Privacy

Your photos never leave this device

Harmony measures faces inside your browser. There is no server that receives photos, points or results, so there is nothing of yours for us to store, sell or lose.

What happens to a photo

When you choose a photo, Harmony shrinks it (longest side 2048 pixels) and saves it again as a JPEG inside your browser. That drops the file's metadata, such as camera details and location. The face model then runs in your browser to place the points, and every measurement is calculated on your device.

What is saved, and where

• Saved analyses: the shrunken photo, a small thumbnail, the points, the name you give the analysis, whose face it is (your choice before each analysis) and which reference set you compare with. They're kept in this browser's storage (IndexedDB) on this device.
• Settings: your birth year if you entered it, whether you've seen the intro and the editor tip, and the reference set you picked last. Kept in this browser's local storage. The birth year only decides whether scores are shown; it's never sent anywhere.
• An opened challenge: the score and two counts from a "beat my score" link you opened, kept only for this browser tab (session storage) so the comparison survives a reload.

This storage is not encrypted. Anyone who can use this browser profile can open your saved analyses. Nothing is synced between devices or backed up by us, because nothing reaches us.

Deleting your data

• Delete a single analysis from your library.
• Delete everything from Settings in the app.
• Or clear this site's data in your browser's settings, which removes everything Harmony stored.

If you used the first version of Harmony, its storage kept the original photo files, including their metadata. Settings can remove that old storage too.

Sharing is your choice

Share cards and copied stats are made on your device and go only where you send them. Cards use a plain illustration unless you pick a style with your photo or your face's lines, which is offered only for your own face. A "beat my score" link carries only a score and two counts, in the part of the link after #, which browsers don't send to any server.

Who else is involved

Cloudflare hosts this site. Like any web host, it processes your IP address and request details (which files were requested, your browser type) to deliver the site and protect it from attacks. Cloudflare may also ask your browser to report failed connections to it (Network Error Logging). See Cloudflare's privacy policy. Photos, points and results are never part of any request, so Cloudflare doesn't see them either.

Google MediaPipe is the open-source face model and engine Harmony uses. It's served from this site, not from Google. The library contains code that sends anonymous usage statistics to Google. Harmony's Content Security Policy only allows connections to this site, so your browser blocks that request; your browser's console may show the blocked attempt as an error.

Check it yourself

Open your browser's developer tools, switch to the Network tab and run an analysis. Every request goes to this site, and none of them carries a photo. The policy that enforces this is in the Content-Security-Policy response header of every page.

Ages and faces

Scores are for people aged 18 and over; anyone younger, or anyone who skips the birth year, sees plain measurements only. Only analyse your own face, or the face of someone who agreed to it.

Last updated 22 October 2026. Open-source components and their licences: Licences.