Last updated: August 29, 2026
This is the part you actually care about, so it goes first. When you upload a selfie, it is sent directly to our AI model provider to generate your preview: your uploaded selfie is never stored on our servers. Our model provider (Replicate, Inc.) automatically deletes inputs and outputs shortly after generation. The generated looks are kept privately for up to 7 days so you can revisit and download them from your "My looks" wall, then they are deleted automatically. A vote board you choose to share (which includes your before photo and the looks you picked) stays up for 7 days so friends can vote, then deletes. Your photos are never used to train AI models, never shared with anyone else, and never published.
If you sign in with Google we store your email address, your name, your credit balance and a log of your generations (the style name and time, not the photo itself). Deleting your account and this data is one email away (address below).
Credit packs are processed by Creem as merchant of record. We store the order record (pack, amount, status); we never see or store your card details.
A hashed counter tied to your IP address enforces the free try-on limit, and we keep standard aggregate analytics (page views, country, device type). If you join a feature waitlist we store that email until the feature ships or you ask us to remove it.
A session cookie keeps you signed in. The website also loads Google Analytics, which may use analytics cookies. Your browser stores references to in-progress try-ons so you can resume them. When you leave for sign-in or checkout, session storage temporarily keeps your photo, result references and selected pack to restore your comparison on return. This draft is read and cleared when you return; it is not sent to analytics.
If you choose to rate a result, we keep your choice and selected reason linked to that generation for 30 days. We do not ask you to re-upload your photo. If you choose a reason for not buying a pack, we record the selected category, not a written message.
The studio's optional usage-sharing checkbox is off by default; your choice is remembered for this browser tab's session. When you enable it, the existing Google Analytics tag receives studio opens, photo preparation, style selection, generation outcomes, result views, sign-in clicks, pack views, checkout transitions and comparison exports. With your opt-in, it also receives the category of feedback you explicitly submit and a coarse traffic-source category such as ChatGPT, another AI assistant, search, direct or other. These event payloads do not include photos, filenames, account or generation IDs, access tokens, raw referrers, search queries, AI prompts, raw error messages or URL query strings. They are subject to Google Analytics processing and the retention settings of our Analytics property. We also keep separate daily aggregate counts of result views, pack views, checkout clicks and exports, including the same coarse source category; their short-lived keyed deduplication hashes are kept for 2 days and category totals for 90 days. These studio events respect browser Do Not Track and Global Privacy Control preferences. Explicit feedback to HairGlimpse remains optional and works without analytics consent. Turning off studio sharing stops future studio events; this checkbox does not control the website's existing page-view analytics.
Separately from that optional studio checkbox, when you start Creem checkout or when purchased credits are confirmed on return, the same Google Analytics tag may receive standard begin_checkout and purchase events (pack name, price, currency, and the order id as transaction id). These do not include photos, emails, card details, or the checkout URL. They still respect Do Not Track and Global Privacy Control. Our own payment ledger, not these events, is the source of truth for whether a pack was paid.
Saving a comparison sheet or stylist notes creates the file inside your browser and does not upload photos again.
Questions or deletion requests: hello@hairglimpse.com.