SOVRAN ← Back Account
Consent · Face matching

Before your face is
measured at all.

Face geometry is a biometric identifier. Illinois, Texas and Washington regulate it specifically, and they are right to. This page is what we would ask you to agree to — written in full, before the feature exists, so you can judge it without a signup form in the way.

Not built yet · published early on purpose

What actually happens

Your camera opens. You are asked to blink, turn your head, and follow a dot — a liveness check, so that a photograph held up to the lens will not pass. A model running inside your browser converts your face into a list of numbers, typically 128 or 512 of them, called an embedding.

That list is not a photograph and cannot be turned back into one. It is closer to a fingerprint of proportions — distances and ratios between features — than to an image.

No frame of video is kept. No photograph is saved. Nothing is uploaded. The model file downloads to your device and the work happens there, the same way the Photo Check and the Audit already work.

What is measured
The geometry of your face, expressed as a list of numbers. Not a photo.
Why
So that when we search people-search sites for your name, your device can tell which of the returned profile photos are actually you, rather than someone who shares your name.
Where it is computed
In your browser, on your hardware. The model runs locally.
Where it is stored
Your choice. Either encrypted in your vault with the key we never receive, or held only until you close the tab.
Who can access it
Only you. If you store it in the vault, it is encrypted with a key derived from your passphrase. We hold ciphertext we cannot open.
How long it is kept
Until you delete it. There is no retention schedule because there is nothing on our side to retain.
How to delete it
One button in your account, or close the tab if you chose not to store it. Deleting your account removes it with everything else.
Is it shared
No. Not with partners, not with processors, not with law enforcement — because we never have it.
Is it sold
No. Article V, permanently.

What we will never do with it

  • We will never upload it. There is no endpoint that accepts a face embedding. Not disabled — not built.
  • We will never build an index of faces. Not yours, and not the strangers whose photos appear on the sites we search. That index is what Clearview AI built and it is the thing this project exists to argue against.
  • We will never let anyone search for a face that is not their own. There is no upload path, so there is nothing to abuse — not by us, not by a customer, not by anyone who takes our servers.
  • We will never use it to identify you to ourselves. We do not know your name. A face embedding does not give us one.
  • We will never require it. Every other tool works without this. It is one optional feature, not a gate.

The risks, stated plainly

A biometric is permanent. You can change a password. You cannot change your face. That is precisely why it deserves this much text, and why our answer is to never hold it rather than to hold it carefully.

Your device could be compromised. If someone controls your phone, they can reach anything on it, including this. That is true of your photos and your messages too, but it should be said.

Matching is not perfect. Faces change with age, weight, lighting and hair. Expect some misses, and occasionally a false match on a stranger who genuinely resembles you. You confirm every result before anything is filed — nothing is submitted on a match alone.

You may not need this at all. Most people are exposed through their name, address and phone number, not their photograph. The free broker checklist addresses most of it. Use this only if a photograph of you is the specific problem.

What you would be agreeing to

Each item separately, because a single blanket checkbox is not consent — it is a formality people click through.

Checkboxes are disabled because the feature does not exist yet. When it ships, all six must be ticked individually, and this page will be shown before the camera is ever requested — not linked from a footer afterwards.

Why this page exists before the feature does

Consent screens are normally written by lawyers after a product ships, to protect the company. This one is published first, so that anyone can read it and tell us it is not good enough while there is still time to change it.

If something here reads as weasel wording, or a promise that could be quietly walked back, say so. That is a more useful contribution than most bug reports.

Add SOVRAN to your home screenOpens like an app. Still nothing uploaded.