Privacy Policy

Last updated: December 3, 2025

1. Introduction

Welcome to dontusemyface.com ("we", "our", or "us"). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services.

We operate in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Face Protection Registry is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

privacy@dontusemyface.com

3. Data We Collect

Currently, during our waitlist phase, we collect only the following information:

  • Email address — to notify you when our service launches and to send you updates about our progress.

We do not collect any biometric data, photos, or face embeddings during the waitlist phase. This will only occur when you actively register for our face protection service after launch.

4. How We Use Your Data

We use your email address to:

  • Notify you when our service launches
  • Send occasional updates about our progress and features
  • Respond to your inquiries if you contact us

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Consent — You have given explicit consent by voluntarily submitting your email address to join our waitlist.
  • Legitimate interest — To communicate with you about service updates and launch notifications.

6. Data Storage and Security

Your data is stored securely using the following infrastructure:

  • Database provider: Supabase (region: Frankfurt, Germany, EU)
  • Hosting provider: Vercel

All data is stored within the European Union and is protected by:

  • Encryption at rest and in transit (TLS/SSL)
  • Access controls and authentication
  • Regular security audits by our service providers

7. Data Retention

We retain your email address for as long as you remain on our waitlist or until you request its deletion. If you do not register for our service within 24 months of our launch, we will automatically delete your email from our waitlist database.

8. Your Rights Under GDPR

You have the following rights:

  • Right to access — Request a copy of the data we hold about you.
  • Right to rectification — Request correction of inaccurate data.
  • Right to erasure — Request deletion of your data ("right to be forgotten").
  • Right to restrict processing — Request limitation of how we use your data.
  • Right to data portability — Receive your data in a structured, machine-readable format.
  • Right to withdraw consent — Withdraw your consent at any time.
  • Right to lodge a complaint — File a complaint with your local data protection authority.

To exercise any of these rights, please contact us at privacy@dontusemyface.com.

9. Third-Party Services

We use the following third-party services:

ServicePurposeLocation
SupabaseDatabase storageFrankfurt, Germany (EU)
VercelWebsite hostingGlobal CDN (primary: EU)

These providers are GDPR-compliant and have appropriate data processing agreements in place.

10. Cookies

Our website currently does not use any cookies for tracking or analytics purposes. We only use essential cookies required for the basic functionality of the website. If this changes in the future, we will update this policy and request your consent where required.

11. International Data Transfers

Your personal data is stored and processed within the European Union. In the event that data needs to be transferred outside the EU, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

12. Children's Privacy

Our service is intended for users who are 18 years of age or older. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected such data, please contact us immediately, and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by sending an email to the address you provided or by posting a notice on our website. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: