else, your browser checks on your device that the photo shows one face (open-source detector, nothing is sent).
Your photo is re-encoded in your browser before it leaves your device, which removes its location and other metadata.
Before you sign up, it stays in your browser only (24 hours at most), so you don't have to upload it again.
To run the search, it goes to our server, is held in memory only and is never saved. It's sent to our search provider, FaceCheck, and deleted there when the search ends.
04Biometric data
To find similar faces, our provider compares the face in your photo with faces on public web pages. We don't create or keep face templates.
[To be completed by counsel: state biometric notices and consent.]
05How long we keep it
- Reports (results and thumbnails): deleted automatically 30 days after the search. You can delete them all right now from Settings.
- Account: until you delete it, in one click from Settings.
- Billing records: as long as tax law requires.
- Rate-limit counters: one day.
06What we never do
- Sell or rent your data.
- Use your photos to train any model.
- Show your searches to anyone else, including the people you search for.
07Who helps us
- FaceCheck: face search.
- Supabase: database and sign-in.
- Vercel: hosting.
- Stripe: payments and sales tax.
- Resend: e-mails.
- Sentry: error tracking, and PostHog: product analytics, when turned on. Neither receives photos or search content.
Some of them are outside the European Union. Transfers rely on the European Commission's standard contractual clauses.
08Your rights
You can access, correct, export or delete your data, and object to its use. Deleting your reports or your account is self-serve, in Settings. For anything else, write to [contact e-mail].
In the EU you can complain to your data protection authority (in France, the CNIL). In the US, your state may give you similar rights; we honor them for everyone.
09Cookies
Only what the service needs: your sign-in session and your language. No advertising cookies.
10Children
InsideMode is for adults only. Searching for anyone under 18 is forbidden and gets the account closed.