Privacy Policy

The short version

• Face detection and face recognition run entirely in your browser, on your device.
• We never receive, store, share or sell your photos, the photos you scan, or any face data.
• Face data exists only in your browser's memory during a scan and is deleted when you close or reload the page.
• No accounts, no cookies, no ads, no analytics or tracking.

1. What happens on your device

When you add a reference photo and scan a Google Drive folder, Spoti's code runs in your browser. It detects faces in each photo and turns each face into a numeric "face template" so faces can be compared. These templates, your reference photos and the photos you scan stay in your browser's memory. They are not uploaded to us, not saved to disk, and are discarded when you close or reload the page.

To save you downloading them again, your browser stores the face-recognition model files (about 260 MB) in its local cache. These files contain no personal data, and you can delete them by clearing your browser's site data.

2. What our server sees

Spoti's server does only two small things, and it doesn't keep what it handles:

• Folder listing: your browser sends us the ID of the public Google Drive folder you entered. Our server asks Google for that folder's list of files and returns it to you.
• Download fallback: if your browser can't load a photo directly from Google, it may ask our server to pass that photo through. The photo is streamed straight to you and is not stored or analysed.

Like any website, our hosting provider (Vercel) keeps standard technical logs, such as IP address, time, and the address requested (which can include a Drive folder or file ID), for security and reliability. These are retained according to Vercel's policies and aren't used to identify you.

3. Third-party services

Your browser connects directly to these services, which have their own privacy policies:

• Google (Google Drive): photos load from Google's servers.
• Hugging Face: the face-recognition model files are downloaded from there.
• jsDelivr: serves part of the code that runs the models.
• Vercel: hosts this website.

If you choose "Sign in with Google" to scan a private folder, Google gives your browser a read-only access token. It stays in your browser, is never sent to our server, and is gone when you close the page.

4. Biometric data

Some laws, such as the Illinois Biometric Information Privacy Act (BIPA), the EU and UK GDPR, and India's Digital Personal Data Protection Act, give special protection to face data. Spoti is built so that we, the operators, do not collect, capture, receive, store, share or sell biometric identifiers or biometric information. Face templates are created on your device, used only to compare faces for the search you started, and destroyed at the end of your browser session. We don't use face data for any other purpose.

5. Other people in your photos

Scanning a folder analyses every face in it on your device so it can be compared with your reference photos. Nothing about those faces is kept or sent anywhere, and only the matching photos are shown to you. Our Terms of Use allow searching only for yourself, or for someone who has given you permission (or your own child).

6. Children

Spoti is not directed at children under 13. Parents and guardians may use it to find photos of their own children.

7. Your rights and contact

Because we don't hold your photos or face data, there is usually nothing for us to access or delete. For any privacy question or request, contact us at contact-email-not-set@example.com.

8. Changes

If this policy changes, we'll update this page and its effective date.