Privacy Policy

Last Updated: March 18, 2026

Introduction

Passport Photo Tools ("we", "our", or "us") operates the website passportphototools.com and its associated domains createpassportimage.com and passportphotoshop.com. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website and services. By using Passport Photo Tools, you consent to the data practices described in this policy. If you do not agree with any part of this policy, please discontinue use of our website immediately.

Information We Collect

We are committed to collecting only the minimum data necessary to operate and improve our service. The categories of information we may collect include:

Images and Photos

All photo processing, including face detection, background removal, cropping, and resizing, happens entirely within your browser using JavaScript and WebAssembly technologies. Your images are never uploaded to our servers, transmitted over the internet, or stored in any database. Once you close or refresh the browser tab, all image data is permanently discarded from your device's browser memory. We have deliberately architected our service this way to ensure your biometric and personal image data remains exclusively under your control at all times.

Automatically Collected Information

When you visit our website, certain information is collected automatically through cookies and similar technologies:

  • Device Information: Browser type and version, operating system, screen resolution, and device type (desktop, tablet, or mobile).
  • Usage Data: Pages visited, time spent on each page, referral source, click interactions, and navigation patterns.
  • Network Information: Anonymized IP address, approximate geographic location (country and city level only), and internet service provider.

This information is collected through Google Analytics and is used solely for understanding how visitors interact with our website so we can improve the user experience.

Cookies and Tracking Technologies

We use several types of cookies and similar tracking technologies on our website:

Essential Cookies

These cookies are strictly necessary for the basic functionality of our website. They enable core features such as saving your preferred language, remembering your theme preference (light or dark mode), and maintaining your cookie consent choices. Essential cookies cannot be disabled as they are required for the website to function properly.

Analytics Cookies (Google Analytics 4)

We use Google Analytics 4 (GA4) to collect anonymous usage statistics about how visitors interact with our website. Google Analytics uses first-party cookies to distinguish unique users and throttle request rates. The information generated by these cookies about your use of our website is transmitted to and stored by Google on servers in the United States.

Google Analytics helps us understand:

  • Which pages and features are most visited and valuable
  • How users navigate through the site
  • Traffic sources and geographic distribution of visitors
  • Technical performance metrics and page load times
  • Session duration and engagement patterns

Google Analytics 4 does not collect personally identifiable information. IP addresses are anonymized before storage. You can opt out of Google Analytics tracking by:

  • Installing the Google Analytics Opt-out Browser Add-on
  • Using browser privacy extensions such as uBlock Origin or Privacy Badger
  • Enabling the "Do Not Track" setting in your browser
  • Declining analytics cookies through our cookie consent banner

For more information about how Google Analytics collects and processes data, visit Google's Privacy Policy and the Google Analytics Terms of Service.

Advertising Cookies (Google AdSense)

We display advertisements through Google AdSense, a third-party advertising service provided by Google LLC. Google AdSense uses cookies and web beacons to serve advertisements that may be relevant to your interests based on your browsing activity across the internet.

How Google AdSense uses cookies:

  • Google uses the DoubleClick cookie to serve ads based on your visits to this site and other sites on the internet
  • Third-party vendors, including Google, use cookies to serve ads based on your prior visits to our website and other websites
  • The DART cookie enables Google and its partners to serve targeted advertisements based on user browsing patterns
  • These cookies may collect information including your IP address, browser type, device identifiers, pages visited, time and date of visits, and interactions with advertisements

Personalized vs. Non-Personalized Advertising: Google may serve personalized ads based on your interests and browsing history, or non-personalized ads that are not based on past behavior. The type of ads served depends on your consent preferences and applicable local regulations.

Opting out of personalized advertising:

For comprehensive information about how Google processes advertising data, please visit Google's Privacy & Terms page.

Client-Side Processing and Data Security

All image editing, face detection, background replacement, and photo cropping operations occur entirely within your browser using client-side JavaScript, WebAssembly, and AI models (MediaPipe, TensorFlow.js). This architecture means:

  • No images are ever transmitted to our servers or any third-party service
  • No biometric data (facial features, measurements, or recognition data) leaves your device
  • No image data is stored in any database, cloud storage, or server-side cache
  • Processing happens using your device's CPU and GPU resources only
  • Closing or refreshing the browser tab permanently removes all image data from memory

We use HTTPS (TLS 1.2 or higher) encryption for all communications between your browser and our servers to ensure that any data transmitted, such as page requests and analytics information, is protected against interception.

Third-Party Services

In addition to Google Analytics and Google AdSense described above, we may use the following third-party services:

  • Sentry (optional, when enabled): For error monitoring and performance tracking to identify and fix technical issues. Sentry may collect technical error data such as stack traces, browser information, and anonymized usage context. No personal images or biometric data is ever sent to Sentry.
  • Content Delivery Networks (CDNs): We use CDNs to deliver static assets such as fonts, stylesheets, and AI model files efficiently. CDN providers may log access requests including IP addresses for security and performance purposes.

Each third-party service operates under its own privacy policy, and we encourage you to review their respective policies for detailed information about their data practices.

Data Retention

  • Analytics Data: Google Analytics data is retained according to Google's default retention settings. We have configured data retention to the minimum period necessary for analysis.
  • Cookie Data: Cookies expire according to their individual lifespans. Essential cookies persist for up to 1 year. Analytics cookies are governed by Google Analytics' cookie duration policies. Advertising cookies follow Google AdSense's cookie lifecycle.
  • Image Data: No image data is retained at all. All image processing is ephemeral and exists only in your browser's memory during your active session.

Your Rights Under Data Protection Laws

Depending on your location, you may have the following rights under applicable data protection regulations including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other regional privacy laws:

  • Right of Access: Request information about what personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate personal data.
  • Right to Erasure: Request deletion of your personal data from our systems and third-party services.
  • Right to Restrict Processing: Request that we limit how we use your data.
  • Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
  • Right to Object: Object to processing of your personal data for specific purposes, including direct marketing.
  • Right to Withdraw Consent: Withdraw your consent for data processing at any time without affecting the lawfulness of processing based on consent before withdrawal.
  • Right to Non-Discrimination (CCPA): You will not receive discriminatory treatment for exercising your privacy rights.

To exercise any of these rights, please contact us at [email protected]. We will respond to all legitimate requests within 30 days, or within the timeframe required by applicable law.

Children's Privacy

Passport Photo Tools does not knowingly collect personal information from children under the age of 13 (or the applicable age in your jurisdiction). Our website and tools are intended to be used by adults or by minors under parental supervision. If you believe that a child under 13 has provided us with personal information, please contact us immediately and we will take steps to delete such information.

International Data Transfers

Information collected through Google Analytics and Google AdSense may be transferred to and processed in countries outside your country of residence, including the United States. These transfers are conducted under appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy regularly to stay informed about how we protect your information. Your continued use of our website after any changes to this policy constitutes your acceptance of the updated terms.

Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data handling practices, please contact us at:

Email: [email protected]

We aim to respond to all privacy-related inquiries within 48 hours during business days.