Privacy policy
Updated October 30, 2026
This policy describes what happens to your data when you use Hue & Shape. It is written to match the code. If something here does not match what you see, email us and we will fix the page or the code.
The photo
Photos you take or choose are processed in your browser. The face landmark model is downloaded from this site and runs on your device. The analysis path makes no network request with the image.
We do not store photos. If you save a result to your account, we store the measurements that came from the photo: distances, ratios, a shape name, and for the color tools three sampled color values. We do not store the image itself.
What we store if you create an account
Signing in uses an emailed six-digit code or Google. We store the email address attached to the account, the time you signed in, and a hash of your session token rather than the token itself.
Saved results are stored under your account as measurements. Each result has a kind (face or color), the measurements, and the date. You can delete a result from your results page at any time.
If you buy a report without signing in, the measurements for that result are saved under a private session in your browser instead, held by a cookie, so the report opens after payment. Signing in later moves them to your account.
Payments
Payments are handled by Polar, which acts as the merchant of record. We never see or store your card details. We receive the product you bought, the order status, an identifier for the customer and the email address you gave at checkout, so we can unlock the report, email you its link, attach it to an account if you sign in with that email, and handle a refund.
The reports are a single purchase. There is no subscription, no renewal and no stored payment method on this site.
Cookies and local storage
We set one httpOnly session cookie when you sign in. It holds a random token and is used only to keep you signed in.
The tools may keep the current result in your browser's session storage so a page refresh does not lose it. That data stays on your device.
If analytics are enabled on the live site, they load only on the production domain and never receive a photo, an email, a name or a result.
To improve the site we record anonymous usage events (pages viewed and tool steps completed, tied to a random id kept in your browser), never photos or personal details.
Your rights
You can ask us to delete your account and everything attached to it, or export the measurements you have saved. Email us and we will do it.
Children
The site is for adults 18 and over and is not directed at children. If you believe a child has created an account, contact us and we will remove it.
Contact
For any privacy question, email hello@hueandshape.com.