Overview

Two parts of this site behave very differently, and keeping them apart is the point of this policy. Your photo never leaves your device. The editor reads it with the File API, draws it onto a canvas, removes the background and writes the export, all inside your browser tab, and nothing is uploaded along the way. The rest of the site is an ordinary website, so it runs Google Analytics to count visits, and Google sees what any website exposes: pages viewed and an approximate region. No advertising is switched on: there is no ad script on the page and no ad cookie is set. We do not sell data, and there is very little of it to sell — no photo, no account, no name unless you send us a message.

1. What stays on your device

Your photo, at every stage of the edit. It is read from your device, cropped, measured, background-removed and exported inside the tab. There is no upload step and no copy is kept anywhere else.
Preferences: the theme you pick and the language you browse in are written to your browser's localStorage under this site's own key. Clearing site data for pictopassport.com removes them, and they were never stored anywhere else.
No account, no sign-up, no stored name or email address — unless you type them into the contact form yourself.

2. What the page fetches from outside

A browser tab cannot be completely silent, and claiming otherwise would make this the one dishonest paragraph on the page. These are the requests the site makes, and none of them carries an image:

Google Fonts — the Inter and Nunito typefaces.
flagcdn.com — the flag shown beside each country in the editor.
MediaPipe FaceLandmarker — the face model, loaded from a Google CDN, that finds the crown and chin so the head-height box can be drawn on the canvas.
@imgly/background-removal — the segmentation model behind the background tool, fetched from imgly's CDN the first time you open it.
Web3Forms — only when you use the contact form. Your name, email address, topic and message go to them and on to the inbox behind this site. We keep no copy.

Both models are program code and weight files. Your image is never part of a request, which you can confirm in your browser's network panel while you work; once cached, the tools keep running with the network switched off.

3. Analytics

Visits are counted with Google Analytics, which sets its own cookies and reports the same figures any analytics tool does: the pages viewed, roughly where the visitor is, and which page sent them here. That is the whole list — nothing else is measured, and no profile of you is built or sold.

Advertising has not been enabled on this site. There is no Google AdSense script, no ad slot in the markup, and no DoubleClick DART cookie, so there is nothing to opt out of. If advertising is switched on later, this section will say so here before the first ad appears, and for the EEA, the UK and Switzerland it will set out the consent and opt-out routes that come with it.

4. Server logs

Pages are static files, so a visit leaves one entry at the host: IP address, timestamp, the page requested and the browser string. Those logs are rotated within 90 days, nobody working on this site reads them, and nothing joins them to a photo, because no photo is ever sent.

5. Children

Baby and child passport photos are one of the main reasons this site exists, and the architecture is what makes that workable: no image data is collected from anyone, at any age, so there is never a child's photo sitting in a database. We do not knowingly collect personal information from children under 13, which is how a site complies with COPPA by construction rather than behind an age gate. A parent who wants a photo checked should write down the measurements rather than attach the file.

6. Your rights

We hold no photo, no account and no personal data other than the messages you choose to send, so there is usually nothing for us to hand back, correct or delete. If you are in the EEA, the UK or Switzerland you can still ask what we hold, ask for it to be corrected or erased, object to processing based on legitimate interests, restrict how it is used, or complain to your local supervisory authority — the same shared inbox handles all of it through the contact page. If you sent us a message, ask and it is deleted.

7. Changes to this policy

The date at the top of this page is the date of the most recent revision, and it moves only when the wording changes. Anything material about the analytics or advertising setup is reflected here before it takes effect, and using the site after a revision means you accept the revised text.

8. Contact

Questions about privacy go to the same shared inbox as everything else on this site — see the contact page.

Privacy Policy