Legal notice and privacy

Impressum / Legal notice

Privacy policy

Your photo

In the simulator and calculators, your photo is analyzed entirely in your browser. It is never sent to us or to anyone else, and it is not stored. Only the optional 360° spin uploads a photo, see below. The height you enter and the changes you explore also stay in your browser and are discarded when you close or reload the page.

360° spin (only when you start one)

The 360° spin is the one tool that uploads a photo, and only after you tick the confirmation box and press the button. Your photo goes to our server (Cloudflare Workers, R2 storage and D1 database by Cloudflare, Inc.) and to fal.ai (Features & Labels, Inc., USA), which runs the video model and screens the photo for nudity. We delete the photo as soon as the video is made or the attempt fails, and in any case within two days (also if you leave before the video is ready). The video is stored until you delete it or your account; it is visible only to you unless you switch on its share link. Legal basis: Art. 6 (1) (b) GDPR, to provide the spin you asked for. Data sent to fal.ai is processed in the USA under the EU Standard Contractual Clauses (Art. 46 GDPR). Do not upload photos of other people without their permission, of children, or nude photos.

Account. Making spins needs an account, and you sign in with Google (Google Ireland Limited). Google tells us only your email address and that it is verified; we never see your Google password. We store that email address, a hashed sign-in session (cookie hp_session, 30 days), your spin balance, your purchases and your spins. While you sign in, a cookie hp_oauth (10 minutes) ties Google's answer to your browser. Both cookies are needed for the sign-in you ask for (§ 25 (2) TDDDG).

Payments. Packs are sold through Stripe Managed Payments: Stripe is the seller of record for your purchase, charges the VAT of your country and pays it, and receives your payment details directly (its terms are shown at checkout). We pass Stripe your email address for the receipt, and only learn that you paid and which pack. We keep purchase records as long as tax law requires (in Germany, 10 years).

Deleting. Delete single spins from their menu, or your account with its spins and balance from the account menu on the 360° spin page. Purchase records stay, as tax law requires.

Refunds. A spin that fails is put back on your balance automatically. Unused packs are refunded in full within 14 days of purchase; email us from the address you signed in with. Used spins are not refundable, because the AI processing starts as soon as you make one; if a spin comes out badly wrong, email us its link and we put it back.

Cookies and analytics (Google Analytics, only with your consent)

Without your consent this site sets no cookies and loads nothing from Google. The pose detection model is downloaded from this site's own server. The clinic embeds (/embed/) contain no analytics.

Visitor statistics without cookies (Cloudflare Web Analytics)

To count visitors and page views and to measure loading speed, we use Cloudflare Web Analytics from our host Cloudflare, Inc. (address above). According to Cloudflare it sets no cookies, stores nothing on your device and does not track you across sites or build a profile. Your photo, height and measurements are not part of it. Legal basis: Art. 6 (1) (f) GDPR, our interest in knowing how many people use the site and in keeping it fast. You can object at any time (Art. 21 GDPR) by email, see the contact above. Details: Cloudflare privacy policy.

If you click "Accept" in the banner, we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to count page views and see which functions are used: photo upload, whether the analysis worked, first use of each slider, clicks on our buttons (including the 3D body's controls and email links), which questions and sections you open, and whether you share, copy or save the result image or link. On the 360° spin page also: signing in, choosing a photo, the style of started, finished and failed spins, turning a spin, redeemed codes, turning on a share link, and pack purchases (pack and price; never your email address, photo or video). Google sets cookies (_ga, _ga_*, valid up to two years) and receives your IP address, browser and device data and your approximate location. Your photo, your height and your measurements are never sent. Google may process the data in the USA; Google is certified under the EU-U.S. Data Privacy Framework. Legal basis: your consent, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw it at any time with "Cookie settings" in the footer; this deletes the cookies and stops the counting. Details: Google privacy policy.

Hosting and server logs

This site is hosted on Cloudflare Pages by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open it, the provider processes technical data your browser sends (IP address, date and time, requested page, browser type) to deliver the site and protect it against attacks. Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in a secure, working website. Cloudflare keeps this data only as long as needed for these purposes. Data may be processed in the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and additionally relies on the EU Standard Contractual Clauses (Art. 46 GDPR). Details: Cloudflare privacy policy.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing (Art. 15–21 GDPR). You may also lodge a complaint with a data protection supervisory authority, for example the one in your state of residence.

Medical disclaimer

Height Preview is a visual estimate based on one photo. It is not a medical device, does not provide medical advice and does not assess whether any surgery is suitable for you. Consult a qualified orthopaedic surgeon before making decisions about treatment.