Data security

Passport and ID photos show your face clearly, so you should know exactly what happens to them. This page explains how we protect your photos and personal details. Our privacy policy has the full details of what we collect.

Encrypted connections

Every page, upload, and download on idphoto.us uses HTTPS, which encrypts the data travelling between your device and our servers. Our site tells browsers to always use HTTPS (HSTS), so they won't connect to it over an unencrypted connection. Photos sent from our server to our photo processing provider are also sent over encrypted connections.

Less data leaves your device

Before uploading, your browser re-saves your photo, and shrinks it if it's very large. This removes hidden metadata, such as the location where the photo was taken and the device it was taken on. We only accept JPEG, PNG, and WebP images up to a set size, and we check every upload on our server.

Temporary storage and automatic deletion

We keep your photo only as long as you need it to view and download the result.

• Your result page has a long, random link that can't practically be guessed.
• The result page and our record of it are deleted automatically 7 days after you make your photo.
• Once deleted, your result can't be recovered by you or by us, so download your photo promptly.

Payment security

Our tools are currently free, so we don't take payments or collect card details. When paid downloads launch, you'll enter card details with our payment provider, not on idphoto.us. Your card number, security code, and bank details never reach our servers, and we don't store them. We receive only what we need to confirm and record your purchase.

Your data is not for sale

• We never sell, rent, or share your photos, email address, or other personal information with advertisers, data brokers, or marketing companies.
• We don't use advertising or analytics cookies, and our pages don't load third-party tracking or ad scripts.
• We never use your photos to train AI models, build datasets, or develop facial recognition.
• We share data only with the service providers that help us run the site, such as our host and photo processing provider, and only to provide the service. Our privacy policy lists them.

Limited access

Photo processing is automated. We don't look at your photo unless you ask us to in a support request. We store IP addresses only as one-way hashes, which we use to stop spam and abuse, and access to our database is restricted.

No system is perfect

No method of sending or storing data is completely secure, and we can't promise that it is. We work to keep our safeguards current. If you believe you've found a security problem, please tell us through our contact page.