Skip to content
Independent service. Not affiliated with any government agency. Specs come from official publications.
The Passport Photo Maker

Privacy Policy

Last updated October 6, 2026

This policy explains what The Passport Photo Maker (“we”) collects when you use thepassportphotomaker.com, why, and the choices you have. The data controller is Antoine Duno, 25 rue Villebois-Mareuil, 78110 Le Vésinet, France.

What happens to your photo

The photo tool is online at /photo. Here is exactly where your photo goes.

  • The check runs in your browser. Reading the photo, finding your face, separating you from the background, cropping, measuring head size and position, tilt, background and lighting, and drawing the watermarked preview all happen on your device. To do this your browser downloads two face and background models from Google's model storage and the code that runs them from jsDelivr. Your photo is not sent to either of them, or to us, at this stage.
  • When you click “Make my file”, your browser sends our render service a cropped, levelled copy of the photo (not the original), the outline of you used to replace the background when it was replaced, and the settings for your document. The service builds the finished file from them. It does not store the cropped copy or the outline.
  • The finished file is stored in a private storage space with no public address. It can only be downloaded through a link that lasts five minutes and is issued after the payment is confirmed.
  • A file you don't buy is deleted after 24 hours. The deletion job runs every 15 minutes, so an unpaid file is gone within 24 hours and 15 minutes of being made.
  • A file you buy is kept for one year after payment so you can download it again, then deleted. If you are refunded, it goes back to the 24-hour rule.
  • To limit abuse, each file request is counted against your IP address. We store only a salted one-way hash of the address, never the address itself.

Other data we collect

  • Your email address, if you join the newsletter or the waitlist, or write to us. We only send newsletters after you confirm your address, and every email has a one-click unsubscribe link.
  • Account details (name, email, sign-in method) if you create an account. You don't need one to buy a file. Sign-in is handled by our provider Clerk, which is loaded only on the tool, checkout, account and sign-in pages.
  • Payments are handled by Stripe on its own checkout page. We never see your card number: the payment details you enter stay with Stripe, and we receive the payment status for your file.
  • Usage statistics: pages viewed, referring website, campaign tags, device type, browser, language, screen width and time zone. By default nothing is stored on your device: a visit is counted with a one-way hash that changes every day, so we can't recognise you the next day. If you accept in the consent banner, a random identifier is kept in your browser's local storage so we can count return visits. If you are signed in, visits to the tool, checkout and account pages are linked to your account. Raw statistics are deleted after 90 days.
  • Error reports: when the site breaks, a technical report is sent to Sentry. We remove request contents, email addresses, usernames and IP addresses from it before it leaves your browser.
  • Support chat: if you write to us in the chat, your messages and the email you give are processed by Crisp.

Why we use it

To provide the service you asked for, to send the emails you requested, to keep the site secure, and to understand which pages are useful. We don't sell your data and we don't use it for advertising.

Who processes it

We rely on a few providers who process data on our behalf: Vercel (hosting), Cloudflare (the render service that builds your file), Supabase (database and file storage), Stripe (payments), Clerk (accounts), Resend (email), Crisp (support chat) and Sentry (error reports). Data may be processed in the United States.

How long we keep it

Unpaid files: 24 hours. Purchased files: one year after payment, or until you ask us to delete them. Emails: until you unsubscribe or ask us to delete them. Account data: while your account exists. Raw usage statistics: 90 days.

Your rights

You can ask to access, correct, export or delete your personal data, and object to its use, by emailing hello@thepassportphotomaker.com. If you are in the EU or UK you can also complain to your data protection authority.