Privacy Policy

1. Who We Are

Photo to Passport operates the website at phototopassport.com (the “Service”). We provide a free, browser-based tool that helps users create passport-sized photos. References to “we”, “us”, or “our” refer to the operator of phototopassport.com.

2. Photographs Stay Local

When you select a JPEG, PNG, or WebP file, the browser creates a temporary local object URL and performs decoding, face detection, segmentation, framing, background choices, adjustments, canvas rendering, and download generation on your device. MediaPipe code and models are served as ordinary static files from our own website and execute locally.

We do not upload, remotely analyse, persist, log, or otherwise receive:

• Photographs, image bytes, image filenames, object URLs, canvas contents, or generated downloads
• Face locations or landmarks, segmentation masks, crop coordinates, background choices, adjustment values, or other image-derived values
• Face templates, face embeddings, biometric identifiers, or recognition results

Face detection is used only to suggest framing. It does not identify you, compare you with anyone, or perform face recognition. No face template is created or persisted. Temporary object URLs and derived working data are released during replacement, failure, completion, download cleanup, and page exit. A downloaded file is saved only when you choose to save it through your browser.

3. Website Network and Log Data

Photographs are separate from the technical data involved in loading any website. When your browser requests pages, scripts, self-hosted fonts, WASM, or model files, the hosting or CDN infrastructure necessarily processes network information such as your IP address, request URL, date and time, response status, user-agent header, and referrer if your browser sends one. The Service sends a no-referrer policy.

This technical data does not include your photo or image-derived data. The application contains no analytics, advertising pixels, session replay, or remote error monitoring. Infrastructure providers may retain security or access logs under their configured retention and legal obligations; we do not state a fixed retention period because none is defined in this repository.

4. Cookies and Tracking

The Service currently sets no cookies and does not use local storage, session storage, IndexedDB, advertising identifiers, tracking pixels, third-party analytics, or cross-site tracking. Browser HTTP caching of same-origin application assets is not used to store your photo. Because there are no non-essential cookies or tracking technologies, we do not show a cookie-consent banner. See our Cookie Policy.

5. Sharing, Sale, Advertising, and Training

We do not sell photographs or personal information. We do not share photographs with advertising partners or any other third party, and we do not use photographs or image-derived data for advertising, profiling, product analytics, machine-learning training, or AI model training. Hosting/CDN providers process the limited technical network data described above to deliver and secure the website, not to process your photograph.

6. Children’s Privacy

A parent, guardian, or other authorised adult may use the tool to prepare a child’s photo only if they have authority and any required consent. The child’s photograph and derived data remain on the user’s device under the same rules described above. Children should not send us personal information. If you believe a child has provided personal information through a separate contact email, ask us to delete it at privacy@phototopassport.com.

7. Your Rights

Depending on where you live, applicable law may give you rights to request access, correction, deletion, restriction, objection, portability, or information about processing, and to appeal or complain to a data-protection authority. California residents may also have rights to know, delete, correct, limit certain uses, and opt out of sale or sharing. We do not sell or share personal information for cross-context behavioural advertising.

We cannot retrieve a photograph or its derived data because the Service never receives it. For a request concerning technical logs or information you sent by email, contact us with enough detail to locate the data. We may need to verify your request and may retain information where law permits or requires it.

8. Data Security

The deployed site uses same-origin static processing assets and a browser Content Security Policy that blocks connections and images from third-party origins. Website transport security protects requests to the site; your device, browser, downloaded files, and any local backups remain under your control.

9. Changes to This Policy

We may update this Privacy Policy when the Service or applicable requirements change. The date above identifies the current version. Material changes will be posted on this page.

10. Contact

Privacy questions and rights requests: privacy@phototopassport.com. Questions about terms: legal@phototopassport.com.