Privacy Policy

Core promises

Zero sign-up, zero email, zero personal information: no account needed; we never collect your name, email or phone number.
No cookies, no tracking: we set no cookies and run no analytics or advertising trackers. Orders are tracked only by an anonymous order code in the URL.
Passport photos never leave this service: passport processing is fully automated on our servers — no AI, no third party ever sees your photo.
No AI editing on passport photos: US/UK/Canada officially forbid software editing. If your photo already complies, we leave it pixel-identical (geometric crop only). If it needs a small fix, we standardize the background and apply light brightness/contrast normalization — and say exactly what was changed on the result page. Facial features and skin tone are never altered.
Deleted after download: all image files are destroyed as soon as fully downloaded; unpaid orders after 2h; undownloaded files after 24h; a 10-minute sweep double-checks every order.
Never used for training, ads or sale.
Exceptions kept to the legal minimum: a non-reconstructable face signature (a 128-d vector, never a photo) may be kept for up to 90 days solely to honor the free-redo guarantee and verify a redo is the same person, then destroyed. Payment is processed by Paddle, our payment processor, which receives only the order reference and payment data — never your photo.

1. What we process

Only what is needed to deliver your order:

Data	Why	Retention
Your uploaded photo + derived images (preview, crops, print sheet)	Produce the compliant photo you ordered	Deleted on full download; unpaid 2h; undownloaded 24h
Anonymous order code & pickup code	Delivery, recovery, deletion receipt	Order record kept without images; cleanup after 90 days
Face signature (non-reconstructable 128-d vector, no photo copy)	Honor the free-redo guarantee; verify a redo is the same person	Up to 90 days, then destroyed
Payment data	Processed by Paddle (our payment processor)	Per Paddle & tax law; we never see card details
IP address	Rate limiting / abuse prevention	≤24h, not linked to photos

We never collect: name, email, phone, address, ID numbers, card numbers. No account, no newsletter, no advertising trackers.

2. Third parties (payment & network only)

We share data only with the two providers needed to run the service:

Paddle — our payment processor. It receives your payment and the order reference — never your photo.
Cloudflare — our DNS, CDN and anti-abuse network. Traffic passes through its edge network in transit only; it does not store your photos.

No AI provider, no analytics provider, no advertising network ever sees your photo. We currently offer no AI product; if we launch one (e.g. ID-photo enhancement), only a de-identified reference image would be shared, with a separate consent checkbox and a DPA in place — passport photos stay zero-AI permanently.

3. Your rights

Because we hold no identity data, you exercise rights with your anonymous order code + pickup code:

Access: view your order and processing status.
Deletion: delete all order data instantly (instant receipt shown).
Refund / redo: per the Refund & Free Redo policy.
Complaint: email our privacy address below; we respond within 48h.

4. Security

TLS 1.2+ in transit; files stored under 0700 server permissions; random filenames; no image data in logs or backups; a background sweeper re-verifies deletion every 10 minutes. Image files never enter backups or monitoring logs by design.

5. Children

This service is not directed at anyone under 16. If we learn a photo belongs to a child whose parent/guardian did not authorize use, we delete it immediately. We do not knowingly process children's data.

6. International transfer

Processing happens on servers we control. No image data is transferred to any third party or outside your region. Payment data is handled by Paddle under its own processing terms.

7. Changes & contact

Material changes will be announced on this page. Privacy contact: [email protected] (published at launch). This policy (v1.1, 2026-08-06: third parties updated — Paddle as payment processor, Cloudflare CDN disclosed) is part of our Terms of Service.