How the "Create my pattern" tool handles your photos, and the rights you keep over them.
Yann Carbonne (private individual). For any question or request: yann.carbonne@proton.me.
Your photos serve one purpose only: to compute, from your face, the pattern of a mask meant to make you harder to identify for a facial-recognition AI.
Your explicit consent (Art. 9(2)(a) GDPR), collected before any upload through a dedicated checkbox. Because your photos are biometric data, this consent is required. You can withdraw it at any time, without justification.
Your facial images, which contain biometric data: a facial template (a digital signature of the face) is computed for the analysis. No other personal data is requested.
To compute the pattern, your photos are sent for a few moments to a GPU compute provider acting as a processor. A self-hosted anti-robot mechanism protects the uploads, with no third party involved.
The computation is carried out in the European Union region (European Economic Area).
Your photos stay in memory only for the time of the computation. They are erased as soon as the pattern is delivered, and after one hour of inactivity at the latest. The PDF and its preview are kept for 30 minutes, the time to download them, then removed. No image is kept beyond that. We keep only a proof of your consent (date, text version, language), without any image, to meet our obligation of proof.
The site measures its audience with Umami, an anonymous statistics tool, without cookies or advertising identifiers. These statistics contain no image, no biometric data and no session identifier: only aggregated interactions (pages viewed, steps completed, result categories).
You have a right of access, erasure, restriction, objection, and the right to withdraw your consent at any time. Since no image is kept after your session, there is in practice nothing to return or erase. To exercise your rights: yann.carbonne@proton.me. You may also lodge a complaint with the CNIL.