Comment by cortesoft

You could still delete while maintaining the ability to tell if a face has been seen before, by using some fingerprinting + one way hash function