A class photo with one withdrawn parent. Twenty-three children stay in the picture.
The URL Proxy serves selected public images through a consent-aware endpoint. If a person withdraws consent, their face can blur on the next request — or the image can be taken down automatically, your choice. No file changes. No new CMS. Just the same link.
A publish layer that checks current consent.
Serve selected image URLs through the proxy host. The proxy fetches from your origin, applies the current decision for matched faces, and returns the response you configured.
Per-face, not per-photo.
A group photo can survive a withdrawal. Blur the one face that asked, not the whole image. Or take the image down automatically, your choice.
Source untouched.
Your CMS still keeps the original. If a decision changes, the next proxy response changes with it. Nothing is destructively edited.
Use the proxy link.
Ansikt gives you a proxy URL for the image you want to publish. Use that link where consent should be enforced. Images served outside the proxy stay outside enforcement.
How a withdrawn face renders, your call.
A setting for the source or image type. Default is "blur" — keep the photo, hide the face. Switch to "refuse" for images where the rest of the photo does not make sense without the primary subject.
Blur the face, keep the picture.
The face is blurred where it appears in the photo. The rest — composition, context, the people who consented — stays as the photographer took it.
GET /uploads/2019/class-3b.jpg
→ 200 OK · withdrawn faces blurred Refuse the photo when a primary subject withdraws.
Some images are "about" one person — a portrait, a press photo, an event headshot. When that subject withdraws, the proxy returns the response you configured: a 410 Gone, a 404, or a placeholder image.
GET /press/headshot-2024.jpg
→ 410 Gone · primary subject withdrawn An ethical layer that stays out of the way.
A consent-aware image layer should be boring to operate. It reads from your origin, checks the current decision, and returns the allowed response.
What the URL Proxy doesn't do.
The proxy enforces decisions only where traffic goes through it.
The proxy enforces consent at serve time for images routed through it. When something changes after publication — a withdrawal, an access request, an expiry or a removal — Operate closes the loop: find the affected images, choose the action, and export the audit trail.