Cookies & Security
Cookies & local storage
We keep this light. Onyou uses only what it needs to run, and no advertising trackers, cross-site tracking, or behavioral profiling.
What we use
- Essential storage — keeps you signed in, remembers your session, and runs the free reveal and its abuse-limiting safely. The service can't work without these, so they don't require consent.
- Bot protection — a small amount of storage to tell humans from bots on the free reveal.
- Privacy-respecting, EU-hosted analytics — used only for aggregate traffic and performance metrics, so we can see what's slow or broken and improve the service. We don't use it to profile you, follow you across other sites, or build a picture of your behavior.
Your choices
You can clear or block cookies and local storage in your browser settings. Blocking essential storage may stop parts of Onyou from working. Where analytics storage requires your consent, we ask for it and you can decline without losing access to the core service.
Security
Keeping your face and your data safe is the core of how Onyou is built. Here's specifically how — no vague "100% secure" promises, just what we actually do.
The biggest protection: we never keep your selfie
Your photo creates your look — then it's gone. We never keep it, never use it to train AI, and handle it under formal data-protection agreements.
On the free reveal your selfie passes straight through to create your results and is never written to our servers. When you buy your Edit, we hold it in encrypted storage for at most 15 minutes while your looks are created — so we can finish even if you close the tab — then delete it automatically. There's never a lasting store of faces to breach. We also don't create or store a "faceprint" or any biometric template of you.
Your looks, and how long we keep them
Your looks are yours to download. We keep a copy for 90 days, then delete it — and we don't recreate them afterward, so save the ones you love before then. You can also opt out of saving entirely when your results are generated, and delete anything with one tap. Free-reveal images are never stored.
How we protect the data we do keep
- Encrypted at rest and in transit. The data we store — your report, any looks you chose to save, and your account — is encrypted at rest with AES-256 and in transit with TLS.
- Hosted in the UK and EU, in access-controlled infrastructure.
- Only you can see your results. Access is locked to your account.
- Least data, least access. We collect the minimum we need, and limit who and what can reach it.
- We store only a "yes" for your age check — never your date of birth — and a hashed version of your IP address, never the plain one.
Safety screening
Every image — the one you upload and every one we generate — is checked by a strict, independent safety scanner and blocked if it's flagged for nudity or violence. The scanner doesn't store your images.
Our providers
The trusted providers who help run Onyou each operate under a data-processing agreement, and we don't use any provider to process your facial image without appropriate terms in place. Details are in our Privacy Notice.
If something goes wrong
If a data breach ever affected your rights, we'll act on it and notify you and the regulator where the law requires. If you think you've found a security issue, please tell us at security@onyou.beauty — we'll look into it and we won't pursue good-faith researchers who report responsibly.