Who handles your data
People Finder is an independently operated personal project. The individual operating this service handles the personal data described here. Privacy contact: mpenapps@protonmail.com. This notice describes the current website. See the Legal Notice for service and contact information.
Photos and search results
Choosing and cropping a photo happens locally in your browser. After you confirm the age, permission, and processing statements and continue through checkout, the cropped JPEG is sent through our Cloudflare service to FaceCheck.ID. Search results contain thumbnails, public source links, and similarity scores. Results may contain no matches.
Treat facial images and derived face descriptors as sensitive personal information. A provider’s description of its technology does not by itself settle its legal classification. Do not upload a photo unless it is your own adult face or the adult pictured has explicitly agreed to this processing.
Other data and purposes
- A random browser identifier and secret authorize credit accounting. They are stored in this browser and sent to our backend.
- Credit transactions, search requests, provider responses, and operational information are processed to provide the service and troubleshoot failures.
- Fungies.io processes payment and billing information as merchant of record. We receive order status and limited transaction details needed to provide the purchased search credit.
- Storage preferences and a limited record of the consent action, time, and policy version are saved locally.
- Optional history stores up to 20 cropped photos and their results in this browser. Each entry is limited to 120 results.
- If you email support, we process the information you provide to answer your request.
- Cloudflare and our backend may process network and security information, including IP addresses and request metadata.
- A country code supplied by Cloudflare sets the initial pricing currency, with browser locale as a fallback. If you choose another currency, that preference is saved in this browser. We do not request precise location access.
Legal bases and choices
For facial processing that constitutes biometric data under applicable law, explicit consent under Articles 6(1)(a) and 9(2)(a) GDPR is the intended basis. The person whose face is processed must supply valid consent; a requester cannot consent on an unrelated person’s behalf merely because a photo is public. We use a separate unchecked processing statement before submission.
Necessary service administration relies on providing the requested service where Article 6(1)(b) applies. Security and abuse prevention rely on our legitimate interest in protecting the service and people, subject to their rights. Legal obligations may require certain records. Optional local history is off until you enable it.
You may refuse facial processing and browse the site without searching. You can stop before submission. Withdrawal applies to future processing and does not make earlier lawful processing unlawful. Contact us to withdraw consent after a request; we will explain what can still be stopped or removed.
Recipients and international transfers
Cloudflare hosts the website and routes API requests. FaceCheck.ID receives the cropped photo and performs the provider request. Opening a result visits a separate website. Result thumbnails may be requested directly from external image hosts, which can receive your IP address; our no-referrer policy omits the referring page URL.
Fungies.io (Fungies Inc.) is the designated payment processor and merchant of record for paid orders. Fungies.io collects and processes your name, email address, billing address, payment-method details, order amount and currency, tax information, and transaction records to complete the payment, issue receipts, provide payment-related support, handle refunds and chargebacks, prevent fraud, and meet tax and legal obligations. Fungies.io’s privacy policy applies to that processing. We do not receive or store complete payment-card details.
Aptabase receives general website events, such as page views, checkout openings, confirmed purchases, and search outcomes. Events use a short-lived random session value kept in tab session storage, renewed after one hour of inactivity. Each event also carries coarse context that your browser derives locally: device class (phone, tablet or computer), operating system, browser name and major version, a screen-width band, orientation, language, and how you arrived (search, social, referral, direct). These are closed categories; we never send the user-agent string, referring URL, exact screen size or any device identifier. We do not send Aptabase photos, search results, source links, names, emails, payment-card details, browser credit identifiers or secrets. Our server sends events without forwarding your IP address or browser headers. Do Not Track and Global Privacy Control disable browser analytics. We do not use advertising trackers or sell data for targeted advertising.
Cloudflare, FaceCheck.ID, and Fungies.io operate internationally, so requests may be processed outside your country or the EEA. The provider’s privacy notice describes its handling of image data. Contact us before submitting a photo if you need further information about a recipient or international processing. Consent to facial processing does not waive your data protection rights.
Retention and deletion
The website proxy forwards your cropped photo and does not deliberately save an image file. The crop also remains in memory during the flow and temporarily in session storage while checkout is pending. Optional history persists until you delete it, switch it off, clear site data, or the 20-entry cap removes older entries.
Browser identity and preferences persist until site data is cleared. The local consent-action log is capped at 20 entries. Clearing local storage does not erase backend credit records, provider records, or third-party source pages.
FaceCheck.ID’s published policy states that the original upload is discarded after face extraction and that extracted thumbnails and cached results are deleted after 24 hours. That is the provider’s statement, not an independently verified deletion guarantee from People Finder. See FaceCheck.ID’s Privacy Policy.
Backend credit records and infrastructure logs are separate from browser history. We do not promise immediate deletion of all copies after a search. For a deletion request, contact us with the reference in Settings. Never send your browser secret.
Your rights
Depending on applicable law, you may request access, correction, erasure, restriction, portability, or object to processing. You may withdraw consent. Email mpenapps@protonmail.com; include your browser reference if available, but do not send credentials or unnecessary sensitive information. We may need proportionate information to verify a request. Under GDPR, we normally respond within one month; permitted extensions will be explained.
You may complain to the Hellenic Data Protection Authority or the supervisory authority where you live or work. Removal from People Finder does not remove content from another website. For the provider’s index, use its removal process.
Adults, safety, and updates
The service is for adults 18 and older and prohibits uploads of minors. Self-declaration is not verified age assurance. Do not use results to identify strangers, stalk, harass, or make consequential decisions about someone. Similarity results are not identity verification.
We use HTTPS in deployment, same-origin API routing, and security response headers. No service is completely secure. Material changes to purposes or consent requirements require an updated notice and, where necessary, a fresh consent request.