Privacy Policy for ChangeMyHairStyle.com

1. Who We Are

We are an online platform at https://changemyhairstyle.com that lets users visualize style changes using uploaded images and digital tools.

2. What Information We Collect

2.1 Information You Provide

• Uploaded photos for image processing
• Comments and messages
• Optional account creation details

2.2 Biometric and Image Data

• Photos are processed using AI to generate preview images.
• Facial geometry and features may be analyzed as part of AI processing. This data is used solely to generate your preview image and is not used for identification purposes.
• Uploaded images are automatically deleted from our active processing systems within forty-eight (48) hours of processing, unless retention is required for security, abuse prevention, or legal compliance as described in Section 7 below.
• We do not create, store, or maintain a persistent biometric template or identifier derived from your facial features.
• To stop the same photo from being used to get around our limits or rules, we keep a short fingerprint of each photo you use for a try-on. It is a code calculated from the whole image, not a map of your face, and the photo cannot be rebuilt from it. We delete it ninety (90) days after the photo was last used, unless the photo broke our rules; then its fingerprint stays on our block list. If you have an account, your saved try-on history keeps the fingerprint of the photo behind each result so you can recreate that result, until your account is deleted.
• Images are protected by industry-standard security measures during processing and storage.

2.3 Automatically Collected Data

• IP address, browser type, device info, page visits, etc.

3. Cookies and Tracking

We use cookies to improve your experience and manage login sessions, comments, and preferences, and to run our try-on tools. You can manage cookies via your browser settings. These are the cookies and similar tools we use:

• Security cookie (hs_did): set when you open one of our try-on tools. It holds a random code that lets us apply the free-use limit and stop abuse. It is not used for advertising and is not shared. It expires ninety (90) days after you last upload a photo or try on a hairstyle, and we delete the matching record on our side after ninety (90) days without use.
• Analytics: we use Microsoft Clarity to see how visitors use our pages. It records clicks, scrolling and mouse movement and lets us replay a visit, so we can find and fix problems. Clarity sets its own cookies (_clck and _clsk), and Microsoft may set its own cookies through Clarity. We do not load Clarity when your browser sends a Do Not Track or Global Privacy Control signal (Section 10). See the Microsoft Privacy Statement.
• Bot and spam checks: our try-on tools, login and registration pages use Cloudflare Turnstile to tell people from bots. Our feedback forms use Google reCAPTCHA, which loads only on the pages that have those forms. Google may set its own cookies there.
• Stored on your device: the try-on tools save your progress in your browser’s storage, including a copy of your cropped photo, so a reload does not lose your work. It stays on your device and is removed when you start over or clear your browser data.

4. Comments and Embedded Content

We collect your comment data, IP address, and browser info. Some pages include embedded third-party content (e.g., YouTube videos) that may collect data as if you visited their site directly.

5. How We Use Your Data

• To provide, operate, and improve our service
• To respond to your requests
• To analyze usage and detect fraud
• To comply with legal obligations

We do not sell or rent your personal data.

6. Data Sharing

We may share data with trusted service providers and use spam detection tools. Password reset emails include your IP address. These providers receive data when you use the site:

• Microsoft, for Clarity analytics (Section 3);
• Cloudflare, for Turnstile bot checks and for the photo-cropping script our try-on tools load from its cdnjs service;
• Google, for reCAPTCHA on our feedback forms and for Google Fonts, which supplies the fonts on our pages and receives your IP address when a page loads;
• Automattic, whose Akismet service checks what you send through our forms, including sign-ups, for spam;
• Brevo, which delivers the emails the site sends, such as password resets.

7. Data Retention

• Comments, messages and sign-ups you send through our forms, and their metadata (including the IP address they were sent from): stored indefinitely unless you request deletion.
• Account info: kept until deleted by you.
• Uploaded photos: Automatically deleted from active processing systems within forty-eight (48) hours of processing. We may retain uploaded images beyond this period only if necessary to investigate or respond to suspected illegal activity, enforce our Terms, or comply with legal obligations.
• AI-generated output images: Removed from the Service within forty-eight (48) hours of processing. A copy is retained for up to ninety (90) days for abuse prevention and to respond to lawful requests, then deleted.
• Server logs containing IP addresses and usage data: Retained for up to ninety (90) days for security and troubleshooting purposes.
• Try-on records (time, style and result file name, used for our statistics): kept, but the IP address in them is removed after ninety (90) days.
• Photo fingerprints (Section 2.2): deleted ninety (90) days after the photo was last used. Fingerprints in a saved try-on history are kept until the account is deleted, and fingerprints of photos that broke our rules stay on our block list.
• Security cookie records (Section 3): deleted after ninety (90) days without use.
• Login records, which include the IP address of each sign-in: removed within a day after the login expires.
• If an upload breaks our rules, the IP address that sent it stays on a block list. A block we lift is deleted one hundred eighty (180) days after it was placed.
• Backups of our database: kept for up to ninety (90) days.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Request a copy of the personal data we hold about you;
• Request correction of inaccurate personal data;
• Request deletion of your personal data, subject to our legal obligations and the retention periods described in Section 7;
• Object to or restrict certain processing of your personal data.

To exercise any of these rights, contact us using our about page contact form. We will respond to your request within a reasonable timeframe, and no later than required by applicable law.

Please note that we may retain certain data where required by law or where necessary for our legitimate interests, including fraud prevention and security.

9. Data Security

We use industry-standard protections for your data, including:

• Encryption of data in transit using TLS/SSL;
• Restricted access controls limiting who can access uploaded images and user data;
• Automated deletion of uploaded images after the retention periods described in Section 7.

No system is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk. We strongly recommend that you avoid uploading photos containing GPS/EXIF location data. Most modern smartphones embed this data in photos by default; consider disabling location services for your camera app or stripping metadata before uploading.

10. Do Not Track

If your browser sends a Do Not Track or Global Privacy Control signal, we do not load our analytics tool, Microsoft Clarity. We still use what the site needs to work, including your login cookie, the security cookie described in Section 3, Cloudflare Turnstile, Google Fonts, and Google reCAPTCHA on our feedback forms.

Microsoft (through Clarity) and Google (through reCAPTCHA and Google Fonts) may collect information about your visit that they can connect with your visits to other websites. Their own privacy policies describe how they use it.

11. Children’s Privacy

Our site is not intended for users under 18. We do not knowingly collect data from children. If we learn that we have collected personal data from a child under 18, we will take steps to delete that information promptly.

12. Dispute Resolution

Any disputes arising from or relating to this Privacy Policy or your use of the Service shall be resolved in accordance with the Dispute Resolution and Binding Arbitration provisions set forth in Section 18 of our Terms & Conditions, which are incorporated herein by reference.

In summary: disputes will be resolved through binding arbitration administered by the American Arbitration Association in Muskegon County, Michigan, subject to a 30-day opt-out right and a small claims court exception. Please refer to the Terms & Conditions for full details.

Our liability in connection with this Privacy Policy is subject to the same limitations set forth in the Terms & Conditions. We are not responsible for indirect or incidental damages. Because the Service is provided free of charge, our total cumulative liability shall not exceed zero dollars ($0.00), or fifty dollars ($50.00) if a court determines the $0 cap is unenforceable.

13. AI Processing and Image Privacy

When you upload a photo to the Service, the following processing occurs:

• Your photo is transmitted securely to our servers for AI processing.
• Our AI system analyzes facial features and image characteristics solely to generate a preview image.
• The AI-generated result is provided to you through the Service.
• Uploaded and generated images are not shared with other users, displayed publicly, or used for any purpose other than providing the Service to you, unless retention is required as described in Section 7.
• We do not use your uploaded photos to train AI models or for any purpose beyond generating your requested preview image and maintaining the security of the Service.

You acknowledge that AI processing of facial images is integral to the Service and consent to this processing by using the Service.

14. Changes to This Policy

We may update this Privacy Policy. Updates will be posted here with a new effective date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

15. Contact Us

Have questions or concerns? Contact us using our about page contact form.