Privacy policy

Privacy

Your selfie is processed on your device and is never uploaded to our servers. This page lists what SelfieToPassport does collect: what an order needs, and anonymous page-visit data that tells us which pages people use.

Updated How we check

Your photo

The photo you take or choose is opened, measured, cropped and turned into files inside your browser. It is not sent to our servers, and neither are the finished files or the measurements of your face.

To measure the photo, your browser downloads a measuring model from our own domain. That download does not include anything about you.

So that your files can be made after you pay, your browser keeps the photo you chose and its crop in its own storage on that device — not on our servers — for up to 30 days. A photo you did not buy is cleared after a day. Clearing your browser’s site data removes it at any time.

Because we never receive your photo, we cannot recover it for you. Your order link lets you make the photo again on any device by choosing the photo there.

What an order stores

When you buy, we store:

  • the document you chose (for example, U.S. passport) and how many people or documents;
  • your email address, to send the receipt and your order link;
  • the amount, the payment status and the payment reference from Stripe;
  • the random browser and visit IDs described below, to know which page led to the order.

Payment is handled on Stripe’s checkout page. We never see or store your card number.

Page visits

When a page opens, your browser sends our server:

  • a random ID for this browser and a random ID for this visit, stored in your browser;
  • the page address (with email addresses, tokens and codes removed) and the page title;
  • your screen size, language, time zone and whether the screen is touch;
  • on the first page of a visit, the site you came from and any campaign tags in the link (such as utm_source).

While the page is open, it sends how long it has been on screen and how far you scrolled, every 15 seconds. None of this includes your photo, your name or your email.

Like any website, our servers and our hosting and network providers also receive the usual request details, such as IP address and browser type, to run and protect the site.

What is stored in your browser

The site keeps the random browser and visit IDs, and any page-visit messages not yet sent, in your browser’s local storage. It uses no advertising cookies and no third-party trackers, and loads its fonts from our own domain.

Clearing this site’s data in your browser resets the IDs.

Who processes data for us

  • Stripe, for payments;
  • Brevo, to send the receipt email;
  • Amazon Web Services and Cloudflare, to host and deliver the site.

Your choices

To get a copy of your order data or have it deleted, email [email protected] from the address you used to order. We keep order records only as long as we need them for receipts, refunds, taxes and accounting.

Photos of children are handled like any other photo: they stay on the device of the adult who makes them.

Changes to this policy

When this page changes, the date at the top changes with it.