Privacy Policy

The short version

The free photo check runs entirely in your browser. Your photo is processed on your own device — it is not uploaded, streamed, or sent anywhere while you preview and check it.

Only if you decide to buy the clean file does your photo leave your device: at the moment of checkout it is uploaded over an encrypted connection so our server can render your compliant files. Those files — and your original — are automatically deleted within 24 hours (the original within at most 72 hours, kept slightly longer only so you can use your one free regeneration).

What we collect

If you only use the free check: nothing. No account, no cookies for tracking, no photo upload.

If you buy: your email address (collected by our payment provider Lemon Squeezy at checkout, used only to deliver your download link), your uploaded photo (deleted per the schedule above), and the technical measurements of your photo (kept as evidence for our money-back policy).

Payments are processed by Lemon Squeezy as Merchant of Record — we never see or store your card details.

Where data lives

Order data and photo files are stored with Supabase in the EU (Frankfurt). Rendering uses fal.ai as a processing subprocessor for background removal. Delivery emails are sent via Resend.

What we never do

We never run face recognition or identification — the tool measures geometry (head size, eye position) to check compliance, nothing more. We never sell or share your photo or email. We never keep your photo beyond the deletion schedule.

Analytics

We use Umami, a cookie-free analytics tool that stores no personal data and requires no consent banner. It tells us which pages are used — not who you are.

Contact

Questions about your data: privacy@visaphotopass.com. To exercise GDPR rights (access, deletion), email us with your order ID — though note that files self-delete within 24–72 hours regardless.