passportsize-photo.comFree Online Tool
Upload
100% Client-Side Architecture

Privacy Policy

Last Updated: September 14, 2026 • Effective Date: January 1, 2025

Our Zero-Cloud-Upload Guarantee

At passportsize-photo.com, we believe biometric facial data is among the most sensitive personal information you own. Unlike standard online image editors, our platform operates 100% locally within your web browser using the HTML5 Canvas API and WebAssembly.Your portraits, passport pictures, and photo print sheets are NEVER transmitted to, stored on, or processed by our servers or any third-party cloud infrastructure.

01.How Our In-Browser Technology Works

When you drag and drop or upload a photo into our editor:

  • Memory-Only FileReader: Your image file is read strictly into your computer or smartphone's volatile memory via the browser's standard FileReader() and HTMLImageElement APIs.
  • Client-Side Canvas Transformations: All cropping, geometric scaling, aspect ratio conversion (e.g. 2x2 inches, 35x45mm), brightness, contrast, and saturation adjustments are computed natively by your device's graphic processor.
  • Instant Direct Download: When you press download (whether for an individual 300 DPI image or a 4x6" printable sheet), the final image is generated on a hidden HTML5 canvas element and downloaded directly to your local file storage via a base64 or blob URL.

02.Data We Do Not Collect

We adhere to strict data minimization principles. We explicitly do not collect, process, or retain:

No Biometric Records

We do not generate, extract, or store facial recognition vectors, iris patterns, or geometry measurements.

No Photos or Metadata

We do not read or log EXIF tags, GPS geotags, camera serial numbers, or original image filenames.

No Government Documents

We never request or store passport numbers, national ID numbers, visa applications, or full legal names.

No User Accounts

No registration, passwords, phone numbers, or email sign-ups are required to utilize any feature.

03.Non-Personal Aggregate Analytics

Like virtually all web applications, our web hosting servers and content delivery network (CDN) may record basic technical server log entries to ensure system security, uptime, and DDoS defense:

  • Anonymized IP addresses (masked for general regional diagnostics).
  • Browser type, operating system version, and device viewport dimensions to diagnose layout bugs.
  • HTTP referral headers, access timestamps, and request path URLs.

These logs are strictly aggregated and never correlated with any person or uploaded content.

04.Cookies and Client-Side Storage

We do not use tracking cookies, behavioral tracking pixels, or intrusive commercial advertising cookies.

We use your browser's native localStorage exclusively for client interface preferences:

Key: themeValues: "light" | "dark"

Remembers your chosen display mode so the interface doesn't flicker when loading pages. You can clear this anytime through your browser settings.

05.Third-Party Infrastructure & CDNs

To deliver rapid global loading speeds, our website uses industry-standard static infrastructure:

  • Google Fonts: Web typography (Geist Sans and Geist Mono) is loaded from Google's content servers. Google's privacy policy governs font delivery network requests.
  • Global Edge CDN: Static assets (HTML, CSS, JS bundles) are cached and delivered through high-performance edge servers to minimize latency.

06.Compliance with GDPR & CCPA Regulations

Under the European General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA):

Right to Know & Access: Because we do not store, process, or associate personal data with identifiable individuals, there is no personal user profile maintained on our infrastructure.

Right to Deletion: Your uploaded images exist solely in your local browser tab's RAM and are automatically obliterated the instant you close or refresh the page.

No Sale of Personal Information: We do not sell, rent, monetize, or disclose your personal data to data brokers, advertisers, or third parties under any circumstance.

07.Security Measures

All web traffic to and from passportsize-photo.com is strictly encrypted using modern Transport Layer Security (HTTPS / TLS 1.3). We employ strict Content Security Policies (CSP) and HTTP security headers to prevent cross-site scripting (XSS) and unauthorized data transmission.

08.Children's Privacy (COPPA)

While parents and legal guardians frequently utilize our tool to prepare compliant infant and child passport photos (see our Baby Passport Photo Guide), our website does not collect, retain, or process any identifiable information from minors.

09.Contacting Us About Privacy

If you have questions, inquiries, or audit requests regarding our client-side architecture and data protection practices, please contact our team:

Entity: passportsize-photo.com Privacy Team

Email: privacy@passportsize-photo.com

Response Time: We review all security and privacy inquiries within 48 business hours.

Experience 100% Private Passport Photo Creation

Convert your photos to official consular dimensions with zero server uploads, no watermarks, and instant free download.

Open Secure Studio