MIDImyFACE · Legal

Participation Terms and Privacy Notice

Last updated: 17 July 2026

MIDImyFACE turns facial movement into live musical control. Camera images are processed in your browser and are not recorded or uploaded. Temporary facial landmark coordinates are transmitted to operate the installation.

1. Who operates MIDImyFACE

MIDImyFACE is an interactive artistic and technological project operated by Ricardo Arbiza, Uruguay. Ricardo Arbiza is the data controller for personal information processed specifically for MIDImyFACE participation.

MIDImyFACE is not intended for unsupervised children under 13. If you are under 13, please have a parent or guardian register and participate with you.

2. Information processed

Depending on how you use the live installation, the following information is processed:

• your Google account name, email address, account identifier and verification status through Firebase Authentication;
• your chosen nickname and country;
• a pseudonymous identity key used to enforce the 30-minute participation cooldown;
• temporary session information, queue position, gesture trigger counts and normalized facial landmark coordinates;
• technical information ordinarily generated when using an online service, such as IP address, request time, browser information and server logs.

MIDImyFACE does not record, store or upload photographs or video from your camera. It does not use facial recognition to identify you and does not create a biometric identity profile.

3. Camera and landmark processing

MediaPipe processes the camera image locally in your browser. The image is used only to calculate face landmarks and gestures for the immediate interaction. Normalized landmark coordinates—not the camera image—are sent temporarily through the Render relay to the local Raspberry Pi so the installation display and solenoids can respond. A live session may include up to three participants; their nicknames, countries and translucent landmark layers are shared among the active participants for the collaborative display. The current live snapshots are replaced as new data arrives and cleared when each participant session ends or expires.

4. Purposes and legal basis

Registration and session information is processed to provide the participation you request, manage the queue, prevent misuse, apply the cooldown and operate the installation. This processing is necessary to provide the requested interactive service and for the legitimate interests of operating it safely and fairly.

MIDImyFACE does not currently use registration email addresses for marketing. If optional news or event emails are introduced, they will require a separate, unselected consent choice. Marketing consent will be withdrawable at any time without affecting participation.

5. Storage and retention

• Camera images: not uploaded or retained by MIDImyFACE.
• Landmarks and live session data: held temporarily for the active interaction and cleared when it ends or expires.
• Cooldown identity: held in relay memory for the configured cooldown period, currently 30 minutes.
• Firebase account: retained until the account is deleted or no longer needed for registration.
• Security and hosting logs: retained according to the relevant provider’s operational and security settings.

6. Providers and international transfers

MIDImyFACE uses Google Firebase for account authentication and Render for the live relay and server hosting. The site may also connect to Google/YouTube when a live video is available and to jsDelivr to load MediaPipe browser software. These providers process technical data needed to deliver their services and may process information outside the European Economic Area under their applicable data-protection and transfer safeguards.

Personal information is not sold to advertisers. It is shared only when needed to operate the service, when you request or authorize sharing, or when disclosure is required by law.

7. Your rights

Subject to applicable law, you may request access to, correction of, deletion of, restriction of, or objection to processing of your personal data. You may request data portability where applicable and withdraw any consent without affecting earlier lawful processing.

Send requests to midimyface@gmail.com. You may also lodge a complaint with Uruguay's Unidad Reguladora y de Control de Datos Personales (URCDP).

--- Terms of Participation ---

8. Participant responsibilities

Participants must use MIDImyFACE lawfully and respectfully, follow reasonable operator or venue instructions, avoid damaging or disrupting the installation, and not use another person’s identity without permission. Access may be stopped for safety, maintenance, misuse prevention or technical reasons.

9. Availability and safety

MIDImyFACE is an experimental artistic system. A session may be delayed, modified, interrupted or cancelled because of technical problems, network or power interruption, maintenance, venue requirements, or safety and operational concerns. Participation does not guarantee uninterrupted availability.

10. Changes

This notice may be updated when the project or its data practices change. Material changes will be presented on the registration page or communicated by another appropriate method.

11. Further information

For general information about data-protection rights and consent, see the European Commission’s GDPR guidance and the European Data Protection Board’s consent guidelines.