Since you're alluding to there not being a policy - someone can now tie a face to an IP address.

I can't find it?

I can think of quite a few entities that are very, very interested in this data.

Nice project though!