Privacy Policy
Draft. Last updated October 2026. Have a lawyer review before launch.
Your photos
Face analysis runs entirely in your browser using an on-device model. Your photo is never uploaded, transmitted or stored by Softmaxxy. The image is discarded as soon as measurements are computed. We do not create or keep biometric identifiers or face templates.
Scan results and quiz answers
Your scores and quiz answers are kept in your browser storage on your device. They are not sent to our servers, except as described under Email below if you choose to sign up.
Email (optional)
If you choose to enter your email, we collect your email address, the page you signed up from, and, from the report page, your harmony score number, your chosen plan and your skin type and skin concerns from the quiz, so we can send your personalised routine, rescan reminder and occasional tips (which may include affiliate offers). We store this with our email provider, Buttondown, which processes it on our behalf. We never sell your email. You can unsubscribe at any time via the link in every email, or ask us to delete your data by contacting us.
Analytics
We use PostHog to understand how people move through Softmaxxy (for example, how many people start a scan, finish the quiz or open a product link) so we can improve it. PostHog may set a cookie or local-storage identifier and records events such as page views, button clicks, which step you reached, your chosen plan, which product link you clicked, a rough score range (e.g. “70–79”), and where you came from (referring site and campaign tags such as utm_source). We never send your photo, face measurements or landmarks, or your email address to PostHog. Session recording is turned off, we do not record what you type into forms, and if your browser sends a Do Not Track signal we do not collect analytics at all. When you click a product link, it goes through softmaxxy.com/go/… so we can count the click before sending you to the retailer.
Third parties
The face model files are downloaded from Google and jsDelivr content networks (no images are sent). Analytics is processed by PostHog as described above. Clicking an affiliate link takes you to a third-party site with its own privacy policy and cookies.
Your rights
- Access, correction and deletion of your email data on request.
- Residents of Illinois, Texas, Washington, the EU/UK and California have specific rights regarding biometric and personal data. Because we do not collect or store biometric data, most of these apply only to your email.
Age
Softmaxxy is for adults aged 18 and older.
Contact
privacy@softmaxxy.com (TODO)