Where your face goes, exactly

This product only works if people trust it with a photo of their face. So instead of boilerplate, here is specifically what happens to it.

Your photo

Photos are stored in a private bucket, never served from a public URL. Raters see your photo through signed links that expire within the hour — a link that leaks stops working before it can spread. There is no public gallery, no browsing, no profile page: the only place your photo ever appears is inside a live head-to-head pair, to someone actively rating.

Your control

You can pause your photo at any time from your results page — it leaves the rating pool immediately and no one is shown it until you resume. You can also permanently remove it, free, at any time: removal deletes the stored image itself, not just the listing, and returns your unused votes. Replacing your photo retires the old one permanently — a photo stands for seven days before it can be replaced free (removal doesn’t shorten that window; early replacement is the paid fresh start). Photos flagged by other users are hidden — immediately for the most serious report categories, after multiple independent reports otherwise — and then reviewed by a human.

Who processes it

Three services touch a photo, each for one job: private object storage (Supabase) holds the encrypted-at-rest image; every submission is screened once for safety — nudity, apparent minors, impersonation — before it can enter the pool, by an automated moderation service (Sightengine) or by a human reviewer; and Stripe processes payments without any photo access. The liveness check at capture runs entirely in your browser — the face-geometry analysis never leaves your device, and we do not build or store biometric templates. No photo is ever sold, licensed, or used for advertising.

Your votes and your score

Votes are recorded to compute ratings, weigh rater quality, and build the group breakdowns. Your own score is visible only to you — results pages are private to your session and are excluded from search engines. When raters can share demographic details (a feature still being built), sharing will be optional and the details used only to show whose votes went where.

Your account

You can rate and even add a photo without creating an account. Sign-in (Google) exists so your rating survives a cleared browser, and stores only the identity needed to recognise you. Payments are processed by Stripe; card details never touch this site’s servers.

What is never done

Photos are not sold, licensed, or used to train face-scoring AI. The only automated processing a photo goes through is capture verification (that it is a live camera shot) and safety moderation — never attractiveness scoring by a machine. This service is for adults: adding a photo requires an 18+ attestation, and moderation screens out apparent minors.

Erasure and access

Removing your photo deletes the stored image immediately. To delete your account and its remaining records entirely, or to request a copy of your data, email privacy@realrate.io from the address on your account and it is handled within 30 days.

Questions? Start with how the rating works or the terms.