Biometric Data Privacy Rights
A store can tell you it deleted your photo, and it's telling the truth, but it still has your face. That's because the picture and the map of your face are two different files. The store throws out the picture. But it keeps a list of 512 numbers that measure your face, and that list can sit there for 3 years. And you can't just go get yourself a new face. By the end of this, you'll know the one question that gets you the real answer.
Your face gets turned into 512 numbers. There's the distance between your eyes, the width of your nose, the angle of your jaw. And that list is what the store hangs onto.
So how does a face turn into a bunch of numbers? First the camera takes your picture. Then the software measures your face. After that, the picture gets thrown away. But the numbers get saved.
Cybernews took a look at Walmart's own privacy notice. It says they can keep your face data for up to 3 years after your last visit. Read that line again and notice which word is missing.
The word photo isn't anywhere in that sentence. The notice is talking about your face data. And face data means those 512 numbers. The photo runs on its own separate clock.
So one camera flash starts two different clocks. And most shoppers only ever hear about the first one.
You walk in and the camera sees you. In that same second, the software measures your face. A few weeks later, the picture gets deleted. But the numbers are still sitting there in year 3.
Walmart wrote the rule this way. They keep it until the purpose is done. But who decides when it's done? Walmart does.
So what's actually in those numbers? There's the gap between your eyes. There's the width of your nose. And there's the line of your jaw. Put them together and they're as unique as a fingerprint.
And here's the strange part. There isn't a single pixel in that file. No actual picture of you even exists. But a list of numbers can still pick you out of a crowd.
If this helps, a like and a subscribe help us keep it coming.
So a store deletes the picture but keeps the map of your face for 3 years. And nobody at the register ever tells you that map exists. Now here's the part that changes the whole thing. That map was supposed to be a one-way street. But it isn't, and not in the way you'd think.
Look at the two clocks side by side. The picture is often gone in 30 days. But the face map can sit there for 1,095 days. It's the same camera flash, but the endings are very different.
In 2024, researchers from South Korea and Singapore rebuilt faces from stolen number maps. They got a usable face up to 96% of the time. Biometric Update covered the whole thing.
Picture a cashier checking your ID. She hands the card back to you. But she also wrote down a permanent summary of your face on an index card. And that card stays in her drawer.
That drawer is the problem. A stolen password takes you 1 minute to change. But a stolen face map takes forever, because you only get one face.
Cybernews pulled this straight out of Walmart's privacy notice about faces. The page opens by reassuring you. The rule about how long they keep it sits further down. And almost nobody scrolls that far.
Here's the turn. When a notice says we don't keep images, that sentence is true. But it's also answering a smaller question than the one you asked. The picture was never the valuable part.
So the answer to a store keeping your face for 3 years is one question. Don't ask what happens to the photo. Ask what happens to the map of your face.
Tonight, open the privacy page of any store that scans faces. Search the page for the word photo and read that rule. Then search the same page for template or facial geometry. If only the photo rule is there, that's your answer.
The two rules look almost the same on the page. One of them talks about images. The other one talks about your facial geometry. But only the second one is about you in year 3.
Follow your face all the way through. The camera at the door sees you. The software makes 512 numbers. The picture gets dumped. The numbers go in a file with the date of your last visit. And that file is what you ask about.
The CaraComp write-up lays both clocks out in a table. It shows you what each store keeps and for how long.
The people who build these systems actually agree. Once the check is done, dump the picture. But some companies hold onto it forever. Shorter is better.
This week, go back over the places that scanned you. List every gym, airport kiosk and store that scanned your face this year. Ask each one in writing when they erase the face map. And stop using any camera check that names no erase date.
3 years is 1,095 days. Every single one of those days, the store can match the face at its door to the map it saved. That's the real number to remember.
You came in thinking that deleting the photo meant your face was gone. You leave knowing the map is the thing that lasts, and you know which word to search for.
So the check is short. Open the page. Search for photo. Then search for facial geometry. And count the answers.
Keep that index card in your head. The ID goes back in your wallet. But the card in the drawer is the one that follows you for 1,095 days.
Every day we take one story like this and make it simple. Subscribe and tap the bell. Tomorrow's is free too. See you in today's briefing. If this helps, a like and a subscribe help us keep it coming.
