Privacy Policy

Every step — reading the file, finding the face, cropping, checking the requirements and writing the final JPEG — runs inside your browser, on your own device. The photo is never uploaded, never transmitted and never stored on any server. There is no server that could receive it: the site is a set of static files.

When you close or reload the page, the image is gone from memory. We do not keep copies, and we could not retrieve your photo even if you asked us to — including if someone else asked us to.

Face detection uses a model that is downloaded from this site to your browser the first time you upload a photo. The model runs locally; the photo is not sent anywhere for analysis. The download is a plain file request, the same as loading an image or a font.

Fonts are served from this domain too, rather than from a third-party font service, so opening a page does not announce your visit to anyone else.

The tool sets no cookies of its own. It may keep small preferences — such as the document format you picked last — in your browser’s local storage, so a second visit starts where you left off. That data stays on your device, is readable only by this site, and disappears when you clear your browser data.

Standard web server logs of our hosting provider may record the pages requested, the time of the request, and a truncated IP address. These logs exist to keep the site running and to defend it against abuse; they are not linked to any identity and they contain no image data, because no image is ever sent.

We do not use accounts, we do not ask for your name or email to use the tool, and we do not run behavioural tracking.

We count visits with Cloudflare Web Analytics, so we can tell which pages people actually reach and whether the site is fast enough on a phone. It records the page address, the referring site, the country, the browser and device type, and page performance timings.

It sets no cookies and builds no device fingerprint. Visits are not linked into a profile, cannot be traced back to you, and are not shared with an advertising network. This is also why you are not being asked to accept anything: there is nothing stored on your device to consent to.

Google Analytics was considered and deliberately not used. It would have meant cookies, a consent banner, and sending visitor data to an advertising company — an odd thing to do on a site whose entire point is that your photo never leaves your device.

The project is intended to be funded by contextual advertising alongside a paid export. No ad network is active at the date above.

Before advertising is switched on, this section will be updated to name the network and to describe the cookies and identifiers it sets. In the EEA and the UK, consent will be requested through a consent management platform before anything is stored, and refusing personalised ads will remain possible without losing access to the tool.

Paid export is not available at the date above. When it is, payment will be handled by an external provider acting as merchant of record. Card details will be entered on the provider’s side and will never pass through this site; we would receive only the confirmation that an order was paid, together with the billing data the provider is required to share for invoicing and tax purposes.

Under the GDPR you may request access to, correction of, or deletion of personal data held about you, object to its processing, and complain to your national supervisory authority. In practice we hold almost nothing: for photos there is nothing to access or delete, because they never leave your device.

The tool is meant to be used by adults, including adults preparing a child’s document photo. We do not knowingly collect data from children — and a child’s photo processed here never reaches us either.

When this policy changes, the date at the top of the page changes with it. Material changes — an ad network, an analytics tool, payments going live — are described here before they take effect, not after.

Questions about this policy: support.photospec@gmail.com. See also the terms of service and what this tool does.