A face-matching website that markets itself as a privacy tool has drawn fire from campaigners.