Privacy
Your face is personal. We use your photo only to make your passport photo, and we delete it 72 hours after you upload it.
Last updated Oct 4, 2026
What we collect and why
| What | Why | How long we keep it |
|---|---|---|
| Your photo (and the finished passport photo files) | To check it against the official rules and make your photo | Deleted within 72 hours of upload (our deletion job runs every 10 minutes) |
| Face measurements (head size, eye line, pose) | To check the rules; worked out from your photo during the check | Not stored as a face template; gone with the photo |
| A small, low-resolution preview while you frame the shot (after you agree) | To tell you live if glasses or a hat would make the photo fail | Checked and discarded at once; never stored |
| Rejection notice (guarantee claims only) | To check a guarantee claim | Deleted 3 days after you send it |
| Your consent (time, consent text version, session id) | To show you agreed before we checked your photo | As long as needed to prove consent; no photo data |
| Email address | Receipt, order link, a "was it accepted?" email (and one reminder if you answer "not yet"), guarantee claims | Removed 90 days after purchase |
| Waitlist email (other countries) | One email when that document launches; confirmed by you first | Until you leave the list (a link in every email) or we send the launch email |
| Payment details | Handled by Stripe. We never see your card number | A card fingerprint (not the number) is removed after 90 days |
| Shipping address (mailed prints only) | Collected by Stripe at checkout and passed to our print partner | Not stored in our database |
| Order record (document type, price, dates, refunds) | Accounting, tax and guarantee claims | As long as the law requires; contains no photo |
| Usage events (for example "photo checked", "checkout started", errors) | To see where the site works and where it breaks | 13 months; no photo, name, email or IP address |
Your photo and biometric information
Measuring a face in a photo can count as collecting biometric information under some US state laws (for example Illinois, Texas and Washington). So before any photo leaves your device, we ask for your written consent. We then measure the face in the photo (for example head height and eye position) only to check it against the official rules for your document. We do not create or keep a face template, we do not use your photo to identify you, and we never use it to train AI.
Retention and destruction. Photos, face measurements and all files made from them are destroyed within 72 hours of upload, and access to them is cut at 72 hours. A storage rule deletes anything our job might have missed. We never sell, lease, trade or otherwise profit from biometric information, and we disclose it only to the service providers below that process it for us (Cloudflare for storage and the check; Prodigi receives only a finished print file for mailed prints).
Photos of other people. You may only check a photo of someone else (for example a family member in a family order) if they agreed, or if you are their parent or legal guardian.
Photos are re-encoded when you upload them, which removes hidden data such as GPS location.
Who helps us
- Cloudflare: hosting, photo storage, the photo check, bot protection and sending emails.
- Stripe: payments, sales tax and refunds.
- Prodigi: printing and mailing, for orders with mailed prints only. They receive the print file and your shipping address.
- Google Analytics: site usage statistics (which pages are visited, device type, approximate region). It never receives your photo, your email or your order link.
We share only what each one needs to do its job. We do not sell or share personal information for advertising.
Cookies
We use two of our own cookies: one keeps your consent and photo checks together for 72 hours, the other keeps the price you were shown the same for 30 days. Google Analytics uses cookies to count visits in aggregate. We do not use advertising cookies. You can block Google Analytics in your browser settings or with Google's opt-out add-on.
Children
Photos of babies and children are taken by a parent or guardian, who gives consent for them. PassportOwl is not directed to children, and we don't knowingly collect information from children.
Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it sooner. Write to support@passportowl.com from the email you used, with your order link. \1 Depending on your state (for example California, Colorado, Virginia or Texas), these are also your legal rights. The face measurements we use count as sensitive information; we use them only to provide the service you asked for.
Changes
If we change this policy, we update the date at the top of this page.
Contact
PassportOwl · support@passportowl.com