Privacy Policy

Chad vs Chud is a real-time face-rating game. The product only works because we process video from your camera and store still images of your face. This page describes what we actually do with your data — in plain language, without dressing it up.

If you do not agree with anything below, do not use Chad vs Chud. You will be asked to affirmatively accept this policy before your camera is opened. We do not infer consent from continued use of the site.

What we collect

• Video frames during a round. While a round is live we sample your camera at roughly 2 frames per second for about 15 seconds. Each frame is downscaled to a long edge of 480 pixels and encoded as a JPEG before it leaves your browser.
• Still snapshots of your face. When a round ends, we save one or more JPEG snapshots of your face to our server, indexed by your handle (and, if you signed in, your account id). These snapshots are used to (a) display your face on your round history, (b) put pairs of faces in front of human voters on the Vote page, and (c) appear on the Top 100 leaderboard if you place. These snapshots are publicly viewable while they remain in our database.
• 15-second match video clips. Each round we record a short .webm video clip of your camera feed (server-side, after the round ends) and store it in our cloud object store. These clips are replayed as the opponent in another player's matchwhen that player has been waiting in the queue without finding a live opponent. The other player sees a normal “match found” screen with your handle and ELO; nothing visually distinguishes a recorded clip from a live opponent. We never play your clip back to you, and we never combine it with audio (your microphone is never requested). You can delete all of your stored clips at /delete-my-data; deletion removes the clip from our cloud store within 30 days.
• Face geometry / embeddings. Our scoring models compute face landmarks and a fixed-length numeric embedding (an ArcFace vector) from your camera feed. This is biometric information under laws like Illinois BIPA, Texas CUBI, Washington HB 1493, and the EU GDPR (Article 9). We use it solely to compute your round score; we do not use it to identify you across services.
• Demographic estimates. Our model produces coarse age-bucket and gender-bucket estimates from each frame. These are used internally to calibrate scoring and are not displayed.
• Your handle (display name). Whatever you typed when you joined the queue. We do not require an email or real name unless you sign in with Google.
• Your stated birthdate. Collected once at the consent gate to verify you are at least 18. Stored locally in your browser and on our server alongside your consent record.
• Round outcome and ELO.Win/loss/tie/void, the ensemble's 0–10 score, and the resulting rating change.
• Pairwise human votes. When you or other users vote on the Vote page, we record which face was picked, by whom, and when.
• IP address. Used to rate-limit new accounts, detect abuse, and (coarsely) determine your country for legal compliance. Not sold, not shared with advertisers.
• Device fingerprint. A random ID kept in your browser (cvc_device_id in localStorage) used solely to rate-limit join attempts from the same browser.
• Product analytics.We record pageviews and aggregate UI events (which pages you visit, which buttons you click, how far you get in the queue/calibration/round flow) so we can understand what is and isn't working. These events include a PostHog-issued anonymous id, your IP (used coarsely for country/region), basic browser metadata (user agent, viewport size), and the URLs you visit on this site. They do not include your face, your camera frames, your handle, or any audio. See “Third parties we use” below for more on PostHog.

What we do not collect

• Audio. Your microphone is never requested.
• Your contacts, your social graph, or third-party login besides Google.
• Your precise geolocation (beyond what your IP coarsely implies).
• Payment information (the product is free).

How long we keep your data

• In-memory frames during scoring:evicted from the inference server's memory within 60 seconds of the round ending.
• Saved face snapshots: retained for as long as your handle remains active and for up to 180 days after your last round, after which they are eligible for purge. You may delete them at any time at /delete-my-data.
• Match video clips: retained for up to 30 days from the date of the recorded round, after which they are automatically purged from our cloud object store. You may delete all of your clips immediately at /delete-my-data.
• Round history, ELO, and votes: retained for as long as the leaderboard exists, unless you request deletion.
• Consent records: retained for the duration of any applicable statute of limitations (typically up to 5 years for biometric-privacy claims), even after you delete your other data, because the consent record is the legal evidence that we had your permission.

Biometric information — the specific disclosure

Chad vs Chud collects, stores, and processes biometric identifiers and biometric information as those terms are defined in laws including the Illinois Biometric Information Privacy Act (740 ILCS 14/), the Texas Capture or Use of Biometric Identifier Act, Washington RCW 19.375, and the EU/UK General Data Protection Regulation Article 9.

Specific purpose: to compute a numeric attractiveness score and to display your face image to other users for the matchmaking, leaderboard, and pairwise-vote features described above.

Length of term:as described in “How long we keep your data” above. Biometric embeddings are deleted along with the snapshot they were derived from. Upon a user request to delete data, the relevant snapshots and embeddings are deleted within 30 days; in no event is biometric data retained beyond three years from the date of your last interaction, in line with BIPA § 15(a).

We will not sell, lease, trade, or otherwise profit from your biometric identifiers or biometric information. We will not disclose them except: (i) with your separate, specific consent; (ii) to complete a financial transaction you requested; (iii) when required by law, warrant, or subpoena; or (iv) to a service provider strictly for the purposes described in this policy and bound by equivalent confidentiality obligations.

Where your face appears publicly

By using Chad vs Chud you understand that your captured face image, your chosen handle, and your scoring outcomes are displayed publicly within the app, including but not limited to:

• The Vote page, where pairs of faces are shown to other users for ranking;
• The Top 100 leaderboard, when you rank within it;
• Round-result screens shown to your match opponent.
• As an opponent video clip in another player's match, when they enter the queue and we don't find them a live opponent quickly enough. The other player sees your handle and ELO at the time of recording; we do not announce the clip is recorded.

We do not place these images on any third-party site, but pages that display your face are publicly accessible and may be cached, indexed, or screenshotted by visitors. Do not use Chad vs Chud if you do not want your face displayed publicly in this manner.

Your rights

• Delete your data. Visit /delete-my-data to remove your handle, snapshots, embeddings, ELO history, and votes. We process deletion requests within 30 days. The consent record is retained as evidence and described above.
• Access & portability. Email privacy@chadvschud.com for a copy of the data we hold about you.
• Withdraw biometric consent. Withdrawing consent stops further processing and triggers deletion of your snapshots and embeddings. Submit at /delete-my-data.
• Residents of California, EU, UK, Brazil, and similar jurisdictions: you have additional access, portability, objection, and complaint-to-supervisor rights. Email the address above and we will honor them.

Third parties we use

• Anthropic— for the close-call multimodal LLM judge call. Anthropic API traffic is operated under a zero-data-retention arrangement; faces sent to the judge are not used to train models and are not retained beyond the duration of the request.
• Google— if you sign in with Google, Google provides us your email address, display name, and profile photo URL. See Google's privacy policy for what Google collects on its end.
• Vercel— web hosting. Sees encrypted traffic, IP addresses, and request metadata.
• Supabase— database and authentication provider. Stores handles, ELO, snapshots metadata, votes, and consent records.
• GPU inference host— runs the scoring model. Receives downscaled JPEG frames during a round; does not retain frames after scoring.
• PostHog— product analytics. Receives pageviews and UI events (clicks, form submits) along with an anonymous device id, IP address, and basic browser metadata. We use this to understand which pages and flows are used and where users drop off. PostHog does not receive your face, your camera frames, your handle, or any audio. Session replay is disabled. Events are sent to PostHog's US ingestion endpoint (us.i.posthog.com); see PostHog's privacy policy for what they do with the data on their end.

Children

Chad vs Chud is not directed to children. You must be at least 18 years old to use it. We collect a stated birthdate at the consent gate and reject users who report being under 18. If you believe a minor has used Chad vs Chud, report it to abuse@chadvschud.com or via the /abuse page; we will remove the relevant data on receipt.

International transfers

Our servers are located in the United States. If you access Chad vs Chud from outside the United States, your data — including biometric information — will be transferred to and processed in the United States, which may not provide the same level of data protection as your home jurisdiction.

Security

We protect your data using industry-standard measures including TLS in transit, encrypted storage at rest where supported by our infrastructure providers, access controls limiting which engineers can read snapshot data, and audit logging on administrative actions. No system is perfectly secure; if we detect a breach affecting your data we will notify you as required by applicable law.

Changes

If we materially change this policy we will bump the “last updated” date and bump the consent version, which will require you to affirmatively re-consent on your next visit.

Contact

Privacy questions, deletion requests, complaints: privacy@chadvschud.com. Abuse, CSAM reports, or report a minor: abuse@chadvschud.com (see /abuse for our reporting process and the NCMEC CyberTipline link).