Local by default
Skinbar’s flagship idea is simple: you should not need to create an account and ship selfies to a stranger’s GPU farm to get a cosmetic sketch of light, evenness and warmth. The scan script reads pixels in a canvas on your page. Gallery thumbnails and journal rows save into IndexedDB under this origin.
That design shrinks the personal information Skinbar’s operators receive in ordinary use. It is not a magic invisibility cloak — networks still see that you loaded the site — but your face frames are not our hosted product inventory.
Camera permission
Browsers gate the camera behind a permission prompt. Skinbar keeps the camera off until you ask. You can revoke permission in browser settings. Denying the camera does not block the journal.
What is stored where
IndexedDB: journal entries, gallery images you chose to save. localStorage: trial timestamps and a subscribed flag for the R99/mo UI. Service worker caches: HTML/CSS/JS shells for offline tolerance — not your gallery dump.
PayFast, when connected, handles payment fields on their flow. Until merchant keys exist, checkout shows coming online without harvesting card numbers into Skinbar forms.
Ads and affiliates
Google AdSense may load on pages after content. Awin affiliate links (a=2055499) may wrap shop URLs. Both mean third parties can receive standard web technical data when you click or when ad code runs. Use browser controls if you want stricter tracking limits.
Your practical rights
Clear site data to erase local journal and gallery. Read Privacy & POPIA for the longer statement. Contact channels on the site footer apply for correspondence you email us — we can delete emails we hold, not pixels we never received.
Continue with the scan only when you are comfortable with on-device rules. Pair with journal habits that stay calm.
Related: trial & checkout. Not legal advice. Cosmetic product.
Shared devices need caution. A family tablet may show the last gallery to the next sibling. Use browser profiles or clear site data when handing a device over.
Employers may monitor network traffic. Visiting the site reveals you used it; it should not reveal face images that stayed on-device. Do not scan where camera use is prohibited.
Malware on a compromised computer can read page storage. Keep devices updated. Local storage is safer from remote operators; it is not safer from a fully compromised handset.
If you want zero camera use, enjoy guides and journal alone. The scan is optional craft, not a gate.
When PayFast keys go live, payment follows PayFast controls. When ad partners change, ads.txt and this guide should stay honest about what funds the lights. Align updates with the privacy page as the product evolves.
What leaves the device
Scan mathematics run in the page you loaded. Gallery blobs and journal rows sit in IndexedDB. Trial timestamps may sit in localStorage. We do not ask you to create a Skinbar face-cloud account to use the core tool. Third parties such as AdSense and fonts providers receive ordinary web traffic metadata when those resources load — see the privacy page for that split.
Affiliate clicks to retailers send you off-site; those shops have their own policies.
Shared phones and workplaces
If you use a shared device, know that local Skinbar data is visible to other profiles that can unlock the browser. Use OS user accounts, browser profiles or simply skip gallery capture on shared machines. Workplace monitoring software is outside Skinbar’s control.
Clearing site data is a hard reset. Export anything you need first by your own means (notes app, clinician email) because we cannot restore wiped IndexedDB from a server we do not keep.
POPIA-minded choices
Minimising biometric imagery we never receive is a design choice aligned with data minimisation ideas in South African privacy law. This guide is not legal advice. Organisations embedding similar tools should seek counsel. Individuals who email support create ordinary correspondence we process to reply.
Read Privacy & POPIA and the medical disclaimer.
Cosmetic guidance only. Not a medical diagnosis.
Ads, fonts and the privacy split
Skinbar’s scan logic aims to stay local. The page still loads fonts and may load AdSense after content. Those network requests are ordinary web traffic, not an upload of your gallery. You can use browser controls, tracker blockers and third-party cookie settings according to your comfort.
If you need a stricter posture, use the journal without opening the camera, or read guides with scripts blocked knowing ads and some polish may break. Privacy is a spectrum; we document the design rather than promise invisibility on the modern web.
Context note 1 for On-device privacy: keep routines boring when skin is reactive, prefer daylight for comparable Skinbar frames, and treat clinicians as the authority on pain, infection, changing moles and procedure aftercare. Affiliate shopping may use Awin 2055499 — compare labels and prices yourself.
Context note 2 for On-device privacy: keep routines boring when skin is reactive, prefer daylight for comparable Skinbar frames, and treat clinicians as the authority on pain, infection, changing moles and procedure aftercare. Affiliate shopping may use Awin 2055499 — compare labels and prices yourself.