Last updated 8 September 2026

Privacy

OpenPhotoId collects nothing about you and nothing about your photo. That is not a policy we are choosing to follow — it is a consequence of how the product is built, and the rest of this page is the detail behind that claim.

What we collect

Nothing. Specifically:

• Nothing, unless you sign in. The app works in full without an account. If you choose to sign in — the control in the top corner — see "If you sign in" below.
• No photos. The photo you choose and the file you export never leave your device. There is no upload step, and no server of ours that could receive one.
• No analytics. No tracking script, no pixel, no cookie, no fingerprinting, no third-party embed — on this site or in the app.
• No advertising. Nothing here is sold to anyone, because there is nothing collected to sell.

Where your photo lives

In the memory of the browser tab, while you work on it. Close the tab and it is gone. The app deliberately stores nothing derived from the photo: its own claim is that the image never leaves the device, and leaving pieces of it in browser storage after the tab closes would undercut that even though it never crosses the network.

Two things are remembered, in this browser only: the language you chose, and the documents you used recently, so they appear at the top of the list next time.

If you sign in

The account is optional and unlocks nothing on this site; it exists so that one account works across our apps, and so credits bought for the apps that do server-side work can be carried between them. Signing in sends our account server your e-mail address (through Google) or a wallet signature, and nothing else. The account server holds that identity, your credit balance and its history. Your photos are never part of it — there is still no server that accepts one.

You can disconnect a sign-in method or sign out from the account page at any time. To delete the account and everything held with it, write to openphotoid@gmail.com.

The models

The face detector and the portrait matting model are downloaded from this site on first use — about 26 MB, once — and kept in your browser's cache so the app works offline afterwards. They are served from openphotoid.com rather than from a public CDN, because a request to a third party timed to the moment you open a passport photo would tell that third party something we would rather nobody knew.

How you can check this yourself

Open your browser's developer tools, switch to the Network panel, and make a photo. After the page and the models have loaded, detecting the face, separating the background, cropping, checking and exporting produce no further requests at all.

• The core is a WebAssembly module compiled from Rust with no HTTP client and no networking dependency. There is no code path from it to a network.
• Both neural networks run inside the tab, on your device's processor.
• The automated test suite records every request the app makes while driving a complete photo, and fails if any of them leaves the origin.

This website

This page is static files served from our own server. The server keeps ordinary access logs — the address a request came from, the page it asked for, the time — for a short period, for operating the site, and nothing is done with them beyond that.

Contact

Questions about any of this: openphotoid@gmail.com. The source is public at github.com/openphotoid/openphotoid.