Privacy.

Does Maisonlip upload my photos?

No. Every camera frame and every photo you upload is processed entirely in your own browser. There is no upload endpoint. Nothing about your face, your camera feed, or any image you supply ever leaves your device.

How is that guaranteed?

In three layers, so it cannot regress by accident:

1. There is no backend. The whole service is static files on a CDN; there is no running code that could receive an upload.
2. A Content-Security-Policy header tells your browser which origins are allowed. Photos and camera frames can only go to Maisonlip itself (which has no endpoint for them) — any rogue upload attempt is blocked at the browser level.
3. The code that handles images is linted to forbid the JavaScript functions that make network calls in the first place.

Does Maisonlip use analytics?

Yes — aggregate, anonymised ones only, via Google Analytics 4. The purpose is simple: to know how many people open Maisonlip, which pages get visited, and on which browsers, so the experience can be improved. That is the full list of what we want to know.

What Analytics receives is limited to page URLs (like /try), your device type (e.g. "iPhone Safari"), your country (derived from your IP, which is then discarded by Google — IP anonymisation is on), and timing. Google Signals, ad personalisation, and demographic inference are all turned off. No user identifiers are attached; no cross-site profile is built.

Analytics has no access to your camera, the photos you upload, the colors you try, the snapshots you save, or anything else visual. Those never reach any server. The analytics pipeline and the try-on pipeline are entirely separate.

What cookies does Maisonlip set?

Google Analytics sets a first-party _ga cookie (and a few variants) to distinguish repeat visits. It contains a random identifier and an expiry; no name, email, or account link. You can delete it any time from your browser's storage settings, and block it entirely with any major ad-blocker — the try-on itself will keep working.

No other cookies, no local-storage trackers. The one other thing Maisonlip stores on your device is an optional "recent colors" list in your browser's local storage; that list stays on your device and is never read by any server.

Do I need to make an account?

No. Maisonlip does not have accounts. There is no form asking for an email, no sign-in, no password. You just use it.

Can I verify all this myself?

Yes. Open your browser's developer tools, switch to the Network tab, and use Maisonlip normally. You will see a small set of initial asset loads, the Google Fonts request for typography, and Google Analytics beacons (one on page load and route change). While you are trying on colors, no additional image or video data is sent anywhere. If you have an ad-blocker, the Analytics beacons are usually blocked and the app will still work exactly the same.

Contact

Privacy questions or concerns: hello@maisonlip.com.