Personal by design.

Traffic and performance

We use Vercel Web Analytics and Speed Insights for cookieless, anonymised traffic and performance measurements. Query strings and URL fragments are removed before events are sent.

Optional product analytics

If you choose “Allow product analytics”, Faced records a small set of steps such as viewing a product, starting the customiser, whether photo processing succeeded, and reaching checkout. Google Analytics measures consented page visits, acquisition, and this reviewed event subset using first-party analytics cookies. Advertising storage, advertising user data, and ads personalisation remain disabled. PostHog EU uses a random identifier that lasts for one browser tab; its person profiles, location enrichment, automatic capture, and session replay are disabled. You can withdraw permission at any time with the “Privacy choices” button, which stops future optional collection and removes the Google Analytics cookies accessible to this site.

Creator and campaign links

If you arrive through a registered creator or campaign link, Faced keeps only its short code and capture/expiry timestamps in a signed, short-lived first-party cookie. The cookie has no visitor, account, photo, design, contact, or payment identifier. We use it to count aggregate product views, customiser starts, carts, and Shopify-verified paid orders, with low-volume report rows hidden. This affiliate accounting is separate from optional Google Analytics and PostHog collection; clearing site cookies removes the browser attribution.

Error monitoring

When configured, Sentry receives technical errors and limited performance traces. Faced removes request bodies, cookies, authorization headers, URL queries, user identity, and unsafe breadcrumb categories before sending an error. Retained network and navigation breadcrumbs contain only scrubbed request metadata. Session replay is not enabled.

Support chat

Support chat is text-only and cannot access your photo, design, cart, account, payment, or order details. Automated-help messages remain only in the open page unless you explicitly choose “Start human chat.” At that point the customer text previewed in the transfer screen, later human-support messages, and the basic thread details needed to operate the chat are saved in Faced’s private database. One of the two store owners can claim the chat and reply. Human conversations are automatically deleted after 30 days without activity. Prompts and replies are not sent to analytics or error reports. When optional AI answer mode is enabled, only a bounded recent text conversation and relevant reviewed help passages are sent to the configured model provider. Do not enter payment details, order numbers, addresses, photos, or other personal information in chat.

Marketing email

Faced queues marketing email only after a separate, explicit opt-in. Marketing consent is not bundled with photo processing, checkout, or optional product analytics. Every marketing message includes an unsubscribe link; withdrawing consent suppresses queued and future marketing email unless you explicitly opt in again later.

If you request a saved-design link, the address is kept only in server-restricted marketing-contact storage. The email contains no photo or filename. Its random link can grant access to one saved design until the earlier of the link, design, or guest-session expiry, and can be revoked.