Privacy
"Your photo never leaves your device until you pay" is an architecture, not a promise. Here is everything we do with data, in plain language.
The free check: nothing leaves your device
Face detection, cropping, compliance checks and the watermarked preview run entirely in your browser. Your photo is not transmitted anywhere — you can verify this in your browser's network tab, and our automated tests enforce it on every release.
When you pay
After a successful payment we receive: your email address (from Stripe, to send your download link), your photo and crop settings (to render your files), and the order details. Your photo and all generated files are deleted from storage automatically 48 hours after purchase. Originals are never used for anything except rendering your order — no AI training, no archives, no resale.
No accounts, minimal analytics
There are no user accounts. Analytics record anonymous funnel events (a random per-tab identifier and step names like 'photo loaded') — never image data, never personal details.
Processors
Payments are processed by Stripe (they see your payment details; we never do). Delivery emails are sent via Resend. Infrastructure runs on Cloudflare. Each processes data only to provide their service.
Your rights
You can request access to or deletion of your data at any time — email support@passportclerk.com. Since paid files self-delete within 48 hours and we keep no photo archives, in most cases there is nothing left to delete beyond the order record required for bookkeeping.
Plain-language summary · last updated July 2026 · localized versions follow with the site's other languages