Privacy policy

Your photos stay on your device

The passport photo maker and every photo utility (background removal, compress, resize, convert, adjust, upscale) run entirely in your browser using local processing. Your images are not uploaded, stored, or seen by us.

After a Batch payment succeeds, the completed ZIP is stored in this browser's local database for up to 24 hours so a refresh does not destroy a paid download. It remains on your device, is never sent to Ohata, and can be removed immediately from the Batch screen.

Two optional, user-initiated actions are the only exceptions:

• Partner printing (e.g. Walgreens): if you choose same-day prints, your print sheet is transferred from your browser directly to the print partner's storage — it does not pass through our servers. The partner's own privacy policy applies.
• Open in Canva: if you connect Canva and export an image there, that image is sent to Canva to create your design. Canva's privacy policy applies.

Payments

Single-image use is free. Batch processing is paid and handled by Stripe — your card details go to Stripe directly and never touch our servers. We receive only a confirmation that a payment succeeded.

Anonymous usage analytics

To understand which tools are used, where flows fail, and whether a completed checkout is paid or refunded, the site sends small first-party events (for example, "photo exported"). We assign a random browser identifier that expires after 90 days and a per-tab session identifier. We may also record the page path, coarse device class, high-level file-size or processing-time ranges, first-touch campaign tags, and the domain of an external referrer.

Analytics never includes your images, filenames, email address, full referring URL, raw error text, or content derived from a photo. Payment status and amount come from Stripe; card details remain with Stripe. We also read a country hint from the request to choose metric or imperial units — it isn't stored in product analytics.

Cookies and local storage

We don't use advertising or cross-site tracking cookies. Short-lived cookies are used only for security when you connect an optional partner (such as the Canva sign-in handshake). The anonymous analytics identifier and first-touch attribution are kept in local storage for up to 90 days; the session identifier is kept in session storage until the tab session ends. Paid Batch output may also be kept locally for up to 24 hours as described above.

Questions

Email xulingzhihou@gmail.com about anything in this policy.