Privacy

Questions or requests: hello@photofitnow.com.

The free check

• Your photo is personal data, and so are the head, chin and face-centre marks you place. Together they describe your face.
• In the free check and the print-ready preview, both stay in your browser tab’s memory. Our tests confirm that nothing is uploaded. Nothing is sent to any AI service.
• They are cleared when you press “Remove photo” or close the tab. Files you download are yours to delete.
• We don’t run face detection or face recognition, and we don’t identify anyone.
• No analytics, ads or session replay run on the checker, family or purchase pages. Cloudflare processes network metadata for hosting and abuse controls; Stripe may set cookies on its own checkout.

Optional purchase upload (not used by the free check)

If paid checkout is enabled, only the prepared JPEG is uploaded after your explicit choice to buy. Your original and manual face marks stay in the tab. Cloudflare R2 stores the prepared photo and print sheet privately; Durable Objects store order metadata. Stripe handles card information. We do not receive card numbers. Access is disabled after expiry, and deletion alarms remove stored outputs. Outputs expire 1 hour after payment and never exceed a 24-hour hard cap. Unpaid outputs expire after 1 hour. Transient provider failures can delay physical deletion; no download is allowed after expiry. Minimal order and payment references remain up to 30 days in this implementation. Provider backup retention and legally required financial records need review before live launch. A purchase token is kept in this tab’s session storage for downloads.

Hosting and processors

PhotoFitNow runs on Cloudflare (hosting, storage of purchase files, abuse controls). Card payments are handled by Stripe. Both process data under their own terms and privacy policies. Their backup or log retention may outlast ours for a short time; the periods above are the ones we control.

Analytics on information pages

• On the home, pricing, FAQ, coverage and policy pages only, we offer Google Analytics 4 to count visits. It is off unless you choose “Accept analytics” in the banner, and nothing is requested from Google until you do. “No thanks” keeps it off.
• If you accept, Google receives page views and basic device and approximate-location information through its cookies. Google signals and ad personalization are turned off. You can change your choice any time with “Analytics choice” in the footer; clearing this site’s browser storage also resets it.
• It never runs on the photo check, family or purchase pages. Your photo, the head and chin marks, and your purchase details are never sent to Google Analytics.