How face search handles guests’ privacy

What a guest is asked

One clear question, before the camera opens: whether they agree to a face search of this event’s photos. On the Find my photos link, searching for a family member asks the same question for them. Saying no ends it there, and no selfie is taken.

What a guest sees, and what they can refuse

• On the Find my photos link, only the photos their selfie matched.
• The whole gallery only on the Whole album link, and only while the photographer has browsing on.
• Saying no to the search: they can still browse when the photographer allows it.
• Trying again or leaving: a guest can retake the selfie, or leave without searching.

What the photographer controls

• Face search on or off for each event, at any time.
• Which link guests get: Find my photos or Whole album.
• A PIN for the gallery.
• On plans that include guest registration, whether guests give a name and phone number first.

The privacy policy

What PixSpace collects, and how long each part is kept, is set out in full on the Privacy and face data page.

Questions

• What happens to a guest’s selfie?

  It’s used for one search and deleted as soon as that search has run. No face data from the selfie is stored. Every guest is asked before the camera opens, and anyone who says no is never searched.

• What is face data, and how long is it kept?

  Face data is a numeric description of each face in an event’s photos that lets them be matched to a selfie. It isn’t a photo. It’s kept while the event exists, and deleting a photo, an event or an account deletes its face data too.

• Are photos shared between events?

  No. A selfie is compared with that one event’s photos, and photos and face data are never shared between events or between photographers.