Discovery to
takedown,
end to end.

You upload three to five reference photos of yourself. These are your "known-you" signatures.

Medusa opens your camera and asks for a short, live-captured video clip with gentle head movement. The clip proves you are present, not a still photo or deepfake replay.

We match the live capture to your references. Only when the match passes our similarity threshold is your account flagged as a verified subject — and only a verified subject can authorize takedowns in your name.

Before any biometric identifier leaves your browser, Medusa asks you to acknowledge what we collect, how long we keep it, and how you revoke it.

Your acknowledgement is stamped on your account with a timestamp an auditor can verify.

Delete your account any time — biometric data is purged within 30 days. Metadata rows remain for audit; the biometric payload is gone.

Our crawlers walk an operator-curated list of URLs where unauthorized photos cluster. Not the open web — specific targets, by design.

Per-domain rate limits, robots.txt policy, residential-proxy exits with sticky sessions: visible, polite, reproducible.

Every image discovered is content-addressed by SHA-256 so we never re-download the same image twice. Every place an image appeared is logged separately — the same photo, found on three pages, produces three source records.

Each discovered image passes through a face detector; every face produces a 512-dimension embedding.

Embeddings are compared against your reference embeddings by cosine similarity, above an operator-tuned threshold.

Every match lands in your dashboard for review before any action is taken. You can authorize, mark as unauthorized, or dispute — nothing is assumed.

Marking a match as unauthorized triggers a fresh liveness check — we re-prove identity before anything legally serious leaves our cluster.

You sign a DMCA perjury statement (identity-authenticated, timestamped, versioned). The statement version lives with the filing record so a future revision does not retroactively cover old filings.

Medusa generates a per-takedown evidence PDF — your reference photo, the matched image, similarity score, identity verification reference, your signed authorization — and routes the takedown to the right provider: DMCA email for most hosts, API integrations where available, form-driven submission for specific sites.

Every state transition — submitted → verify-24h → verify-7d → verify-30d → resolved / failed-persistent — writes to an audit log. You see the whole lifecycle in the dashboard.