What happens to your photographs

Where your images are stored

Your photographs are stored on this site's own server, in a directory that is not reachable over the web. They are not placed in the ordinary media library, they do not appear in any public listing, and they have no public URL that could be shared, guessed or indexed by a search engine.

When an image is displayed back to you, it passes through a check that confirms you are signed in and that the image belongs to your account. Anyone else requesting the same address — including another signed-in member — receives nothing.

Metadata is removed

Photographs frequently carry hidden metadata, including the GPS coordinates of where they were taken and the device that took them. Every image uploaded to Vanity is re-encoded on arrival, which removes that metadata before the file is stored. We never retain it.

What is sent to the AI provider

To produce your analysis, both images are transmitted once, over an encrypted connection, to the AI provider that runs the vision model, along with the instructions and any notes or goals you wrote. That request is made from this server. Your browser never contacts the provider, and the credential used to authenticate is never sent to your browser.

Only what is needed goes with the request: the two images and your written context. Your name, email address and account details are not included.

What the analysis will not do

• It does not perform facial recognition and does not attempt to identify anyone in either photograph.
• It will not tell you whether two photographs show the same person.
• It does not infer race, ethnicity, religion, health conditions, age, sexual orientation, political views or any other sensitive characteristic.
• It does not assign attractiveness scores or rank anyone against anyone else.
• It does not recommend changing your body.

These restrictions are written into every request the system makes and are not something an administrator can switch off from a settings screen.

Who can see your looks

Only you. Every saved look is stored as a private record owned by your account. Requests for a look you do not own are refused, and are refused identically whether the record exists or not — so it is not possible to work out what anybody else has saved by trying different addresses.

Site administrators retain technical access for support and moderation, as they do on any hosted service.

Deleting your data

Deleting a look from your dashboard permanently removes the record, the analysis, and both image files from the server. It does not go to a trash folder and it is not recoverable. Replacing an image also deletes the file it replaced.

Your looks are kept until you delete them. There is no automatic expiry on this site.

Consent

You are asked to confirm consent before your first analysis, and the confirmation is recorded against the look. Only upload photographs you have the right to upload. For your inspiration image in particular, use a picture you are entitled to use.

Questions

If you want to know anything else about how your data is handled, or want your account and all of its content removed, contact joshsostek@gmail.com.