Privacy Policy
Last updated: September 2026
The short version
- Your photos are used only to generate your ID photo — nothing else.
- All photos are automatically deleted from our servers within 24 hours.
- We never sell, share, or use your photos to train AI models.
- Payments are handled by Stripe; we never see your card details.
- No account is required, and we collect no personal profile.
What we collect
Photos you upload. The photo you upload and the generated results are stored encrypted in our object storage while your order is active, and deleted automatically within 24 hours. During that window, authorized staff may view them for quality control and support.
Order data. We keep a minimal record of each generation job (a random job ID, the document type, timestamps and payment status) to operate the service and handle support requests. This record contains no name, email or address.
Visit statistics. To learn which steps of the photo tool work and which ads bring customers, your browser keeps a random visitor ID. With each visit we record that ID, the page you landed on, the referring site or campaign tag, a Google ad-click ID if you came from one of our ads, your approximate country and device type, and which steps you completed (photo selected, preview generated, checkout started, payment). This contains no name, email, IP address or photo.
Payment data. Payments are processed entirely by Stripe. Stripe may collect your email for the receipt; we receive only a confirmation that payment succeeded.
How your photo is processed
Photo generation uses AI image models operated by established cloud providers, invoked through Cloudflare's infrastructure over encrypted connections. Your photo is sent to the model solely to produce your ID photo and is not retained by us beyond the 24-hour window. We do not use your photos for model training, marketing or any secondary purpose.
Cookies & analytics
We use Google Analytics to understand aggregate site usage (pages visited, approximate region, device type) so we can improve the service. Google Analytics sets cookies and processes data according to Google's privacy policy. We also use Google Ads conversion measurement: if you arrive by clicking one of our Google ads, the ad-click ID is stored in a first-party cookie so we can tell which ads lead to orders. We don't use remarketing or personalized advertising, and visitors in the EEA, the UK and Switzerland are measured without analytics or advertising cookies. None of this is linked to your photos or your identity.
Your browser's local storage also keeps your unpaid order reference for one hour so you can resume checkout, plus the random visitor ID and, for up to 90 days, any ad-click ID described above.
Your rights
Because photos auto-delete within 24 hours and we hold no personal profile, there is usually nothing to request. If you want an order's data removed immediately, contact us with your job ID and we will delete it.
Contact
Privacy questions: privacy@passportphotoguru.com