EU Data Protection
GDPR information for a service designed so there is almost nothing to protect.
Controller
PassportClerk is the data controller for this website. Contact for all data matters: support@passportclerk.com.
What we process, and why
Free flow: nothing — your photo is processed entirely in your browser and never transmitted. Paid orders (legal basis: performance of a contract): your email address, your photo and crop settings, and the order record. Anonymous funnel analytics (legal basis: legitimate interest): step events with a random per-tab identifier, never image data or identity.
Retention
Photos and generated files: deleted automatically 48 hours after purchase. Order records (id, email, amount, document type): kept as required for bookkeeping and tax law. Analytics events: anonymous from the start.
Processors
Stripe (payments), Resend (delivery emails), Cloudflare (hosting, storage and rendering infrastructure). Each acts under its own GDPR processor commitments and only to provide its service. We sell nothing to anyone.
International transfers
Our infrastructure runs on Cloudflare's global network; processors may process data outside the EEA under standard contractual clauses and equivalent safeguards published in their GDPR documentation.
Your rights
Access, rectification, erasure, restriction, portability, and objection — email support@passportclerk.com and we act on it. Because files self-delete within 48 hours, in most cases erasure has already happened by the time you ask. You also have the right to lodge a complaint with your local supervisory authority.
Last updated July 2026 · see also the plain-language privacy page