Privacy Policy
Last updated 2026-08-19
The short version
Your photograph never leaves your device. IDShot does the face detection, background removal and cropping with code running inside your own browser. There is no upload endpoint for images, and we have no way to see, store or recover a photo you make here.
What we do collect
- Nothing by default. Visiting the site and using the editor requires no account and stores no personal data on our servers.
- Purchase data, if you buy. Checkout is handled by Creem, our merchant of record. They receive your email address and payment details in order to charge you and send a receipt; we receive only an order identifier. See Creem's own privacy policy for how they handle that data.
- A purchase record, if you buy. So that you are never asked to pay twice, a confirmed payment creates one row in our database containing a randomly generated restore code, a one-way hash of the payment processor's order number, the date, and a count of how many times the code has been used. That is the whole row. It holds no email address, no name, no card details, no IP address and nothing derived from your photo — we cannot work out who you are from it, only that somebody paid and that this code belongs to that payment.
- Local storage on your device. After a purchase we keep a small unlock token and your restore code in your browser's local storage, and the photo you are working on in IndexedDB so it survives the trip to the payment page. Clearing your browser data removes all of it — which is exactly why we show you the restore code.
- Aggregate traffic data. Our host, Cloudflare, records standard request logs (IP address, user agent, page requested) for security and abuse prevention. We do not run advertising or cross-site tracking scripts.
- Anonymous counters. We keep a tally of how many people opened a page, made a photo, clicked the unlock button and completed a payment, grouped by day and by which site referred you. These are plain counters — a number that goes up by one. No IP address, no cookie, no device fingerprint and no identifier of any kind is stored with them, so a row cannot be traced back to you or joined to anything else. We use them for exactly one thing: working out which step of the process people give up at.
Third parties the page talks to
- jsDelivr / Google Storage — the face-detection and segmentation models are downloaded from these CDNs. They see your IP address, as any file download would.
- Creem — only when you click through to pay.
Your rights
Because we hold almost nothing about you, most data requests are trivially satisfied. If you bought something and want the associated record deleted, email support@idshot.app with your restore code and we will delete that row, pass the request on to our payment processor, and confirm when it is done. Deleting it means the code stops working, so keep a copy of any photos you still want.
Children
IDShot is a tool for adults. Parents frequently use it to make photos of their children, which is fine — those images are processed on the parent's own device and are never transmitted.