Privacy Policy — PhotoForge

Short version

Your photos are never uploaded. Every crop, cutout and upscale runs inside your own browser. Image data does not touch our servers — we do not have servers for image processing at all.
We do not ask for an account, and we do not store your files.
This site ships with no third-party analytics: statistics come from Cloudflare Web Analytics, which is cookieless and reports aggregate page views only.
We sell nothing to anyone. No data brokers, no ad networks, no profiling.

What is processed on your device

ID / passport photo tool	Photo decoding (including HEIC), cropping, background whitening, print-sheet layout and file export all happen locally in your browser using the Canvas API. The image you choose is read from your device and written back to your device.
Background remover	The AI model (ONNX/ISNet) is downloaded once from a public CDN and then runs locally on your device. Your image is passed to the model in your browser's memory.
Upscaler	Resizing, denoise and sharpening run locally in your browser.
Specification data	Static country/document rules (sizes, background colour, head-height ratio) are served as a small JSON file. They contain no personal data.

Because processing is local, closing the tab discards everything. We cannot recover a photo for you, and we could not hand one over if asked, because we never receive it.

Analytics

We currently use only Cloudflare Web Analytics. It is cookieless, does not fingerprint or track individuals across sites, and reports aggregate page views, referrers, approximate country and page-load performance.

There is no Google Analytics, no advertising pixel and no cross-site tracker on this site, which is why you are not asked to accept anything.

Your images are never involved in any of this. No photo, file or filename we process ever leaves your device.

What we do not do

No accounts, no sign-up, no email required to use any tool.
No upload of your photos or files to any server we operate.
No advertising networks, no cross-site tracking pixels, no data sales.
No retention of processed images — there is nothing to retain.

Third parties

Cloudflare	Hosting and CDN for this website. Cloudflare necessarily sees standard request metadata (IP address, user agent) to serve and protect the site. Cloudflare Web Analytics (cookieless, aggregate-only) is enabled.
Google Analytics	Page-view statistics, loaded only when configured and only with your consent where required. Google's privacy policy.
jsDelivr CDN	Delivers the open-source background-removal library and the HEIC decoder. It sees a request for those static files, not your images.
Model host (img.ly)	Delivers the ONNX model file used by the local background remover.

Your rights

Because we hold almost no personal data, most requests resolve immediately: there is no profile of you to export or delete. For analytics data, you can withdraw consent above, and you may also use browser-level controls or an ad/analytics blocker at any time.

If you believe something here is inaccurate, we will correct it — updates are published on this page.

Disclaimer

Our specification data and on-page checks follow published guidance, but official acceptance is always decided by the issuing authority. Compliance checks are advisory only.