Additional resource for the lesson “Facial Recognition and Reverse Image Search” — Online Anonymity course
When you reverse image search yourself, you see your photos the way a stranger could: not as memories, but as links. The same profile picture on two accounts can connect a nickname to your real name, and face-search technology can sometimes connect different photos of the same face. This resource shows how both work, lets you check your own photos in 15 minutes and keeps the countermeasures realistic.
The key idea: a photo is not only something people look at, it is something machines can match. You cannot take back every picture already online, but you can decide which photo appears where, so that your separate profiles are harder to join.
A. Why this matters
In this course, privacy is deciding what others know about you, and anonymity is acting without what you do being tied back to who you are. Photos sit right on that line. A forum account under a nickname may say nothing about you, until it shows the same picture as your professional profile.
Most of the time this is harmless. Friends recognise you, and that is the point of a profile photo. The question here is narrower: which of your photos act as a bridge between contexts you would rather keep apart? Reverse image search yourself and you have a first answer.
What the sources say
The Electronic Frontier Foundation (EFF), a digital rights organisation, explains in its Street-Level Surveillance guide that face recognition measures facial features, which are “converted into a mathematical representation and compared to data on other faces”. It notes that this data “is often derived from publicly-available photos, social media, and mugshot images”, and that it “remains prone to error”.
European regulators have acted on exactly this kind of collection. The European Data Protection Board (EDPB) reports that the Dutch data protection authority fined Clearview AI, a company that built a face-search service, a total of €30.5 million in 2024. The authority found that Clearview processed personal data, including biometric data, without a legal basis, and did not respond to two access requests from the people concerned.
In the UK, the Information Commissioner’s Office (ICO), the independent data protection authority, fined the same company £7.5 million in May 2022 for scraping images of UK residents from the web and social media. The case then went through the tribunals: in October 2025 the Upper Tribunal upheld three of the ICO’s four grounds of appeal and sent the case back to the First-tier Tribunal to decide the appeal itself. According to the ICO’s most recent update to that page, in December 2025, Clearview was granted permission to appeal to the Court of Appeal. We found no later official update when checking in November 2026, so the outcome may still change.
B. Key concepts
Five ideas that explain how a photo becomes a link, and where the limits are.
Reverse image search: finding the same picture
A reverse image search uses a picture instead of words as the query. You upload a photo or paste its address, and the search engine looks for pages that use the same image, or images that look similar. Microsoft describes its tool simply: “Visual Search lets you search the web using an image instead of text.”
Why it matters to you: If the same profile photo appears on two accounts, a reverse search can put them side by side. That is the simplest way a photo links profiles, and it needs no special technology.
Face search: finding the same face
Face recognition goes one step further. Instead of matching the picture, it matches the face: features are turned into a numerical template and compared with a collection of known faces. A different photo of you, taken years apart, can in principle return a match. Facial recognition search engines are services built on this idea, usually from images collected across the web.
Why it matters to you: Using different photos in different places loosens the first kind of link much more than the second. That is why countermeasures here are about reducing what is collectable, not about promising control.
Linkability: the photo as a bridge
A bridge is any detail that appears in two contexts and lets someone connect them. With photos, the bridge can be the image itself, your face, or what is around it: a recognisable room, a team shirt, the same view from your window.
Why it matters to you: A single photo is rarely a problem on its own. The risk comes from the combination: a photo that joins a pseudonymous account to a named one carries everything from both.
What the search tool learns about you
Searching for yourself means handing a photo to a search service. Microsoft says: “The photos you provide may be used to improve Bing image processing services.” Google notes that it “may store the URLs you search” when you search with an image address. Each service sets its own rules.
Why it matters to you: Use photos that are already public when you check yourself, and read each tool’s own description of what it keeps before uploading anything more personal.
No result is not the same as not findable
Each tool searches its own index, built in its own way. TinEye, another reverse image search engine, explains for example that it “does not index images from social media sites like Facebook, or LinkedIn.” A clean result from one tool says only that this tool, today, found nothing.
Why it matters to you: Use at least two tools and read the result as a snapshot. It shows where your photos clearly appear, not every place they might be.
C. A practical example: Giulia’s three profiles
Giulia is 29 and uses social media mostly to keep up with friends. She has three online lives that rarely meet: a personal account for friends, a professional profile under her full name, and a nickname on a hobby forum where she posts film photography and the occasional critical review of camera shops.
She likes one portrait from a friend’s birthday, so over time it became her picture almost everywhere. One evening, out of curiosity after a conversation about face search, she ran it through two reverse image search tools.
The results were ordinary but instructive. The photo appeared on her professional profile, on her forum account and on an old event page where a friend had tagged her. Anyone who found her nickname on the forum could, with one search, reach her full name and her employer.
What changed when Giulia checked her photos
Giulia did not panic, and she did not delete her accounts. She made three decisions:
- She replaced the forum avatar with a photo of an old camera, so her nickname no longer carried her face.
- She kept the portrait on her professional profile, where being recognised is the point.
- She made her personal account visible to friends only and asked the friend who ran the event page to remove the tag.
She accepted that the portrait could still exist in places she had not found, and that face-search services might hold older pictures. What she changed was the most obvious bridge: the one any curious reader of the forum could cross in a minute.
D. Try it yourself: reverse image search yourself in four steps (15 minutes)
Four short steps, with photos of yourself that are already public. Search only for yourself: running other people’s faces through these tools raises questions of consent, and rules on using such tools vary by country.
Step 1 — Choose your photos (3 minutes)
- Pick two or three photos you use as profile pictures: the one on your main social account, a professional profile, a forum or gaming avatar.
- Write down where each one appears, as far as you know. Keep it as a short list on paper or in a note.
- Do not upload private photos you have never posted. The aim is to see what is already out there.
Step 2 — Search with a first tool (5 minutes)
- On a computer, open Google, click the “Search by image” icon and upload the photo or paste its address. In Chrome, you can also right-click an image and choose “Search with Google Lens”.
- Scroll through the pages that show the same image, not only the visually similar ones.
- Note each place where your photo appears, especially any you did not expect.
Step 3 — Search with a second tool (4 minutes)
- Repeat the search with Bing Visual Search (the camera icon in the Bing Images search box) or with another reverse image search engine, such as TinEye.
- Compare the results with the first tool: each one has its own index, so they rarely agree completely.
- Add any new places to your list.
Step 4 — Find the bridges and change one (3 minutes)
- Look at your list and circle any photo that appears in two contexts you would rather keep apart, such as a nickname account and a named profile.
- Choose one change only: replace that photo in one place, narrow who can see it, or ask the owner of a page to remove it.
- Remember the change you made, and repeat the search in a few months to see what has moved.
One bridge removed on purpose is worth more than worrying about every photo you have ever posted.
Already covered in the Online Security course
Hide Photos on Your Phone: What the Built-In Options Do
It covers hiding photos on your own device and removing location data when you share them; this resource looks at photos that are already public and how they can link your profiles.
Already covered in the Online Privacy course
Oversharing Online: What Your Last Ten Posts Really Say
It audits what the details and timing of your recent posts reveal; this resource looks at the photo itself, and your face, as a link between different accounts.
E. Videos, articles and further resources
Institutional sources first, then a digital rights guide and the help pages of the search tools. All in English.
Institutional sources
European Data Protection Board — Dutch Supervisory Authority imposes a fine on Clearview because of illegal data collection for facial recognition
The 2024 decision against a face-search company: biometric data processed without a legal basis, access requests left unanswered.
https://www.edpb.europa.eu/news/dutch-supervisory-authority-imposes-a-fine-on-clearview-because-of-illegal-data-collection-for_en
Information Commissioner’s Office (UK) — UK Upper Tribunal hands down judgment on Clearview AI Inc
The UK case against the same company, from the 2022 fine to the tribunal decisions and the next appeal.
https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2025/10/uk-upper-tribunal-hands-down-judgment-on-clearview-ai-inc
European Commission — Information for individuals
Your rights under EU data protection rules, including access, erasure and complaints to a data protection authority.
https://commission.europa.eu/law/law-topic/data-protection/information-individuals_en
Information Commissioner’s Office (UK) — Your right to get your data deleted
When the right to erasure applies, how to ask and how long an organisation has to reply.
https://ico.org.uk/for-the-public/your-right-to-get-your-data-deleted
Digital rights guide
Electronic Frontier Foundation — Face Recognition (Street-Level Surveillance)
How face recognition works, where its images come from and why misidentification is a real risk.
https://sls.eff.org/technologies/face-recognition
Search tool documentation
Google Search Help — Search with an image on Google
How to search with an uploaded image, an image address or Google Lens in Chrome.
https://support.google.com/websearch/answer/1325808?hl=en-GB
Microsoft Support — Using Bing Visual Search
How to search with an image in Bing, and how uploaded photos may be used.
https://support.microsoft.com/en-us/bing/using-bing-visual-search
TinEye Blog — How to use TinEye to search for an image
Ways to search with an image, and which sites the service says it does not index.
https://blog.tineye.com/how-to-use-tineye-search/
Links checked in November 2026. If an address changes, searching for the title on the organisation’s site usually finds it.
F. The Cyber Welfare Framework: Skills, Awareness, Secure Behaviour
This resource sits on the Awareness pillar at level FL2 – Beginner: seeing how your photos connect your profiles before deciding which connections to keep.
Skills
- Running a reverse image search with an uploaded photo or an image address.
- Comparing the results of two different search tools.
- Spotting a photo that acts as a bridge between two contexts.
Awareness
- Knowing the difference between finding the same picture and matching the same face.
- Understanding that each search tool sees only part of the web, so no result is not proof of absence.
- Recognising that a search service may keep or use what you upload.
Secure Behaviour
- Using different photos, or no face at all, for accounts you want to keep separate.
- Narrowing who can see your profile photos where a service lets you.
- Checking your own photos again now and then, because copies and accounts change.
G. Questions to sit with
- Which of your accounts would you most like to keep unconnected from your real name, and does its photo allow that?
- Where does being recognised from your photo genuinely help you, and where has it simply become a habit?
- If someone found an old photo of you through a face search, which context would you least expect it to come from?
H. What to do now
The recommendations (R) and security measures (MS) from the Cyber Welfare database that apply most directly here.
1. Your photos and who sees them
- MS6 — Make your social media accounts private where that suits how you use them, so that your photos reach the people you chose rather than whoever happens to search.
- MS7 — Limit access to your account, photos and posts by changing privacy settings, starting with the profile pictures and tagged photos that appear in more than one place.
- Use a different photo, or an image without your face, for any account you want to keep apart from your name.
Minimum commitment: today, replace the profile photo on one account that you would rather not have linked to your real name.
2. Who can copy them, and what you can ask to remove
- R23 — Connect only with people you know: contacts who can see your photos can usually save and share them too.
- Ask a site owner, or a friend, to remove a photo or a tag you did not agree to. To remove your photos from face search, in the UK and the EU you can ask an organisation, including a face-search company, to delete your personal data; the right is not absolute, and in the UK an organisation usually has one calendar month to reply.
Minimum commitment: this week, ask for the removal of one photo or tag of you that links two parts of your life you would rather keep apart.
In short
- When you reverse image search yourself, you see which photos link your accounts together.
- Reverse image search finds the same picture; face search tries to match the same face, and it can make mistakes.
- Each tool sees only part of the web, and some keep or use what you upload: search only your own public photos.
- You cannot control every copy, but different photos for different contexts make your separate profiles much harder to join.
Related resources in this course
- Stylometry: How Your Writing Style Can Identify You
- Protect Your Identity from Deepfakes: Limit, Notice, Act
- How to Use AI Chatbots Anonymously, and Where It Stops
- Remove Metadata from Photos Before You Share: A Practical Guide
Discover more companion resources from the online courses of the Protect Your Digital Privacy programme.
If you would like to follow the whole path, the Cyber Welfare Program is free and open to everyone.










Leave a Reply