1. About this policy
is an offering of Square Zero Labs LLC. This policy explains what happens to information when you use our website and virtual makeup tools. You do not need an account or payment information to use the site.
2. Your camera stays in your browser
We do not collect, upload, or store your camera photos or video. Your browser handles face tracking, makeup previews, and color estimates. We do not use your camera image for ads, training, or face recognition.
The demo works without your camera. The site asks for camera access only when you choose See it on me. You can turn it off on the page or revoke permission in your browser. Face landmarks and hair masks stay in your browser. Our tools do not send images, screenshots, or face geometry to an AI assistant.
3. Outside AI assistants
If you use an outside AI assistant, it may be able to take a screenshot or record the page. That could show your face and surroundings. We tell assistants not to capture the mirror, but we cannot enforce that instruction.
The assistant's provider handles anything it captures under its own privacy policy. We cannot delete information held by that provider. If you do not want an assistant to see your camera image, turn off your camera or use the demo before connecting it.
4. What an assistant can receive from our tools
Our site tools (called WebMCP) can give an assistant your current makeup settings, selected mirror source, and product matches. If the assistant calls the color-analysis tool, it can also receive estimated skin, eye, and hair colors, undertone, lighting quality, and confidence. These details can be personal information, even though they are not images.
The site keeps these settings in the open page, not in an account. You can clear your color profile with the page controls. Closing the page clears its current state. It does not erase results the assistant has already received; check the assistant provider's history and privacy settings for those.
5. Other information
Our service providers may receive the following information:
- Hosting and content delivery: IP address, pages and files requested, the site that linked you here, browser and device details, and request time. They use this to deliver and protect the site.
- Sentry: error and performance details, such as page addresses, error messages, device details, IP address, and details about web requests. We use these reports to fix problems. We have turned off session replay and block media attachments, so Sentry does not receive your mirror image through those features.
- Google Analytics, when active: page views, referrals, interactions, approximate location, device details, and cookie IDs. We use summary reports to understand site traffic. We have not linked Analytics to Google Ads and do not use it for personalized ads. We do not send it camera images or color profiles.
- Email: if you write to us, we and our email provider receive your address, message, and any attachments. Please avoid sending sensitive information unless it is needed for your request.
6. Analytics and tracking choices
We use Google Analytics to measure site traffic when it is enabled. It runs unless you opt out below or your browser sends a Global Privacy Control signal. Global Privacy Control is a browser setting that asks sites to limit data sharing. The status below shows whether Analytics is on in this browser.
Analytics may set cookies named _ga and
_ga_* to recognize visits. Google's default cookie
lifetime is two years, subject to browser limits and site
settings. Depending on your Google settings, Google may connect
your visit here with activity on other sites and apps that use its
services. See
Google's privacy policy.
You can opt out here. We save your choice in this browser, stop Analytics on later page visits, and try to remove its cookies. This does not erase data Google already received. You can turn Analytics back on here. We turn off Google Analytics when your browser sends a Global Privacy Control signal. We do not respond to the older Do Not Track setting.
7. How information is used and shared
Hosting providers use request details to run and protect the site. We use Sentry reports to fix errors and summary Analytics reports to understand traffic. We use emails to answer requests. We may disclose information when required by law, to protect people or rights, or during a business transfer.
Outside AI assistants and retailers handle information under their own policies. Amazon may receive a request when a product image loads or you follow an affiliate link. We do not receive your payment details. We do not sell personal information or share it for advertising across other sites.
8. How long information is kept
Within our site, camera frames and appearance settings remain in the page while it is open. Closing the page clears them from the site. An outside assistant may keep information it already received, as explained above. We save your Analytics opt-out in browser storage and a cookie when your browser allows them. Your browser may clear either one; the cookie expires after one year. Hosting, Sentry, and Google Analytics keep data for their standard periods. We do not keep a separate database of visitor profiles or camera data.
We keep emails only while needed to answer and follow up on your request or meet legal obligations. We use reasonable security measures, but no website or transmission is completely secure.
9. Your California privacy choices
You can ask us to review, correct, or delete information you sent us. If the California Consumer Privacy Act applies to us, you may also have rights to know what personal information we hold and to opt out of certain sales or sharing. We do not penalize you for making a request.
Contact us to make a request. We may need to confirm your identity. We may not be able to connect technical records to you, and we may keep information where the law allows or requires it. Contact an AI provider or retailer directly about information it holds.
10. Age, changes, and contact
This site is for adults aged 18 and over. If you believe a child sent us personal information, please contact us. We do not knowingly collect information from children or sell or share the information of anyone under 16.
We will update the date above when this policy changes and post a notice on the site for major changes. For questions or privacy requests, write to hello [at] [dot] com. Replace [at] and [dot] with the usual email symbols. See our Terms of Service.