Privacy Policy

Live Face Swap (live-face-swap.app) swaps your face for another one in real time: your browser sends your camera video to an AI model, which sends the swapped video straight back while you watch. This page explains what information that involves, why, who else handles it and how long it stays. "We" and "us" are the team behind live-face-swap.app.

The short version

• Your camera video passes through to the face-swap model and back to your screen. We do not record it, save it or watch it, and no other user can see it.
• A reference face you upload goes from your browser straight to the face-swap provider, only to run your swaps. It never reaches our servers, and we never sell it, publish it or use it to train AI models.
• To sign you in and keep your credit balance, we hold your email address and account details.

What you give us

Your camera video. When you press start, your browser asks for camera permission. Once you allow it, the video is sent over an encrypted WebRTC connection to the face-swap model for as long as the swap runs, and the swapped picture comes back to your browser. Stopping the swap or closing the tab ends the connection, and the one-time access key your browser used for that swap is switched off. Your camera preview before you start stays in your browser.

A reference face. The face you want to wear: either one of the ready-made faces on the site or a photo you upload. When a swap starts, your browser uploads that photo directly to the face-swap provider's storage, and the model applies it to your video. We don't keep a copy: on our side the photo only exists in your open browser tab, and it is gone when you close it.

Your account. When you sign up: your email address, your name if you add one, and either a password (kept only as a one-way hash) or the basic profile your sign-in provider shares. We also keep your credit balance and a record of how many seconds of live swap each session used.

Waitlist email. Some parts of the site aren't open yet. Where that's the case, a form offers to let you know when they are. If you use it, we keep your email address, the page and option you picked, your answer to "What would you use it for?" and a salted, one-way hash of your IP address that helps us filter out automated spam. We use it only for that one notice: the address isn't verified, added to a newsletter or shared.

Emails to us. If you write to us, we keep the thread so we can answer.

What the site records on its own

• Session records. For each live swap: when it started and stopped, why it stopped, the page it ran on, how many seconds the face-swap provider counted and how many credits it cost — so your balance is right and disputes can be checked. No video, image or reference face is part of it.
• Abuse checks. A salted hash of your IP address and an identifier your browser computes from its own settings, used to rate-limit requests and stop automated abuse. The browser identifier is also kept in your browser's local storage.
• Server logs. As on any website, our host processes your IP address, browser type and the pages you request, to serve the site and fend off attacks.

• Visit counts. Plausible Analytics counts visits without cookies and without keeping anything that identifies you. We see totals only: page views, countries, referring sites.

Cookies and local storage

Signing in sets a session cookie that keeps you signed in until you sign out. If you arrive from another site or a link with campaign tags, a cookie also remembers where you came from for 30 days, so a sign-up can be attributed to it. Local storage holds the device identifier above and your light or dark theme choice.

Services that handle your data for us

A small number of outside services keep the site running. Each one gets only what its job needs:

• Cloudflare — hosts the site and its database (your account, credits and session records); like any web host it sees your IP address when you connect.
• XMAX — runs the real-time face swap: it receives your camera video over an encrypted WebRTC connection (carried by its real-time video network, Agora) and the reference face your browser uploads to its storage, and sends the swapped video straight back to your browser.

• Plausible Analytics — counts page visits without cookies and without identifying you.

We also hand over information when the law requires it, or when that is needed to stop fraud or protect someone's safety. We do not sell personal information or share it for advertising.

How long it is kept

• Camera video: not kept by us. It exists only while it travels to the model and back; on the provider's side it is handled under XMAX's own terms.
• Uploaded reference photos: not kept by us. The copy in the face-swap provider's storage is handled under XMAX's own terms; email us if you want us to ask XMAX to remove yours.
• Session records and abuse checks: as long as we need them to keep balances correct and block abuse; they contain no raw IP address.

• Waitlist entries: until we've sent the notice for that feature or you ask us to remove yours, whichever comes first.

• Account data: until you ask us to delete your account.

Your rights

Email us and we will tell you what we hold about you, send you a copy, correct it or delete it. We reply within 30 days. Depending on where you live (the EU, the UK or California, for example), the law may give you further rights, including complaining to your data protection authority.

Age limit

Live Face Swap is only for people aged 18 or over. Nobody under 18 may appear on camera during a swap or in a reference photo. If we learn that we hold an image of a minor, we delete it.

Nobody under that age should join the waitlist either; if we find that a child has, we remove the entry.

Security

All traffic is encrypted: the site over HTTPS, the live video over WebRTC's built-in encryption, reference photos over HTTPS to the provider's storage. Our account key with the face-swap provider never leaves our servers: each swap gets its own short-lived key that can only spend what your balance covers and is switched off when the swap ends.

Where your data goes

Our host and the face-swap provider run servers in several countries, so your data may be processed outside the country you live in.

Changes to this policy

Whenever this policy changes, the date at the top changes too. If a change affects how your video or photos are handled, we will announce it on the site before it applies.

Contact

Questions, copies of your data or deletion requests: support@live-face-swap.app