Home › Privacy Policy

Privacy Policy

Last updated: 19 October 2026

This policy explains how Passport Room handles photos, accounts, visitor information, cookies and Google advertising.

1. Your photos are processed on your device

Every image operation in Passport Room — background removal, face detection, face enhance, cropping to a passport or visa size, colour and exposure adjustments, the outfit overlay, print-sheet layout and export — runs inside your web browser on the device you are using. The app has no photo upload endpoint: photos you open are not sent to or stored on our servers. If you choose to save photo history, a thumbnail remains in this browser until you delete it or clear site data. Downloaded files remain wherever you save them.

2. Network requests the app does make

The AI features need model files, and those are downloaded to your browser the first time you use each feature, then cached on your device for later visits. Your photo is not part of these requests; they are ordinary file downloads. The files are fetched from:

As with any web request, those third parties can see your IP address and browser user agent when a file is fetched. They receive no image data. Their own privacy terms apply to those requests.

3. Data stored in your browser

The app keeps local profile details (including any avatar you set), editor preferences, usage counters, a visitor identifier and number, and your sign-in session in browser storage. If you enable photo history, recent photo thumbnails are also saved locally. Clearing browser site data removes this local information, including your local photo history, but does not delete an anonymous Firebase account or submitted reviews held by service providers. You can turn off or clear saved photo history in the app.

4. Anonymous authentication, return visits and reviews

If you accept cookies, Passport Room signs this browser into Google Firebase Anonymous Authentication without asking for your email, password or real name. Firebase creates a user ID and stores the anonymous authentication account. A session in browser storage lets Firebase recognise the same browser on later visits and renew its authentication tokens. Your random display name and full user ID are shown in the top-bar profile panel.

The identifier is pseudonymous, not completely anonymous: it can distinguish returning visitors. Google receives your IP address and browser information through authentication requests. We do not send your photos to Firebase, collect a real name through this feature, or publicly display authentication tokens. The random name, number of visits, first visit and last visit dates are saved locally in your browser, not uploaded to a visitor-statistics database. This update does not send a browsing history, country lookup, time spent or photo-export statistics to Firebase.

Rejecting cookies disables this visitor authentication and clears its browser session and local visitor profile. You can withdraw consent through Cookie settings. Clearing local data does not delete an account already held by Firebase; contact us with your user ID to request deletion. Clearing storage, using private browsing or another browser can result in a new ID. If network access or Firebase is unavailable, photo tools remain available and your profile reports the connection problem rather than inventing a Firebase ID.

Community reviews are separate from visitor authentication. Submitted review text, rating, timestamp and customer/device label may be stored and publicly displayed where database rules permit submission. Do not include private information in a public review.

5. Cookies and Google advertising

Passport Room is free because it is supported by advertising served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.

Types of cookies and storage we use: essential browser storage that makes the app work (preferences, sign-in session, your cookie choice); visitor tracking storage for the consent-based Firebase session and local visit counts described in section 4; and advertising cookies set by Google and its partners. Requests to Google never include the photo opened in the editor.

Your consent: on your first visit a cookie banner asks you to accept or reject visitor tracking and advertising cookies. Until you accept, visitor authentication does not start; we ask Google to show only non-personalised ads and not to store advertising cookies (Google Consent Mode). You can change your choice at any time with the "Cookie settings" link at the bottom of every page, or by clearing your browser's site data. You can also block or delete cookies in your browser settings.

6. Free use

Passport Room is free to use and takes no payments. It is funded by advertising.

7. Children

Passport Room is a general-purpose utility and is not directed at children under 13. Children should not create an account or submit a review without a parent or guardian. Account, visitor and review information may be collected as described above; we do not knowingly seek personal information from children under 13. A parent or guardian is welcome to use the tool to produce a child's passport photo, and that photo is handled exactly as described in section 1.

8. Your rights and how to exercise them

You may ask for access to, correction of, deletion of, or a copy of any data we hold about you. This may include account information, visitor records and reviews. You can remove local data by clearing site data in your browser; that does not erase remote records. For an account or data request, including deletion, write to support.passport.room@gmail.com and we will answer within 30 days.

9. Security

The site is served over HTTPS. Photos opened in the editor are processed locally, but account, visitor and review information is processed by the providers listed below. Keep your browser and device updated; signed-in sessions and saved photo history may remain on shared computers.

10. Legal bases and how long we keep data

Where the GDPR or UK GDPR applies, the legal basis depends on the activity. Account access is necessary to provide the services you request; consent-based visitor identification and personalised advertising cookies rely on your consent, which you can withdraw at any time.

11. International transfers and the companies that process data for us

Our hosting, visitor analytics and advertising providers operate outside Bangladesh, so data such as your IP address, device identifiers and account may be processed abroad, including in the United States and the European Union, under the safeguards those providers publish — typically Standard Contractual Clauses. The processors we use are:

We do not sell personal data and we do not share it for any purpose not listed here.

12. Changes to this policy

We may update this policy when the service or its data practices change. The date above shows when this text was last revised.

13. Who we are and how to contact us

The data controller is Passport Room (legal name: Passport Room), Jamalpur, Dhaka, Bangladesh. Email support.passport.room@gmail.com for any privacy question, access, correction, deletion or objection request; we reply within 2 business days and complete requests within 30 days. Full business details are on our contact page. If you are unhappy with our response you may complain to your local data protection authority.