One-time selfie verification at sign up.

This is the full written notice behind the consent line at sign up. Section 17 of the Privacy Policy covers the same check.

1. Identity verification. findlucid is 18+. The verified badge is voluntary: submit a selfie to earn it. This notice says what we collect, why, and how long we keep it.
2. What we collect. One selfie. If a selfie cannot settle your verification, we may ask you to add a photo of a government ID through a secure link; the same notice, consent, and destruction rules cover it. We compute a face template (numbers for your face geometry; not a photo; cannot be reversed), a one-way fraud value flagging the same photo under different accounts, and recapture signs (a photo of a screen or printout). Recapture checking is experimental; it never proves a live person is in front of the camera. Live check: 3 timed still frames of a server-picked motion, or up to 5 frames of a server-picked screen-flash sequence. Your device may check whether a face is visible and how much the picture changed between frames; only those results and the frames are sent. Frames are encrypted before they are stored, shown only to your reviewer, and deleted at the exact moment a decision is recorded.
3. Why we collect it. Four reasons: (1) confirm you are 18 or older, by human review against your profile birthdate; (2) flag the same photo under different accounts; (3) confirm a recovery selfie is you; (4) compare against banned accounts' templates. Matches trigger human review only, never automatic rejection or ban. Never for advertising or model training.
4. How it is protected. Selfie and template are AES-256-GCM encrypted, key separate from the database, template stored separately from your photo. Only trained review staff can view your photo; every view is access-logged; no one outside findlucid can see it.
5. Decisions and deletion. Every submission is reviewed by a person. Your selfie, frames, and everything read from them are deleted at the exact moment a decision is recorded, inside the same database write. Undecided after 7 days, the submission is closed and everything deleted.
6. What we keep. Only: the decision, a tamper-evident audit hash, timestamps, the record of this consent, the fraud check value, and (if approved) one encrypted face template. No photos, names, addresses, document numbers, or birthdates. The template and the check value are kept until the earliest of account deletion, re-verification, or 3 years after your last interaction. The decision and consent record are kept while your account is open and deleted with it; only an anonymous security record (what happened, a reason code, when) stays, for up to 3 years.
7. Why the law requires this notice. Illinois's Biometric Information Privacy Act (740 ILCS 14/1 et seq.) requires written notice and your written permission before collection, and lets residents sue for $1,000 per violation, $5,000 per intentional or reckless violation, plus attorney fees. Texas's Capture or Use of Biometric Identifier Act (section 503.001) requires notice and informed consent before capturing face geometry commercially, and destruction once the purpose is done.
8. Your choice. Ask support to delete your submission anytime before a decision. After a decision, you can withdraw this permission anytime in Settings, under Verification, or by emailing support@findlucid.com: we delete your face template and fraud check value, and your verified badge is removed until you verify again. Unverified profiles do not appear in discovery.

Notice version 2026-10-22-disclosure-v5.

I have read the notice above. I give findlucid my written permission to collect my biometric identifier (a face template describing my face geometry, computed from my selfie, plus the short camera frames from the motion or flash check) and to use and keep them exactly as described above and in section 17 of the Privacy Policy. I can withdraw this permission anytime, as described above.