PimEyes' Web Scraping and Facial Database Operations
Investigation into how PimEyes builds its facial recognition database by scraping publicly accessible images from across the internet without the knowledge or consent of those depicted.
Unlock Full Privacy Intelligence
Get deep-dive reports on every company that touches your data. SeekerPro members see breach timelines, DSAR success rate...
Learn MoreAudit Your Site Free
Run a full privacy and compliance audit on any website in 60 seconds. NexusBro scans cookie consent, tracker behavior, a...
Learn MoreAutomate Privacy Compliance
Stop wasting hours on manual DSAR filings and cookie consent management. BliniBot handles the busywork so your team can ...
Learn MoreKey Findings
- #1Web crawlers continuously scrape facial images without consent of those depicted
- #2Database reportedly contains billions of facial images indexed for reverse search
- #3Available to any paying subscriber unlike law-enforcement-only Clearview AI
- #4Can identify individuals from partial, low-quality, or distant photos
- #5Called the most dangerous publicly available surveillance tool by researchers
Investigation Details
According to reports, PimEyes operates web crawlers that continuously scrape publicly accessible images from social media profiles, news articles, blog posts, and other web pages, extracting facial embeddings without the knowledge or consent of the individuals depicted. The company's database reportedly contains billions of facial images indexed for reverse search. Unlike Clearview AI which restricts access to law enforcement, PimEyes makes its facial recognition available to any paying subscriber. A 2023 investigation by Ars Technica demonstrated that PimEyes could identify individuals from partial, low-quality images including photos taken from a distance. Privacy researchers have called PimEyes the most dangerous publicly available surveillance tool on the internet.
pimeyes has been the subject of increasing scrutiny over its data collection practices practices. Privacy researchers and regulatory bodies across multiple jurisdictions have documented concerns about how the company handles user data, particularly regarding consent, transparency, and data minimization principles. The findings suggest a pattern of prioritizing business metrics over user privacy, a trend observed across the broader technology industry. Users affected by these practices have limited recourse without proactive intervention such as filing formal complaints with data protection authorities or submitting DSAR requests.
Regulatory responses have varied significantly. European data protection authorities have been more aggressive in enforcement under GDPR, while US enforcement remains fragmented across state-level privacy laws. The investigation highlights the need for stronger federal privacy legislation and more transparent corporate data practices. Affected users should consider reviewing their privacy settings, submitting data deletion requests, and exploring privacy-preserving alternatives recommended by independent researchers.
Related Scandals
Take Action
Protect Your Data Across Every Platform
Tools trusted by thousands of privacy-conscious users worldwide
No card charged today. Cancel anytime.
Frequently Asked Questions
What data does pimeyes collect?
Our investigation reveals pimeyes engages in data collection practices. Investigation into how PimEyes builds its facial recognition database by scraping publicly accessible images from across the internet without the knowledge or consent of those depicted.
Is pimeyes's data collection practices legal?
The legality of pimeyes's practices varies by jurisdiction. Under GDPR, companies must have a lawful basis for data processing. Under CCPA, California residents can opt out of data sales.
How can I protect myself from pimeyes?
You can submit a data subject access request (DSAR) to pimeyes, opt out of data collection through their privacy settings, or use privacy-preserving alternatives.