Privacy Policy
Last updated: 31 October 2026
1. Who we are
PassportPicz is operated by CZY Tools (sole proprietorship of Zhongyan Cai), registered in Wuhan, Hubei, China ("we", "us"). For any privacy question, contact support@passportpicz.com.
2. Your photos never leave your device
All image processing — cropping, alignment, background checks, resizing and print-sheet layout — happens entirely inside your browser using HTML5 Canvas. We do not upload, transmit, store or have any access to the photo you select. No image data is sent to our servers or to any third party. When you close the page, the photo is gone from memory.
3. What we do collect
- Anonymous usage events. We record that an action happened (for example "a photo was selected" or "the checkout was opened"), together with the page path, referrer, device type and country. These events contain no photo content, no file names and no personal identifiers.
- No advertising cookies. We do not use advertising or cross-site tracking cookies, and we do not sell or share data with data brokers.
- Local storage. If you purchase, an unlock token is stored in your browser's local storage so you can download your files without paying again. You can clear it at any time from your browser settings.
- Server logs. Our hosting provider records standard technical logs (IP address, user agent, timestamp) for security and abuse prevention.
4. Payments
Payments are processed by Creem (creem.io), which acts as the Merchant of Record for this store. When you check out you are redirected to Creem's secure hosted checkout. We never see, receive or store your card number, CVV or full billing details. Creem handles your payment data under its own privacy policy. Creem may share with us only limited order information: order ID, amount, currency, country and email address if you provided one, so we can verify your purchase and answer support requests.
5. Why we process data
- To deliver the files you paid for and verify your purchase (performance of contract).
- To answer support requests (legitimate interest).
- To measure aggregate funnel performance and improve the tool (legitimate interest, aggregated and anonymous).
- To meet tax, accounting and fraud-prevention obligations (legal obligation).
6. How long we keep it
Anonymous usage events are retained in aggregate for up to 12 months. Server logs are kept for a short period by our hosting provider according to its policy. Order records are retained as long as required by tax and accounting law. We hold no photo data at all, so there is nothing to delete on that front.
7. Sharing
We share data only with service providers necessary to run this store: Creem (payments), Vercel (hosting and analytics), and Zoho (support email). We do not sell personal data.
8. Your rights
Depending on where you live you may have the right to access, correct, delete, restrict or object to processing of your personal data, and to data portability. Write to support@passportpicz.com and we will respond within 30 days. If you are in the EEA or UK you may also lodge a complaint with your local supervisory authority.
9. Children
This service is not directed at children under 16 and we do not knowingly collect their data. Photos of minors should be uploaded only by a parent or legal guardian.
10. International transfers
Our service providers are located in the United States and the European Union. Where personal data is transferred internationally, it is protected by the providers' standard contractual clauses.
11. Changes
If we materially change this policy we will update the date above and, where appropriate, notify you by email.