Privacy Policy

1. Introduction

Welcome to PhotoResizer.us ("we", "our", or "us"). We respect your privacy and are committed to protecting it. This Privacy Policy explains our unique "client-side-only" approach to image processing and what minimal data we do collect to keep the site operational.

PhotoResizer.us is a US-focused online photo compliance and resizing tool designed specifically for U.S. visa (DS-160), U.S. passport, Green Card (DV Lottery), and other USCIS document photo requirements. By accessing or using our tools, you agree to this Privacy Policy.

2. How We Process Your Images (Client-Side Architecture)

Unlike most online tools, PhotoResizer.us does not rely on backend servers to process your images for core resizing and compression.

• Local Processing: We utilize modern HTML5 Canvas and browser-side JavaScript to crop, compress, and convert your photos.
• No Cloud Uploads: When you select an image on our website, it is processed directly by the CPU/RAM on your local machine (phone or computer).
• Absolute Security: Because the file transfer never crosses the internet, it is mathematically impossible for us, hackers, or third parties to intercept your sensitive documents.

3. U.S. Government Document Privacy

Photos processed on PhotoResizer.us often contain sensitive U.S. government document information including passport photos, visa application photos (DS-160), Green Card (DV Lottery) entry photos, and Social Security photos. We take this responsibility seriously:

• Zero biometric data collection: Facial analysis runs entirely in your browser
• No EXIF metadata harvesting: We do not read, store, or transmit photo metadata
• No government affiliation: PhotoResizer.us is an independent tool and is not affiliated with, endorsed by, or connected to the U.S. Department of State, USCIS, or any federal/state government agency

4. Paid Services & Data Handling

When you purchase credits for our premium photo compliance service or Expert Human Review:

• Payment Processing: Payments are handled by Razorpay (our payment processor). We do not store your credit card number, CVV, or bank details. Razorpay is PCI-DSS Level 1 compliant.
• Transaction Records: We store only your transaction ID, purchase amount, and purchased credit count for order fulfillment purposes.
• Expert Review Service: If you opt for Expert Human Review ($7.99), your photo is sent to our review team via encrypted channel. The photo is permanently deleted within 48 hours of review completion.

5. What Data Do We Collect?

While we absolutely do not collect or see your images (except during paid Expert Review), we do capture basic, anonymized analytics to improve our website's performance and fix bugs.

A. Analytics Data

We use tools like Google Analytics and Microsoft Clarity to understand how visitors use our site. This data includes:

• General location (Country/City level)
• Device type (Mobile, Desktop, Tablet)
• Browser type (Chrome, Safari, Firefox)
• Pages visited and tools used
• Anonymous session recordings (to identify UI bottlenecks)

B. Cookies

We use minimal essential cookies to save your site preferences (such as Light/Dark mode) and standard analytics cookies to track basic traffic metrics. You can disable cookies in your browser settings at any time without affecting the core functionality of the image resizer. See our Cookie Policy for details.

6. Third-Party Services

We utilize the following third-party infrastructure:

• Vercel: Our website is hosted on Vercel (US-based). They may log standard technical requesting data (IP addresses) for security and anti-DDoS purposes.
• Google Analytics: For aggregate traffic measurement.
• Microsoft Clarity: For behavioral analytics and heatmaps. All text inputs and personal data are masked by default.
• Razorpay: For payment processing of premium services. Razorpay processes payments in compliance with PCI-DSS Level 1 standards.
• Trustpilot: For user reviews and ratings. Trustpilot's own privacy policy applies to reviews submitted on their platform.

7. CCPA Compliance (California Consumer Privacy Act)

Because we do not collect Personally Identifiable Information (PII) or host user-generated content, we inherently comply with the CCPA. We do not sell personal information to third parties. If you wish to opt-out of aggregate analytics tracking, we recommend using browser extensions like uBlock Origin or the Google Analytics Opt-out Add-on.

8. GDPR Compliance (European Users)

Although PhotoResizer.us is a US-focused service, we comply with the EU General Data Protection Regulation (GDPR) for any European users who access our site. Because we do not process personal data on our servers, we fall largely outside the scope of traditional data processors. See our GDPR Compliance page for full details.

9. COPPA Compliance (Children's Privacy)

10. Data Security

We employ reasonable security measures to protect any data we do collect:

• HTTPS/TLS encryption on all connections
• Content Security Policy (CSP) headers to prevent XSS attacks
• Strict CORS policies on API endpoints
• Regular security audits of our codebase
• No storage of sensitive credentials or payment data on our servers

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. Continued use of PhotoResizer.us after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, our security practices, or wish to exercise your privacy rights, please contact us at:
Email: photoresizer.us@gmail.com
General Support: Contact Page