The short version: your photos never leave your device. CropPass does all photo processing in your browser, so we never receive, see or store your photos. We have no accounts, no ads and no tracking cookies, and we never sell data.
Your photos
When you add a photo, it is read, cropped, resized and checked by code running in your browser. It is not uploaded to CropPass or anyone else. Some features download code or model files from our site to your browser to do this work; your photo stays on your device.
So you can pick up where you left off after checkout, the tool may keep your current photo, with the country and crop you chose, in your browser's own storage on your device for up to 24 hours. It is never sent anywhere, and you can remove it sooner by clearing this site's data in your browser.
Payments (handled by Stripe)
If you buy a pass, you pay on a checkout page run by Stripe, which acts as the merchant of record for your purchase. Stripe collects what it needs to take payment and calculate tax (such as your email address, card details and billing country or postcode) and handles it under its own privacy policy. We never see your full card number.
In our Stripe account we can see your purchase, such as your email address, the pass you bought, the amount and your country. We use this only to provide your pass, answer support requests and payment disputes, and meet tax and accounting obligations.
To show the passes in your currency, the tool may ask our site which country your connection comes from, as Cloudflare works it out, when you add a photo or open the passes. The answer is not stored.
Unlocking and restoring a pass
After checkout, your browser sends the Stripe checkout session ID to our unlock function. To restore a pass, you enter your purchase email and receipt number, which are sent to the same function. It uses them only to check the purchase with Stripe and return a signed unlock token. We do not store them in a database or write them to our logs; to prevent abuse, the restore function briefly keeps the email and your IP address in memory as rate-limit counters (for up to 15 minutes).
The unlock token is stored in your browser's local storage on your device. It contains the checkout session ID, your pass type, its photo limit and its expiry date. It contains no name, email or payment details. To apply the photo limit, the tool also keeps a one-way fingerprint (hash) of each source photo you download with the pass, on your device only. A fingerprint can't be turned back into your photo.
Analytics
We count page views and a few anonymous events, such as which country was selected or that a download happened, with our own code. Your browser sends each event to our site, and we store it in Cloudflare Workers Analytics Engine. An event holds only its name, up to two simple values (such as the document type), the page address without any query string, the name of the website that linked you here (first page of a visit only), and the country Cloudflare works out from your connection when the event arrives. We use no cookies and no identifiers, and we do not store your IP address, so events cannot be linked to you or to each other. When a pass is bought, our unlock function also records one such event, holding the type of pass, the currency you paid in and the country Cloudflare works out from your connection. Events are kept for three months and then deleted. They never include your photo.
Hosting and fonts
CropPass is hosted by Cloudflare. Like any web host, Cloudflare processes technical request data (such as your IP address, browser type and the pages requested) to deliver the site and keep it secure. See Cloudflare's privacy policy.
Our fonts are served from our own site, so loading a page does not contact Google or any other font provider.
Storage on your device
Besides the unlock token, the site keeps a few small settings in your browser, such as whether you have dismissed a prompt or which price you were shown. They stay on your device until you clear this site's data. We don't use cookies for tracking or advertising.
What we don't do
- No ads or advertising trackers.
- No tracking cookies.
- No selling or renting of your data.
- No accounts or user profiles.
How long data is kept
We don't keep your photos at all. Purchase records are kept by Stripe and in our Stripe account for as long as needed for support, payment disputes, and tax and accounting law. Data stored on your device stays there until you clear this site's data in your browser.
Your rights
Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you can ask to access, correct or delete personal data we hold about you, or object to how we use it. Because we hold very little, most requests concern purchase records in Stripe. To make a request, email us at support@croppass.com. You can also complain to your local data protection authority.
To delete what CropPass stores on your device, clear this site's data in your browser settings.
Children
Parents and guardians can use CropPass to make photos of their children; those photos stay on their device like any other. Passes should be bought by an adult.
Other sites
Some pages link to other sites, such as official requirement pages or our donation page. Those sites have their own privacy policies.
Changes and contact
If we change how we handle data, we will update this page and the date at the top. For any privacy question, email us at support@croppass.com.