Privacy policy

• The scan’s measurements run in your browser. Your photos only leave your device when you get an AI review or start a battle, and then only as downscaled copies.
• Choose to keep a scan on your device, and none of your photos or words are uploaded.
• We don’t sell your data, show ads, or use analytics or advertising trackers.
• We never rate attractiveness, recognize faces, or guess your age, ethnicity or anything else about who you are.
• You can delete what you’ve saved, or your whole account, from your account page at any time.

Photos and words you scan

• The free scan measures your photos (focus, light, color, noise, framing and where faces are) and checks your words in your browser. None of that is uploaded; we only count that a scan happened (see “How we measure the site” below).
• When you get an AI review (a Pro review, a revision scan or an AI camera-roll pick), we send downscaled copies of your photos (no larger than 1024 pixels on the long side), your profile text, the platform and goal you chose, and a short summary of each photo’s measurements to our AI provider, Anthropic, which writes the review.
• Pro tools (other-app versions, shoot plans and prompt picks) send only text, never photos.
• We don’t keep the photos from an AI review, except while a person checks your Pro review (see below).

Your account (optional)

• Your email address, to sign you in with a one-time code and send you what you ask for. Codes are stored hashed (scrambled) and expire after 10 minutes.
• If you choose to sign in with Google: the name, email address and profile picture Google shares, and the sign-in tokens it issues. We never get your Google password.
• Each sign-in records the IP address and browser it came from. A sign-in lasts up to 30 days.
• What you save: scans (scores, fixes and text, never photos), Pro reviews and their revision scans, Pro tool results, and the numbers and answers you add to your results tracker and check-in.

Pro reviews

Pro reviews are saved to your account so you can come back to them and run revision scans. A person on our review team checks each one. For that check, we store the photos you sent privately and delete them 30 days after the check is done, and never later than 90 days after the review, even if it was never checked. You can delete them sooner from your account page. Revision scans never store photos.

Payments

Stripe processes payments. Your card details go straight to Stripe; we never see or store them. We keep a record of each purchase: the amount, currency, Stripe’s reference numbers, when you paid and when you accepted our refund policy.

Battles and votes

• If you start a battle, its photos, score cards and any words you include are shown to other visitors so they can vote. Your name and email are never shown. You can delete a battle from your account page.
• Before a battle goes live, our AI provider, Anthropic, checks its photos and words for things that can’t be shown publicly, like nudity, anyone who might be under 18, or private details. If the check flags something, a person on our team looks at it before it goes live.
• When you vote, we record your choice and any reasons you tick, linked to a random ID in a cookie (or your account, if you’re signed in) and a hashed version of your network address, so each person votes once per battle.
• A battle reported by 3 different people is paused until a person on our team checks it.

Results you share

If you choose to share your result at your check-in, we show your quote, the display name you pick, your platform and your measured result on our homepage after a person approves it. You can withdraw it at any time.

Emails

We email you sign-in codes, a note when your human review is ready and one check-in about 30 days after a Pro review. We don’t send marketing emails.

How we measure the site

We count, per day and per app, how many scans are finished, how many people click to unlock the Pro review and how many checkouts start. These are totals only: no cookie, account or IP address is attached, so we can’t tell who did what.

Keeping it fair and safe

To enforce free limits and stop abuse, we store a hashed version of your network (IP) address, not the address itself, with each AI review and each vote. Our servers also briefly count requests per network to slow down abuse, and our hosting provider keeps standard server logs, which include IP addresses, for a limited time.

• Face detection runs only on your device. It finds where faces are in each photo so the scan can check framing, focus and light. It doesn’t recognize or identify anyone, and we never create or store face templates or face geometry.
• The only face information that leaves your device is part of an AI review: how many faces a photo has and how much of the frame the main one fills.
• Reviews judge presentation you control: light, focus, framing, variety and your words. We never rate attractiveness or guess your age, ethnicity, gender or anything else about who you are, and our AI and reviewers are told not to.
• Photo fixes only adjust light, color, sharpness and framing, evenly across the whole photo. We never use AI to edit your face.
• We don’t use your photos or words to train AI models, and Anthropic’s commercial terms don’t allow it to train its models on what we send.
• Only scan photos of yourself, or photos you have permission to use.

We share your information only with the providers that run Firstframe for us, and only what each one needs:

• Anthropic writes AI reviews from your downscaled photos, words and measurements, and checks battle photos before they’re shown (privacy policy).
• Stripe processes payments: your email and the payment details you enter (privacy policy).
• Resend delivers our emails: your email address and the emails we send you (privacy policy).
• Google, only if you choose to sign in with Google (privacy policy).
• Our hosting and database providers run the site and store the information described here.
• jsDelivr and Google Cloud Storage serve the face-detection software your browser downloads when you scan. Like any website, they see your IP address, never your photos.
• Our review team sees the photos and words of the Pro reviews they check.
• Other visitors see only what you choose to show: battles you start and results you share.

We may also disclose information when the law requires it, to protect someone’s safety or our rights, or to a buyer if Firstframe is ever sold or merged, who would have to protect it as this policy does. We don’t sell your personal information, and we don’t share it for targeted advertising.

Some sites include free Pro reviews here with their membership. calculated.love is one, and it’s a separate service with its own privacy policy. When you open Firstframe from your calculated.love account page:

• calculated.love sends a signed link saying you’re a member, the date your membership is paid through and how many free reviews a month it includes, with a reference number for your membership that means nothing outside calculated.love. It doesn’t send your name, email, photos, answers or anything else about you.
• We keep that reference, the dates and the number with your Firstframe account, to give you the free reviews and count them each month. The count follows the membership, so linking it to another Firstframe account moves it rather than starting it again.
• We don’t send calculated.love anything back: not whether you used Firstframe, and not your reviews, scores or photos.
• You can unlink it from your account page at any time. Reviews you’ve already run stay yours.

• Sign-in cookie, only if you sign in: keeps you signed in for up to 30 days.
• Voter cookie, when you open battles: a random ID so you vote once per battle. It lasts a year.
• Stripe’s cookies, only when you open checkout: Stripe uses them to prevent fraud.
• Browser storage: copies of your AI reviews for up to 30 days (so the same profile gets the same review), your shoot-plan checklist ticks, and a scan you’re saving while you sign in. These stay in your browser; clearing this site’s data removes them.

We don’t use analytics, advertising or tracking cookies.

• On-device scans: your photos and words never reach us. The anonymous daily counts are kept to see how the site is doing.
• Photos sent for an AI review: we don’t keep them, except for a Pro review’s human check (below). Anthropic keeps what we send for a limited time under its own policy.
• Pro review photos for the human check: deleted 30 days after the check is done, and never kept more than 90 days.
• Battle photos: deleted 30 days after the battle closes, or when you delete the battle.
• Your account and everything you saved, including Pro reviews and their text: until you delete them, or your account.
• Purchase records: until you delete your account. Stripe keeps its own records as the law requires.
• A linked partner membership: until you unlink it, link a different one or delete your account.
• Hashed network addresses in usage records: for as long as we offer free limits.

Deleted information can stay in our providers’ backups for a limited time, until those backups are replaced.

• Keep any scan on your device, so none of your photos or words are uploaded.
• Delete saved scans, Pro review photos, battles and results trackers, or withdraw a shared result, from your account page.
• Delete your account there too. That removes your scans, Pro reviews, photos, battles, results, purchase records and usage records. Votes you cast on other people’s battles stay in their totals, no longer linked to you.
• Ask us for a copy of your information, or to correct or delete it, by emailing firstframellc@protonmail.com. We reply within 30 days.

Depending on where you live (for example the EU, the UK or US states like California), the law gives you rights to access, correct, delete or take a copy of your data, and to object to or limit how we use it. We honor these requests wherever you live, and we won’t treat you differently for making one. If we can’t do what you ask, we’ll explain why, and you can ask us to reconsider. You can also complain to your local data protection authority.

If you’re in the EU or UK, we use your information to provide the service you asked for, to keep it secure and prevent abuse (our legitimate interests), to keep payment records the law requires, and with your consent for what you choose to share, like battles and results. You can withdraw consent at any time.

Everything is sent over HTTPS. Sign-in codes are stored hashed, and so are the network addresses we use for free limits and votes. Only our review team can see Pro review photos, and photos are deleted on the schedule above. No system is perfectly secure; if a breach affects your information, we’ll tell you as the law requires.

Firstframe is for adults. Don’t use it if you’re under 18. If we learn we have information from someone under 18, we’ll delete it.

Our providers operate in the United States and other countries, so your information may be processed outside the country where you live. We rely on our providers’ safeguards for those transfers, such as the EU’s standard contractual clauses.

When we change this policy, we update the date at the top. If a change is significant, we’ll tell you on the site or by email before it takes effect.

Questions or requests about your privacy: email firstframellc@protonmail.com.