This statement explains what information ID.PHOTOS collects when you use the id.photos website and our mobile apps (the “Service”), how your photos are processed and stored, which kinds of third parties may process them, and the choices you have. It complements our .
At a glance
- You do not need an account to make an ID photo.
- Your photo is checked, measured and formatted on our own servers.
- If you choose an option that replaces the background, your photo is sent to a specialised image-processing provider that works on our instructions.
- Card details are entered directly with our payment processor. We never see or store your full card number.
- We do not sell your personal information or your photos, and we do not use your photos for advertising.
Who this statement covers
This statement covers people who use ID.PHOTOS directly. If a business, such as a photo studio or pharmacy, took your photo using our business tools, that business decides how your photo and details are used, and we process them on its behalf. Please contact that business first about photos it took.
Information we collect
- Your photo. The file you upload, kept exactly as uploaded. Photo files often carry hidden details added by the camera or phone (metadata), such as the date taken, the device model and, if location tagging was on, where the photo was taken. The original file we keep includes that metadata.
- What we create from it. The formatted ID photos, previews, a version with the background separated when you choose background replacement, and the measurements used to check the photo against the standard you selected (for example head size and eye position).
- Order details. The photo standard and options you choose; your email address if you ask us to email your photos; your mailing address if you order printed copies; and the payment status and reference we receive from our payment processor or the app store you purchase through.
- Technical information. Your IP address, the approximate country and province or state we work out from it, your browser and device type, the pages and features you use, and diagnostic logs.
The website does not ask you to create an account. Each photo you upload is kept as a separate photo session, identified by a long random reference.
How your photo is processed
- Upload. Your photo is sent to our servers over an encrypted (HTTPS) connection.
- Automated checks. Our software finds the face and measures it against the requirements of the standard you selected. This runs on our own servers. The measurements are used only to check and crop your photo; we do not use them to recognise or identify you, and we do not compare your face with anyone else’s.
- Formatting. Your photo is cropped and sized to the standard. Until you pay, you see watermarked previews.
- Background replacement (only when chosen on the website). If you choose an option that includes background replacement, such as Digital Plus or Pro, your photo is sent to a third-party image-processing provider to separate you from the background. This happens when you select the option, so you can preview the result before paying. In our mobile apps, background replacement is part of how every photo is prepared, so each photo processed in an app is sent to that provider.
- Review by a person (only when chosen). If you choose a service that includes review by a person, a member of our team will look at your photo.
- Delivery. You download your photos. If you ask, we email them to you as an attachment. If you order prints, we print them and send them by post.
Authorised members of our team can also access photos and order records when needed to answer your support requests, fix problems, or prevent fraud.
Third parties that may process your information
We use a small number of service providers. Providers that handle your photo or order details do so on our instructions, for the purposes below. Some features load content from other companies’ servers, which then receive the technical information your browser sends with any web request, such as your IP address.
- Image-processing providers. Receive your photo, or a crop of it showing your head and upper body, and return the image with the background separated. Used only for background replacement, as described above.
- Cloud hosting, storage and monitoring. Our service, database and stored photos run on a cloud infrastructure provider, which therefore holds everything described in this statement. Technical request information is also sent to its monitoring service so we can detect errors and keep the Service running.
- Payment processors and app stores. When you pay on the website, you enter your card details directly into our payment processor’s secure form, which is loaded on our pages; the processor may collect device information to prevent fraud. In-app purchases are handled by the app store you buy through. We receive the payment status and a reference, never your full card number.
- Email delivery. If you ask us to email your photos, our email delivery service receives your email address, the message and the attached photos. It records whether each message is delivered, opened, and whether its links are clicked.
- IP location lookup. Receives your IP address and returns your approximate country and province or state, which we use for sales tax and fraud prevention.
- Website analytics. Receive information about the pages you visit, your device and browser, your approximate location and the site that referred you, collected with cookies or similar technologies, so we can understand how the site is used.
- Fonts and translation. Page fonts, and the language option when you use it, are loaded from third-party servers.
- Bot checks. If we ask you to confirm that you are not a robot, the provider of that check receives information about your device and how you interact with it.
- Postal carriers. If you order printed photos, your mailing address is printed on the package so the carrier can deliver it.
- Authorities. We may disclose information where the law requires it, or where needed to protect the rights, safety or property of our users, ourselves or others.
Where your information is stored
Our application runs in Canada on a major cloud provider. Some of the service providers above are located in, or process data in, other countries, including the United States and member states of the European Union. Where the law requires it, we rely on appropriate safeguards for these transfers.
How long we keep it
- Photos and the files made from them are kept so you can download your purchase again and so we can help with questions about an order. We do not currently delete them automatically after a fixed period; you can ask us to delete them at any time (see “Your choices and rights”).
- Order and payment records are kept for as long as tax and accounting law requires, even if the photo itself has been deleted.
- Technical logs are kept for as long as needed for security and troubleshooting.
How we protect it
- Connections between your browser and the Service, and between our servers and our database, are encrypted.
- Stored photos are not publicly listed, and the download links we generate expire after a short time.
- Full-resolution photos are released only after payment; before that, you see watermarked previews.
- Access to photos and order records is limited to authorised members of our team.
- Treat links to your photo session like a password: anyone who has one can open that session.
No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.
Cookies and similar technologies
- The website does not use cookies to sign you in; there are no accounts to sign in to.
- Your browser stores a few preferences on your own device: the photo standard you selected, your display theme, a discount code you are applying, and that you have dismissed the cookie notice.
- Website analytics services set cookies to measure how the site is used.
- The language option sets a cookie to remember your language when you use it.
- Our payment processor and bot-check provider may set cookies for security and fraud prevention.
You can block or delete cookies in your browser settings. Blocking analytics cookies does not stop the Service from working; blocking payment or security cookies may prevent checkout.
Children
ID photos are often needed for children. If you upload a photo of a child, or of anyone other than yourself, you confirm that you are their parent or legal guardian or have their permission. We do not knowingly collect information directly from children.
Your choices and rights
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy of it, or object to or restrict how we use it. You can ask us to delete your photos at any time.
To make a request, email . Because the website has no accounts, please include something that lets us find your photos: the email address you gave us, your invoice number, or the date and approximate time you uploaded. We may ask you to confirm that the request is yours before acting on it.
If you are in the European Economic Area or the United Kingdom, you may also complain to your local data protection authority. In Canada, you may contact the Office of the Privacy Commissioner of Canada.
Tip: to avoid sharing where a photo was taken, turn off location tagging on your camera or phone, or remove location details from the file before uploading.
Changes to this statement
We may update this statement from time to time. The revised version will be posted on this page with a new “Last updated” date. Where a change significantly affects how your information is handled, we will make it clear on this page.
Contact us
For questions about this statement or how your information is handled, email .
Effective date: 27 September 2026.