Biometric Privacy & Protection (Restricted Faces)

Fotobots is designed for strict compliance with international biometric privacy frameworks (including GDPR in Europe and PDPA in Asia).

---

How Privacy Shielding Works

Runners, VIPs, or minor participants can request that their photos be excluded from public face search.

When a participant’s face is registered as a Restricted Face:

1. Their biometric signature is stored in an encrypted suppression table.
2. Any subsequent search query matching this biometric signature will return zero photos ({ photos: [] }), even if matching photos exist in the album.

---

Registering a Restricted Face

1. Request Upload Slot: POST /openapi/photos/restricted/face/signed
2. Upload Binary: Direct PUT to the returned upload URL.
3. Confirm Privacy Registration: POST /openapi/photos/restricted/face/success