Last updated 21 October 2026

Privacy

OpenPhotoId collects nothing about your photo, and nothing about you beyond an anonymous count of visits to this website. That is not a policy we are choosing to follow — it is a consequence of how the product is built, and the rest of this page is the detail behind that claim.

What we collect

Nothing about you or your photo. Specifically:

• Nothing, unless you sign in. The app works in full without an account. If you choose to sign in — the control in the top corner — see "If you sign in" below.
• No photos. The photo you choose and the file you export never leave your device. There is no upload step, and no server of ours that could receive one.
• A visit count, and nothing more. This website counts page views with self-hosted analytics — see "This website" below. No pixel, no cookie, no fingerprinting, no third-party embed.
• No advertising. Nothing here is sold to anyone, because there is nothing collected to sell.

Where your photo lives

In the memory of the browser tab, while you work on it. Close the tab and it is gone. The app deliberately stores nothing derived from the photo: its own claim is that the image never leaves the device, and leaving pieces of it in browser storage after the tab closes would undercut that even though it never crosses the network.

One exception, and only until the photo has been processed: the photo you picked is also kept in this browser's own storage, so that reloading the page — on a first visit, while the models download — does not lose it. It is deleted as soon as the photo has been processed or you pick another one; if the tab is closed before that, it is deleted the next time the app opens. It never leaves the device.

Two things are remembered, in this browser only: the language you chose, and the documents you used recently, so they appear at the top of the list next time.

If you sign in

The account is optional and unlocks nothing on this site; it exists so that one account works across our apps, and so credits bought for the apps that do server-side work can be carried between them. Signing in sends our account server your e-mail address (through Google) or a wallet signature, and nothing else. The account server holds that identity, your credit balance and its history. Your photos are never part of it — there is still no server that accepts one.

You can disconnect a sign-in method or sign out from the account page at any time. To delete the account and everything held with it, write to hello@openphotoid.com.

The models

The face detector and the portrait matting model are downloaded from this site on first use — about 26 MB, once — and kept in your browser's cache so the app works offline afterwards. They are served from openphotoid.com rather than from a public CDN, because a request to a third party timed to the moment you open a passport photo would tell that third party something we would rather nobody knew.

How you can check this yourself

Open your browser's developer tools, switch to the Network panel, and make a photo. After the page and the models have loaded, detecting the face, separating the background, cropping, checking and exporting produce no further requests at all.

• The core is a WebAssembly module compiled from Rust with no HTTP client and no networking dependency. There is no code path from it to a network.
• Both neural networks run inside the tab, on your device's processor.
• The automated test suite records every request the app makes while driving a complete photo, and fails if any of them leaves the origin.

This website

This page is static files served from our own server. The server keeps ordinary access logs — the address a request came from, the page it asked for, the time, the browser's user-agent string and the site that linked here (its name only, not the full address) — for a short period, for operating the site, and nothing is done with them beyond that.

Page views on this site are counted by a self-hosted, privacy-preserving analytics service. It sets no cookie, records no personal data, and does not follow you to other sites. It records which page was opened, plus any utm_ tag in the link that names where the visit came from (such as utm_source=chatgpt.com), not the rest of the address, and it never sees your photo: choosing, editing and exporting one sends it nothing.

Contact

Questions about any of this: hello@openphotoid.com. The source is public at gitlab.com/open-photoid/openphotoid.