Last updated · June 2026
Privacy Policy
FatedFace is a one-shot computer-generated portrait service. We collect the minimum data needed to generate your reading, deliver it to your inbox, and measure whether our ads are working. This page explains exactly what we collect, what we do with it, and the rights you have over it.
What we collect
- Quiz answers. Your date of birth, the sixteen choices you make during the quiz, and the sensitivity slider value.
- Identity. The first name and email address you enter before checkout.
- Payment confirmation. Stripe handles your card data directly. We never see or store card numbers. We only see the success of your payment and the email you supplied to Stripe.
- Your portrait and reading. The generated outputs we produce for you.
- Analytics and ad measurement events. Page views, add-to-cart, initiate-checkout, and purchase events. We send a SHA-256 hash of your email with these events — never the cleartext.
How we use it
- Quiz answers go into a portrait prompt sent to FAL.ai and a reading prompt sent to Anthropic. Nothing else.
- Your name and email are used to address the reading and deliver it via Resend.
- Hashed analytics events tell us how the funnel is performing — which pages convert, where people drop off, and which ad campaigns send buying visitors. We never sell your data and we don't retarget you outside of standard ad measurement.
Third parties we use
Each service receives only what it needs to do its job:
- Stripe· payment processing. Stripe privacy
- FAL.ai· portrait generation. Receives the assembled prompt; not your name or email.
- Anthropic· compatibility reading. Receives your first name and quiz answers; not your email.
- Resend· transactional email delivery. Receives your email, name, and the final reading.
- Vercel + Upstash· hosting and the key-value store that holds your purchase record while we generate and deliver your portrait.
- Meta (Facebook)· ad measurement via the Meta Pixel (in your browser) and the Conversions API (server-to-server). We send a SHA-256 hash of your email plus event metadata (purchase value, currency). Cleartext email is never transmitted. Meta privacy
- TikTok· ad measurement via the TikTok Pixel (in your browser) and the Events API (server-to-server). We send a SHA-256 hash of your email plus event metadata (purchase value, currency). Cleartext email is never transmitted. TikTok privacy
- PostHog· product analytics. Pageviews and funnel events identified by the same SHA-256 hash of your email — never cleartext. PostHog privacy
Sensitive data
One quiz question asks who you'd like the portrait to depict (woman / man / nonbinary). This drives the visual rendering of the portrait only. We do not use it to infer or profile your sexual orientation, do not share this field with advertisers, and do not use it for any purpose other than the prompt we send to FAL.ai. It is stored in our Upstash database and deleted with the rest of your purchase record after 12 months.
Your privacy choices
You can opt out of Meta, TikTok, and PostHog tracking at any time on our Privacy Choices page. Once opted out, we stop sending events to either service from your browser and from our server for that session and any future session on the same browser.
We also honor the Global Privacy Control (GPC) signal sent by some browsers (Firefox, Brave, DuckDuckGo). If your browser sends it, we treat that as an opt-out and persist the preference automatically on your first visit.
Do Not Sell or Share My Personal Information
We do not sell personal information for money. We do share hashed identifiers with Meta and TikTok for advertising measurement, which qualifies as “sharing” under California's CCPA/CPRA. The Privacy Choices page is the opt-out mechanism for that sharing. Residents of California, Colorado, Connecticut, Virginia, and Oregon: this is the link your state law gives you the right to.
Cookies and local storage
The site uses these small pieces of state. None of them are used for cross-site tracking other than what you're told about above.
- sessionStorage— saves your quiz progress so a refresh doesn't kick you back to question 1. Clears when you close the tab.
- _fbp, _fbc— Meta Pixel attribution cookies. Set when you visit the site (unless you're opted out). Used to attribute conversions to ad clicks. Cleared by us when you opt out.
- _ttp— TikTok Pixel attribution cookie. Set when you visit the site (unless you're opted out). Used to attribute conversions to TikTok ad clicks. Cleared by us when you opt out.
- PostHog distinct_id— stored in localStorage. Identifies your browser to PostHog so funnel events stitch together. Replaced by the SHA-256 hash of your email once you enter it.
- ff_optout— remembers your Privacy Choices preference for one year. Set by the choices page or automatically by GPC detection.
How long we keep your data
Your purchase record (name, email, quiz answers, portrait URL, reading text) stays in our store for up to 12 months so we can support refund and re-delivery requests. Retention is enforced at the database level — every record has a 12-month time-to-live and is deleted automatically when it expires. You can request earlier deletion by email at any time.
Your rights
You can ask us, at any time, to:
- Send you a copy of every piece of data we hold about you.
- Correct anything that's wrong.
- Delete your record entirely (this also voids the 30-day refund window).
- Opt out of any future contact from us.
Residents of California, Colorado, Connecticut, Virginia, and Oregon: your state consumer privacy law gives you the additional right to opt out of sale or sharing of your personal information (use the Privacy Choices page) and the right to appeal a denied request. There is no fee for exercising these rights.
Email hello@fatedface.com and we'll action it within 30 days.
Children
FatedFace is for adults. We don't knowingly collect data from anyone under 18. Our quiz validates your date of birth on the server and rejects under-18 submissions. If you believe a minor has somehow completed the quiz, email us and we'll delete the record.
Changes
If we change this policy materially we'll update the date at the top of the page and, if you're an existing customer, email you the summary.