The short version
No accounts. No cookies. No analytics. No advertising. No third-party scripts. No photo upload, ever. One item is stored locally on your device: your language choice.
The rest of this page is the same statement in enough detail to be checkable.
Your photo
When you choose a photo, the browser reads the file directly from your device into the page. Cropping, background replacement, the compliance checks and the print-sheet layout are all computed inside your browser tab, in JavaScript and WebAssembly.
The image is never sent anywhere. There is no server-side image processing in this product, so there is no upload endpoint, no temporary storage bucket, no queue and no retention period to disclose. When you close or reload the tab, the image is discarded from memory. Files you download are saved by your browser to wherever you tell it — this site has no access to them afterwards.
You can verify this rather than trust it: open your browser's developer tools, watch the Network tab, and make a photo. You will see requests for this site's own static files — scripts, stylesheets, the segmentation model — and no request carrying your image.
What is stored on your device
One value, in localStorage:
| Key | idpm_lang |
|---|---|
| Contains | A language code such as en or de. |
| Why | So the site opens in the language you picked last time instead of resetting. |
| Sent anywhere? | No. It is read only by this site, in your browser. |
That is the whole of it. Clearing your browser's site data for this domain removes it. There are no cookies — the site sets none, for any purpose, so there is no cookie banner to dismiss.
Third parties
There are none embedded in the pages. No analytics platform, no tag manager, no advertising network, no social widgets, no embedded fonts or scripts loaded from another domain, no error-reporting service. Everything the pages request comes from this domain.
Two things deserve naming precisely, because "no third parties" can be read too generously:
- Google Search Console. A verification tag identifies this site to Search Console, which reports aggregate search statistics — how often pages appeared in results, and for which queries. It runs no script on the page and reports nothing about individual visitors or their photos.
- Links to official sources. Document pages link to government websites so you can check requirements. Following such a link takes you to that authority's site, under its own privacy policy — not this one.
What the host can see
These pages are served as static files by the hosting platform at skillsafe.ai. Like essentially every web server, it can record standard request information — IP address, timestamp, requested URL, user agent — as part of serving traffic and keeping the service up. That is a property of being on the web, not something this site adds, and no analytics layer is built on top of it.
Because photos are never transmitted, no such log can contain, reference, or be correlated with your photo.
Data rights
Rights of access, correction, deletion and portability under the GDPR, the UK GDPR, the CCPA and comparable laws all operate on personal data that a service holds. This site holds none: there is no account, no profile, no identifier, no stored photo and no contact record unless you choose to email.
If you do email, that message sits in a mailbox like any other email, is used only to answer you, and is not added to any database or used for anything else. Ask and it will be deleted.
Children
The tool is often used to make a photo of a child — an infant passport photo, for instance. That involves no collection of a child's data by this site, for the same reason it involves none of yours: the photo stays on your device.
Changes
If this policy ever changes in a way that affects what is collected, the change will be described here rather than quietly substituted. Given the architecture, the honest expectation is that it will not: there is no mechanism to collect anything, and adding one would mean rebuilding the product.
Questions about any of this: id-photo-maker [at] skillsafe [dot] ai.