How it works
"Your photo never leaves your device until you pay" is an architecture, not a promise. Here is what that means and how to check it.
01Everything free runs in your browser
Face detection, cropping, the compliance checks and the watermarked preview are computed on your device with WebAssembly and the canvas API. The page loads the detection model from our servers — but your photo is never part of any request.
02Verify it yourself in DevTools
Open your browser's developer tools (F12 or ⌘⌥I), switch to the Network tab, then add a photo and use the tool. You will see the page assets load — and no request containing your image. No POST, no upload, nothing. The only time your photo is transmitted is after a successful payment, to render your files.
03After you pay
Your original photo and your crop settings are sent once, over HTTPS, to our renderer to produce your files at full quality. The files and your original are automatically deleted from storage within 48 hours of purchase. They are never used for anything else.
04What we never do
No accounts, no photo archives, no training AI on your face, no selling data. Analytics record button-level funnel events only — never image data.
Compliance, honestly
- We validate your photo against the official rules — we never retouch your face, and we only normalize the background where the destination country permits it.
- Every requirement is cited from official government sources, with the verification date shown on the page.
- You get a measured report, not a guarantee — final acceptance always rests with the issuing authority.