# What stays and what leaves the device?

“Your face stays on the device” is true of the **image**. Some **non-photo** information can still move, because otherwise the website could not know the estimation took place.

## What stays on the device

- Camera frames (captured/live), and the face image and associated data used for estimation
- The biometric patterns the model looks at (they are not shipped as a mugshot)

## What actually leaves the device

- An estimated age result: pass/fail against a gate, or an age range
- Anonymous diagnostics about the estimation — how long the estimate took, frame timings, device class — which Privately uses to sign the result and to monitor quality. No photo, no face data, nothing that identifies you
- A transaction id so the result can be tied to *this* result, which cannot be used to identify you

## Versus cloud age assurance

Many age assurance providers work like this: your app or site captures a picture and uploads it to a vendor. The vendor’s computers look at the image. You have to trust their storage, staff access, and subprocessors with a picture of a face. FaceAssure keeps inference on the device; the website still receives an age signal, not a photo.

HTML version: https://age-estimation.info/#stays