Who handles your data
People Finder is an independently operated personal project. The individual operating this service handles the personal data described here. Privacy contact: mpenapps@protonmail.com. This notice describes the current website. See the Legal Notice for service and contact information.
Photos and search results
Choosing and cropping a photo happens locally in your browser. After you confirm the age, permission, and processing statements and continue through checkout, the cropped JPEG is sent through our Cloudflare service to FaceCheck.ID. Search results contain thumbnails, public source links, and similarity scores. Current searches return example results.
Treat facial images and derived face descriptors as sensitive personal information. A provider’s description of its technology does not by itself settle its legal classification. Do not upload a photo unless it is your own adult face or the adult pictured has explicitly agreed to this processing.
Other data and purposes
- A random browser identifier and secret authorize credit accounting. They are stored in this browser and sent to our backend.
- Credit transactions, search requests, provider responses, and operational information are processed to provide the service and troubleshoot failures.
- Storage preferences and a limited record of the consent action, time, and policy version are saved locally.
- Optional history stores up to 20 cropped photos and their results in this browser. Each entry is limited to 120 results.
- If you email support, we process the information you provide to answer your request.
- Cloudflare and our backend may process network and security information, including IP addresses and request metadata.
- A country code supplied by Cloudflare sets the initial pricing currency, with browser locale as a fallback. If you choose another currency, that preference is saved in this browser. We do not request precise location access.
Legal bases and choices
For facial processing that constitutes biometric data under applicable law, explicit consent under Articles 6(1)(a) and 9(2)(a) GDPR is the intended basis. The person whose face is processed must supply valid consent; a requester cannot consent on an unrelated person’s behalf merely because a photo is public. We use a separate unchecked processing statement before submission.
Necessary service administration relies on providing the requested service where Article 6(1)(b) applies. Security and abuse prevention rely on our legitimate interest in protecting the service and people, subject to their rights. Legal obligations may require certain records. Optional local history is off until you enable it.
You may refuse facial processing and browse the site without searching. You can stop before submission. Withdrawal applies to future processing and does not make earlier lawful processing unlawful. Contact us to withdraw consent after a request; we will explain what can still be stopped or removed.
Recipients and international transfers
Cloudflare hosts the website and routes API requests. FaceCheck.ID receives the cropped photo and performs the provider request. Opening a result visits a separate website. Result thumbnails may be requested directly from external image hosts, which can receive your IP address; our no-referrer policy omits the referring page URL.
No payment processor is connected to the current checkout. There are no advertising or analytics scripts on this site, and we do not sell data or share it for targeted advertising.
Cloudflare and FaceCheck.ID operate internationally, so requests may be processed outside your country or the EEA. The provider’s privacy notice describes its handling of image data. Contact us before submitting a photo if you need further information about a recipient or international processing. Consent to facial processing does not waive your data protection rights.
Retention and deletion
The website proxy forwards your cropped photo and does not deliberately save an image file. The crop also remains in memory during the flow and temporarily in session storage while checkout is pending. Optional history persists until you delete it, switch it off, clear site data, or the 20-entry cap removes older entries.
Browser identity and preferences persist until site data is cleared. The local consent-action log is capped at 20 entries. Clearing local storage does not erase backend credit records, provider records, or third-party source pages.
FaceCheck.ID’s published policy states that the original upload is discarded after face extraction and that extracted thumbnails and cached results are deleted after 24 hours. That is the provider’s statement, not an independently verified deletion guarantee from People Finder. See FaceCheck.ID’s Privacy Policy.
Backend credit records and infrastructure logs are separate from browser history. We do not promise immediate deletion of all copies after a search. For a deletion request, contact us with the reference in Settings. Never send your browser secret.
Your rights
Depending on applicable law, you may request access, correction, erasure, restriction, portability, or object to processing. You may withdraw consent. Email mpenapps@protonmail.com; include your browser reference if available, but do not send credentials or unnecessary sensitive information. We may need proportionate information to verify a request. Under GDPR, we normally respond within one month; permitted extensions will be explained.
You may complain to the Hellenic Data Protection Authority or the supervisory authority where you live or work. Removal from People Finder does not remove content from another website. For the provider’s index, use its removal process.
Adults, safety, and updates
The service is for adults 18 and older and prohibits uploads of minors. Self-declaration is not verified age assurance. Do not use results to identify strangers, stalk, harass, or make consequential decisions about someone. Similarity results are not identity verification.
We use HTTPS in deployment, same-origin API routing, and security response headers. No service is completely secure. Material changes to purposes or consent requirements require an updated notice and, where necessary, a fresh consent request.