Biometric Data Notice and Consent
Face search uses biometric identifiers. Several jurisdictions regulate that specifically, and this notice sets out exactly what happens, so that consent to it is informed rather than assumed. It is presented to every guest before the camera or file picker opens.
Effective 21 August 2026
What a biometric identifier means here
When a face appears in a photograph, our software measures the geometry of that face and records it as a list of numbers — a face descriptor. Two descriptors can be compared to estimate whether they show the same person. The descriptor is a biometric identifier. A photograph on its own is not.
What happens to your selfie
Your selfie is sent to our server, held in memory, converted into a descriptor, compared against the descriptors for that one event, and then discarded. Both the image and the descriptor cease to exist when the request finishes.
The selfie is not stored, not backed up, not written to a log, not used to train any model, and not shared with anyone.
What happens to faces in event photographs
Faces in the photographs an organizer uploads are converted into descriptors and stored against that event, so that guests can search it. They are deleted when the event is deleted or its retention period ends.
They are never used to identify anyone outside that event, and there is no cross-event or global face index.
Your consent
Consent is recorded with a version identifier (currently biometric-search-v1) and a timestamp. If this notice changes materially, the version changes and consent is requested again.
You may decline. Declining means selfie search is not available to you; you can still browse an event's public gallery where the organizer has enabled it.
Organizer responsibilities
Organizers are responsible for having a lawful basis to photograph attendees and to process their images, including any notice or consent their jurisdiction requires at the event itself.
Organizers can disable selfie search for an event entirely, and must do so where face processing is not permitted.
Jurisdictions with specific biometric laws
Some jurisdictions — including the US states of Illinois, Texas and Washington, and others — impose specific requirements on the collection and retention of biometric identifiers. Where an event is subject to those requirements, the organizer must ensure the necessary notice and written consent are in place, and should disable selfie search if they are not.