Privacy policy

We collect only what NewFace needs to run your account, show your profile and keep people safe.

• Account details. Your email, password, whether you joined as a model or a scout, and for models, date of birth. We also record when you agreed to the Terms of Service and this policy, and when you confirmed that your profile will be visible to other people.
• Profile details models add. Everything listed under “On your public profile” above, plus your contact preference.
• Photos. Your browser resizes and compresses each photo before it uploads. We store that resized copy with its width, height and position in your gallery.
• Activity between members. Messages you send, models you save to Favourites, people you block and reports you make.
• Payment status. Stripe tells us whether your membership ($19 a month) or Featured placement ($20 a month) is active and when it renews. Card details stay with Stripe.
• Usage. The pages you open and steps you take, such as starting sign-up, uploading a photo or sending a message, with your browser type, device and approximate location based on your IP address. We also note when you were last active, because Discover lists recently active profiles first.
• Where you came from. If you arrive from an ad, the click id in the ad link and the campaign it belongs to.

• To run your account and show your profile to scouts in Discover and on its own page.
• To check that every model is 18 or over before an account is created.
• To sort Discover: Featured profiles first, which is a paid placement, then the most recently active.
• To deliver messages and email you when one arrives. The email names the sender and links to the conversation. It never includes the message itself, and you get at most one an hour per conversation.
• To take payments and keep your listing and Featured placement in step with your subscriptions.
• To review reports, and to hide or remove profiles and photos or suspend accounts that break the Terms.
• To see which pages work and which ads lead to sign-ups and payments, so we can improve NewFace and decide where to advertise.

We do not sell your personal information, and we do not use your profile or your messages to target you with ads.

A few companies process data for us so NewFace can work. Each one handles only what its job needs.

• Supabase stores the database, your sign-in and your photos.
• Vercel hosts the website.
• Stripe takes payments and runs the billing page where you cancel.
• Resend sends our emails.
• PostHog records how the site is used.
• Ad platforms (Google, Meta, TikTok and Reddit). If you came from one of their ads, we may tell that platform you signed up or paid, using the ad's click id and a one-way scrambled (hashed) copy of your email. They never receive your profile, photos or messages.

Some of these companies process data outside your country, including in the United States. We may also share information when the law requires it or to protect someone's safety.

• Sign-in cookies keep you logged in. Without them you cannot stay signed in.
• Analytics storage. PostHog keeps a random id in a cookie and in your browser's local storage for up to a year, so a return visit counts as the same visitor.
• Ad click cookies hold the click id from an ad link for 90 days.
• Session storage holds campaign tags from the link you arrived on and clears when you close the tab.
• Message drafts. If you start writing to a model before logging in, your browser keeps the draft so it is still there afterwards.

You can clear or block cookies in your browser settings at any time.

• Your account, profile, photos and favourites stay until you delete your account. A hidden profile is kept, but not shown, until you unhide or delete it.
• Messages you sent are deleted with your account. Messages the other person sent are theirs and stay in their inbox.
• Reports are kept while we review them and as a record of what we did.
• Payment records are kept by Stripe and by us for as long as tax and accounting rules require.
• Ad click cookies expire after 90 days. Analytics ids expire after a year.

• Edit any profile detail in My profile. Saved changes show on your public profile straight away.
• Choose how scouts reach you: through NewFace messages, which is the default, or by showing your email.
• Switch on Hide from Discover to take your profile out of Discover and off its public page without deleting anything. Switch it off to bring it back.
• Block anyone who messages you, and report any profile or conversation.
• Cancel your membership or Featured placement at any time with Manage billing on your dashboard.

To delete your account, models and scouts alike:

1. Open My profile and go to Delete account.
2. Type DELETE to confirm.

This permanently removes your account, profile, photos in storage, favourites and the messages you sent. Any active subscription is cancelled and you are signed out. It cannot be undone.

Depending on where you live, including the UK, Ireland, the US, Canada, Australia and New Zealand, you can ask to see the personal information we hold about you, correct it, delete it, get a copy of it, or object to how we use it. Most of this you can do yourself in My profile. For anything else, see Contact below. Using these rights never changes how NewFace treats you.

In the UK and Ireland, we rely on our agreement with you to run your account, your consent for making your profile public, our legitimate interest in keeping NewFace safe and measuring how it performs, and legal duties for payment records.

If you are unhappy with how we handle your data, you can complain to your local regulator: the ICO in the UK, the Data Protection Commission in Ireland, the OAIC in Australia, the Office of the Privacy Commissioner of Canada, or the Office of the Privacy Commissioner in New Zealand.

NewFace is for adults. Models must be 18 or over: sign-up asks for your date of birth and refuses anyone younger, and profiles show age, never the date itself. If we learn an account belongs to someone under 18, we remove it. If you think a profile belongs to someone under 18, use the Report link on that profile.

Everything travels over an encrypted connection. Our database only lets each person read their own private records, and a conversation only by the two people in it. Passwords are stored scrambled.

No service is perfectly secure, so use a password you do not use anywhere else. If a breach affects your data, we will tell you as the law requires.

When this policy changes, the date at the top changes too. If a change affects what is public or who we share data with, we will tell members by email or on the site before it takes effect.

For a question about this policy, or a request you cannot complete in My profile, reply to any email NewFace has sent you. We answer within one month.