Privacy policy
Last updated October 27, 2026.
What NoFace collects
- Your account: name, email address and how you sign in (email, Apple or Google).
- Your friends, circles and trips, and the posts, comments, photos and videos you share. Photos have their location data removed before they're stored.
- Push notification tokens for your devices.
- Error reports from the app, linked to your account: the app and system version and what went wrong. No crash or usage tracking beyond that.
- Feedback and reports you send, including a copy of reported content.
Who sees it
Only the friends and circles you share with. NoFace has no ads, no analytics or tracking, and doesn't sell or share your data.
Service providers
NoFace runs on its own server (Hetzner, Germany) and uses Google Firebase for sign-in and push notifications and Cloudflare for its network, storage and image processing. Photos are checked against hashes of known child sexual abuse material only; nothing else about them is analyzed. Confirmed matches are reported to NCMEC as US law requires.
Deleting your account
Delete your account in the app (Profile, Delete account) or from this page. It's hidden right away and deleted for good after 30 days; signing in before then restores it. Backups age out within about 13 months.