Privacy Policy
Last updated 2026-08-18
The short version
Your photograph never leaves your device. IDShot does the face detection, background removal and cropping with code running inside your own browser. There is no upload endpoint for images, and we have no way to see, store or recover a photo you make here.
What we do collect
- Nothing by default. Visiting the site and using the editor requires no account and stores no personal data on our servers.
- Purchase data, if you buy. Checkout is handled by Creem, our merchant of record. They receive your email address and payment details in order to charge you and send a receipt; we receive only an order identifier. See Creem's own privacy policy for how they handle that data.
- Local storage on your device. After a purchase we keep a small unlock token in your browser's local storage, and the photo you are working on in IndexedDB so it survives the trip to the payment page. Clearing your browser data removes both.
- Aggregate traffic data. Our host, Cloudflare, records standard request logs (IP address, user agent, page requested) for security and abuse prevention. We do not run advertising or cross-site tracking scripts.
Third parties the page talks to
- jsDelivr / Google Storage — the face-detection and segmentation models are downloaded from these CDNs. They see your IP address, as any file download would.
- Creem — only when you click through to pay.
Your rights
Because we hold almost nothing about you, most data requests are trivially satisfied. If you bought something and want the associated record deleted, email support@idshot.app and we will pass the request to our payment processor and confirm when it is done.
Children
IDShot is a tool for adults. Parents frequently use it to make photos of their children, which is fine — those images are processed on the parent's own device and are never transmitted.