Privacy Policy

This policy covers sizeport.com, the image tools on it, the blog and the optional free account. When we say “SizePort”, “we” or “us”, we mean the SizePort team, based in Pakistan, which runs this website and decides how its data is used. If something here is unclear, write to [email protected] and a person will answer.

The short version

• The tools work inside your browser. Your images are never sent to us, and we have no way to see them.
• You do not need an account. If you make one, we keep your name, your email address, your saved presets and a short history of the tools you used. Never your pictures.
• The site shows ads from Google AdSense, which uses cookies. Where the law requires it, you are asked first.
• If you buy a paid plan, our reseller Creem handles the payment. We never see your card number.
• We do not sell your personal information, and we do not use analytics tools that follow you around the web.
• You can delete your history or your whole account yourself, at any time, from your account settings.

Your photos

Resizing, compressing, converting, cropping, making PDFs, building passport photos, removing backgrounds and enlarging or sharpening photos all happen on your own computer or phone. When you choose a file, your browser reads it into memory, does the work there and hands the result straight back to you as a download. The file is not uploaded, not stored on our servers and not seen by anyone at SizePort. Close the tab and it is gone from the page.

Background removal uses a small AI model. The first time you use it, your browser downloads the model files from Hugging Face and the code that runs them from jsDelivr, a public file delivery network. Those services see an ordinary download request from your device, the same as when any website loads a file from them, but your photo is never part of that request. Your browser then keeps the model in its own cache so the next run starts faster. You can clear it any time by clearing your browser’s site data.

The passport and exam photo tools also find your face so they can place the crop frame for you. That model is a small file served from our own site, and the code that runs it comes from jsDelivr in the same way. Your face is found on your device and nothing about it, no picture and no measurement, is sent to us or stored.

The upscaler, which enlarges and sharpens photos, uses an AI model served from our own site, and the code that runs it comes from jsDelivr in the same way. Your photo is enlarged on your device and is never sent to us.

If a picture contains other people, or private details such as a document number, you remain in control of it the whole time. We simply never receive it.

When you visit the site

Like every website, our server has to know where to send each page. When you load a page, these details reach us:

• your IP address, which tells roughly which network and country a request came from
• the page you asked for, the time, and the page that linked you to us, if your browser shares it
• your browser and device type, as your browser reports them

These end up in short lived server logs, which we use to keep the site running, spot errors and block abuse such as floods of automated requests. We keep them for no longer than 30 days. The site also sits behind Cloudflare, which protects it from attacks and delivers pages quickly, so Cloudflare processes the same connection details on our behalf.

Cloudflare also tells our server which country a request comes from, worked out from the IP address. We use it only to show the prices for your region on the pricing page. We do not store it.

We count how many times each blog article is read. The count is a single number per article. It is not linked to you, your IP address or your account, and your browser only notes for the length of your visit that it already counted that article.

We do not use Google Analytics or any similar tracking or analytics service.

If you create an account

Every tool works without an account. An account is there for people who want to save their settings. If you create one, we keep:

• Your name and email address. We use your email to confirm it is really yours, to let you sign in and to help you reset your password.
• Your password, in scrambled form. We store a one way hash of it, never the password itself, so nobody at SizePort can read it.
• Saved presets. The name you give a recipe and its settings, for example “3.5 x 4.5 cm, white background, under 50 KB”, plus how often you ran it.
• History. For each job: the tool, a short description of the settings, the number of files and their sizes before and after. No file names, no thumbnails, no images. Entries older than 90 days are deleted automatically.
• Your tool defaults. Preferred format and quality, and whether to remove photo metadata.
• Your Exam Kit list. The names of the exams you chose, such as IBPS or NEET, so they are ready next time. Your photo, signature, thumb impression and declaration are never stored.
• Sign in records. While you are signed in, we keep a record of each session with the IP address and browser it started from. This lets us keep your account secure and lets you sign out everywhere. A session ends when you sign out or after 30 days, and its record is then deleted.

You can edit your name, change your defaults, clear your history or delete your account from Settings. Deleting your account removes your profile, presets, history, sessions, HD counts and Passport Pro records straight away, and any rejection notice you uploaded within an hour. Records of purchases are kept as described under How long we keep things.

HD results from the AI tools

The AI tools make a free result as often as you like. A full resolution result, which we call HD, is limited each month, so when you ask for one our server counts it before your device makes it. To count, we keep:

• Without an account: a cookie with a random identifier for your browser, set only when you first ask for an HD result, and how many HD results that browser asked for each month. The identifier is not linked to your name, your email address or your IP address.
• To stop one network taking many free HD results: a count for each day of the network your request came from. We never store the IP address itself, only a scrambled code made from it with a secret key, which cannot be turned back into the address. For IPv6 the code covers your connection’s network rather than your exact address. These daily counts are deleted after 2 days.
• With an account: how many HD results you used each month, your HD credit balance and a record of each credit added or spent. If you create an account, the HD results your browser used earlier that month count toward your account’s monthly allowance.
• Each HD result: which tool made it, when, and whether it came from your monthly allowance, a credit or Pro. We keep this for 90 days, so that a result that failed on your device can be given back.

None of this includes your photo or anything about it. Monthly counts are deleted 13 months after the month they count.

Passport Pro and its guarantee

Passport Pro checks a photo against the official rules of a passport or visa. Like every other tool, the check runs on your device and the photo is never uploaded. Because Passport Pro is paid for per person and comes with a money back guarantee, our server keeps a record of what was done with it:

• Each person you add: the name you type, as on the passport, and how many checks and final downloads were used. If you add family members, you give us their names, so please add only people who are happy for you to do so.
• Each check: the document, the result of each rule with the value measured on the photo (for example the head height as a share of the photo, or how even the background is), the versions of the rules and the software, and the order code printed on the sheet. These are numbers about the photo, never the photo itself. We also keep your answers to three of the questions before the check: whether glasses are worn, and whether the photo is recent and unedited. They are used only for that check and a claim about it. Your answer about a head covering, and the reason for one, stays on your device: it is used for the check and printed on your report, but never sent to us.
• Each final download: which check it came from, when, and a fingerprint of each file in it. A fingerprint (SHA256) is a short code worked out from a file. It cannot be turned back into the picture, but it lets us confirm later that a file is exactly one we made.
• If you report a rejection: the office’s notice you upload (a letter, an email or a screenshot), the reason and dates you give, and our decision. For an online application, your browser works out the fingerprint of the file you submitted and sends only that, never the photo. The notice is stored privately, outside the public website, and only our team can open it, to check the claim.

We use these records to provide the persons you paid for, to check a claim under the guarantee, and to learn which official rules cause rejections. Passport Pro records are deleted 12 months after the person’s last download, or after the person ends if there was none. A rejection notice is deleted 90 days after the claim is decided.

Signing in with Google

If you choose “Continue with Google”, Google asks your permission and then shares your name, email address, profile picture and an account identifier with us. We use them to create or find your SizePort account. Google also gives us sign in tokens, which we store only to complete and keep that sign in. We ask Google for basic profile access only. We cannot read your Gmail, Drive, contacts or anything else in your Google account.

If you already have an account with the same email address, the two are joined so you can sign in either way. You can disconnect Google in Settings, as long as you still have another way to sign in. What Google itself collects when you use its sign in screen is covered by Google’s privacy policy.

Emails we send

We only email you about things you started: a link to confirm your address, a password reset link when you ask for one, an invitation if a team admin invites you to write for the blog, messages about a payment of yours (for example the confirmation of a purchase, or a refund), and updates on a Passport Pro claim you made. If you join a waitlist, we also send you one email when that feature launches. We do not send newsletters or marketing. These emails go out through an email delivery company that handles the message on our behalf and keeps delivery records for a limited time.

Paid plans and payments

Paid plans are optional. Payments are handled by Creem, our online reseller and merchant of record. Creem takes the payment, charges tax where it applies and issues receipts. When you pay, you give your name, email address, billing country and payment details to Creem directly, on its checkout page, and Creem handles them under its own privacy policy. We never see or store your full card number.

Creem tells us what we need to give you what you paid for: your email address, your country, what you bought, the price, and the order and subscription numbers with their status, for example active, cancelled or refunded. We link that to your SizePort account so your plan works, and we use it to answer questions about billing and refunds. For a regional price we compare the billing country with the countries the price is for. When you open the payment page we note which product you chose; if you do not pay, that note is deleted after a day.

Before the payment page opens, you tick a box to ask for your purchase to start straight away. We keep the words you ticked and the time you ticked them with that note, and with the record of the purchase once you pay, because consumer law in the European Union and the United Kingdom asks us to be able to show that you agreed. We also email you the same words after you pay.

Waitlists

Some plans and tools have a “join the waitlist” button. If you press it, we keep the email address you give, or the one on your account if you are signed in, together with which feature you asked about, the page you were on and the date. We use it only to count interest and to send you one email when that feature launches, and we delete the sign up as soon as that email is sent. If we decide not to build a feature, we delete its sign ups without emailing. Either way, we never keep a sign up for more than 12 months.

A launch email has a link that removes your address from every SizePort waitlist at once. You can also write to [email protected] and we will remove it by hand.

Blog authors and the team

This section only applies to people we invite to write for the blog. Your author profile, meaning your name, photo, job title, short bio and any links you add, is public on your author page and next to your articles. Images you add to the blog media library are stored on our server so they can appear in articles, and we convert them to a web friendly format when you upload them. We also keep a history of article edits, so earlier versions can be restored. If you leave the team, an admin can switch off your access and you can ask us to remove your profile.

Cookies and browser storage

We keep this short list on purpose:

• Sign in cookies. When you sign in, we set a cookie that keeps you signed in, and a second one that remembers your session for a few minutes so pages load faster. During Google sign in, a temporary cookie protects the process from forgery. These are essential: the account cannot work without them.
• HD result counter. If you ask for an HD result without an account, we set a cookie with a random identifier so your free HD results can be counted. It lasts 13 months, only our server can read it, and it is essential for that feature.
• Your theme. Light or dark mode is remembered in your browser’s local storage. It never leaves your device.
• Small browser notes. Your browser remembers which articles it already counted during a visit and, for team members, whether the admin sidebar is collapsed. Neither is sent to anyone.
• Cloudflare. Cloudflare may set a cookie that helps tell people apart from bots. It is used for security only.
• Advertising cookies. Set by Google, explained in the next section.

You can block or delete cookies in your browser settings. If you block the sign in cookies, the tools still work, but you will not be able to stay signed in.

Advertising

SizePort is free because of advertising. The ads are served by Google AdSense. Google and its partners use cookies and similar technology to show ads, limit how often you see the same one, measure results and detect fraud. Depending on your choices and where you live, the ads may be personalised based on your earlier visits to this and other websites.

Visitors in the European Economic Area, the United Kingdom and Switzerland see a consent message before any personalised ads are shown, and can say no. Everyone can turn off personalised ads in Google’s ad settings or opt out of many ad networks at aboutads.info. Google explains how it uses information from sites like ours on this page. Ads never have access to your photos, because your photos never reach any server.

Companies that help us

We do not sell your personal information or trade it for anything. A few companies handle parts of it for us, only to provide the service, and under contract:

• our hosting provider, whose server runs the website and its database
• Cloudflare, for security and fast delivery of pages
• our email delivery company, for the emails described above
• Creem, our reseller and merchant of record, for payments (only if you buy a paid plan)
• Google, for sign in with Google (only if you use it) and for advertising
• Hugging Face and jsDelivr, which serve the files for background removal, face framing, the passport photo check and the upscaler to your browser and see only the download request

We may also share information if the law requires it, for example to answer a valid court order, or to protect people from fraud or harm. If SizePort is ever sold or merged, your information would move to the new owner under this same policy, and we would tell account holders first.

Why we use your information

Privacy laws such as the GDPR ask us to name the legal reason for each use. Ours are:

• To provide what you asked for. Creating and running your account, saving presets and history, counting the HD results you ask for, sending account emails, providing a paid plan you bought, and keeping Passport Pro records and checking a claim under its guarantee.
• Legitimate interests. Keeping the site secure and working, preventing abuse (including free HD results taken in bulk), fixing errors and counting article reads. We keep these uses small and they do not override your rights.
• Your consent. Personalised advertising where consent is required, and joining a waitlist. You can withdraw it whenever you like, and that does not affect anything done before.
• Legal obligations. When a law requires us to keep or hand over information, such as records of purchases.

How long we keep things

• Your photos: never stored, so nothing to delete.
• Account details and presets: until you delete them or your account.
• History: 90 days, then deleted automatically. You can clear it sooner.
• Sign in sessions: until you sign out, or 30 days at most.
• Email confirmation links: one hour. Password reset links: 30 minutes.
• Waitlist sign ups: until the launch email is sent or we drop the feature, and 12 months at most.
• HD counts: monthly counts for 13 months, daily network counts for 2 days, records of each HD result for 90 days. HD credits: while your account exists.
• Passport Pro records: 12 months after the person’s last download, or after the person ends if there was none. Rejection notices: 90 days after the claim is decided.
• Purchase records: while your account exists and for up to 2 years after, unless the law requires longer.
• Server logs: up to 30 days.
• Backups: we keep database backups so we can recover from accidents. They are overwritten on a rolling schedule within 30 days, so deleted data also leaves the backups within that time.

Your choices and rights

Wherever you live, you can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Most of this you can do yourself in Settings. For anything else, email [email protected] from the address on your account. We will reply within 30 days and we will not charge you.

If you are in the United Kingdom, the European Economic Area or Switzerland, you also have the right to receive your data in a portable format, to object to uses based on legitimate interests, to restrict how we use it while a question is sorted out, and to complain to a data protection authority. In the United Kingdom that is the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to fix things first, though.

If you are in India, the Digital Personal Data Protection Act, 2023 gives you the right to a summary of the personal data we process and who we share it with, the right to have it corrected, completed, updated or erased, the right to withdraw consent, and the right to nominate someone to act for you if you die or become unable to. Our grievance contact for India is [email protected]. We will acknowledge your complaint promptly and resolve it within 30 days. If you are not satisfied, you can approach the Data Protection Board of India.

If you live in California or another US state with a privacy law, you have similar rights to know, correct and delete, and the right not to be treated differently for using them. We do not sell personal information. Advertising cookies may count as “sharing” under some of those laws, and you can opt out through Google’s ad settings or the consent options described above.

Security

Every connection to SizePort is encrypted with HTTPS. Passwords are stored as one way hashes, sign in attempts are limited to slow down guessing, and only a small number of people can reach the server and database. The strongest protection is the simplest one: we never hold your images at all. No system is perfect, so if a breach ever affected your information, we would tell you and the relevant authorities as the law requires.

Children

SizePort is a general tool, not a service aimed at children. To create an account you must be at least 13 in the United States, at least 16 in the United Kingdom and the European Economic Area, and at least 18 in India, unless a parent or guardian gives consent where the law allows it. We do not knowingly track children or show them personalised ads. Parents are welcome to use the tools to make passport photos for their children, and those photos stay on the parent’s device like any other. If you believe a child has given us personal information, write to [email protected] and we will delete it.

Data stored in other countries

The companies listed above may process information in countries other than yours, including the United States. When personal information from the European Economic Area, the United Kingdom or Switzerland is transferred, we rely on the safeguards the law provides, such as the European Commission’s standard contractual clauses.

Changes to this policy

When we change how SizePort handles information, we update this page and the date at the top. If a change is significant, we will also email account holders before it takes effect.

Contact us

Questions, requests or complaints about privacy: [email protected]. For anything else, use the contact page.