Privacy Policy
Last updated: June 28, 2026
AnimalFace AI ("we," "us," or "our") operates the website at animalface.xyz (the "Service"). This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your personal data. Please read this policy carefully before using our Service.
1. The Most Important Thing: Your Photos Are Never Stored
The core animal face test runs entirely in your web browser using TensorFlow.js. When you upload a photo:
- The image is loaded into your browser's local memory only.
- The AI analysis is performed entirely on your device — no image data is sent over the network to our servers or any third party.
- When you close or refresh the browser tab, the image is immediately and permanently cleared from browser memory.
- We have no technical ability to access, retrieve, or store any image you upload for the test. This is an architectural constraint, not merely a policy.
This privacy-first design is fundamental to how AnimalFace AI was built. Your photos are yours and remain on your device.
2. Information We Collect
2a. Information You Provide Voluntarily
Account Registration: If you choose to create an account, we collect your username and a password (hashed and stored securely via Supabase Authentication). Account creation is entirely optional — you can use the full core test without any account.
Partnership Inquiries: If you submit a partnership inquiry form, we collect your name, email address, company or channel name, and the message you write. This information is processed through Formspree and is used solely to respond to your inquiry.
Contact Form Submissions: If you contact us via our contact page, we collect the information you provide in the form for the purpose of responding to your message.
2b. Information Collected Automatically
Usage Analytics (Google Analytics): We use Google Analytics (gtag.js) to collect anonymized data about how visitors use our website. This includes pages visited, time spent on pages, general geographic location (country/region), device type, and browser type. Google Analytics uses cookies to track sessions. This data helps us understand how to improve the Service. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
Clarity (Microsoft): We use Microsoft Clarity, a behavioral analytics tool, to understand user interactions such as mouse movements, clicks, and scroll behavior. Clarity may use cookies and local storage. The data collected is anonymized and used solely for improving the user experience of the Service.
Log Data: Like most web services, our hosting infrastructure automatically logs basic server request data such as your IP address, the pages you request, and the time of the request. This data is retained for a limited period for security and operational purposes and is not used to identify individual users.
3. Cookies and Local Storage
AnimalFace AI uses cookies and browser local storage for the following purposes:
- Theme preference: We store your dark/light mode preference in local storage so it persists between visits.
- Authentication: If you log in, Supabase Authentication uses local/session storage to maintain your logged-in state.
- Analytics: Google Analytics and Microsoft Clarity use cookies for session tracking as described above.
- Advertising: Google AdSense, which we use to display advertisements, may set cookies to show relevant ads. You can manage ad personalization via Google's ad settings.
You can control cookies through your browser settings. Disabling cookies may affect some features of the Service, such as remembering your theme preference.
4. Third-Party Services
AnimalFace AI uses the following third-party services, each of which has its own privacy policy:
- Supabase Authentication: Used for user account management. Supabase Privacy Policy.
- Google Analytics: Used for anonymized usage analytics. Google Privacy Policy.
- Google AdSense: Used to display advertisements on the Service. Google may use cookies to personalize ads based on your browsing history. Google Privacy Policy.
- Microsoft Clarity: Used for behavioral analytics and UX research. Microsoft Privacy Statement.
- Supabase: Used for optional account features, community comments, and emoji reactions. Comments are stored with your username, user ID, comment text, and timestamp. Reactions are stored with your user ID, target content ID, emoji, and timestamp.
- Userback: Used for user feedback collection. Userback Privacy Policy.
- Formspree: Used to process partnership and contact form submissions. Formspree Privacy Policy.
- Google's Teachable Machine / TensorFlow.js: The AI model runs locally in your browser. The model files are loaded from external CDN servers on first use. No user data is sent to these servers during the analysis — only the model files are downloaded.
5. How We Use Your Information
We use the information we collect for the following purposes:
- To provide and maintain the Service, including user account features.
- To respond to partnership inquiries, contact form submissions, and user support requests.
- To understand how users interact with the Service and to improve the user experience.
- To display relevant advertisements through Google AdSense.
- To maintain the security and operational integrity of the Service.
- To comply with applicable legal obligations.
We do not sell, rent, or trade your personal information to any third party for marketing purposes.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this policy:
- Account data: Retained until you delete your account. You can delete your account at any time by contacting us at the address below.
- Form submissions: Partnership and contact inquiries are retained for up to 12 months after the inquiry is resolved, then deleted.
- Analytics data: Anonymized analytics data may be retained for up to 26 months as per Google Analytics default settings.
- Server logs: Retained for up to 90 days for security and operational purposes.
7. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Correction: You can request that we correct inaccurate personal data.
- Right to Deletion: You can request that we delete your personal data, subject to certain legal limitations.
- Right to Object: You can object to processing of your personal data for specific purposes, such as analytics.
- Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
- CCPA Rights (California residents): California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and the right to opt out of the sale of personal information. We do not sell personal information.
To exercise any of these rights, please contact us at the email address provided at the bottom of this policy. We will respond within 30 days.
8. Children's Privacy
AnimalFace AI is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete that information promptly. Users between the ages of 13 and 18 should use the Service only with parental consent.
9. International Data Transfers
AnimalFace AI is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers. We take reasonable steps to ensure that any international transfers of personal data are handled in compliance with applicable law.
10. Security
We take reasonable technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures include using HTTPS encryption for all data in transit, relying on Supabase's secure authentication infrastructure for account credentials, and not storing any user-uploaded photos at any point in our infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after any changes constitutes your acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: privacy@animalface.xyz
- Contact Form: animalface.xyz/contact.html
- Website: animalface.xyz
We aim to respond to all privacy-related inquiries within 30 days.
Privacy Discussion
Have questions or comments about our Privacy Policy? Join the discussion below.