Privacy policy

Last updated: 10 August 2026

Your photos are yours. Images you upload are used only to create your compliant photo and are processed automatically. Uploads are deleted within 7 days; the finished photo you purchased is kept for up to 30 days so you can re-download it, then deleted. We do not sell your data and we do not use your photos to train any model.

1. Who is responsible

The controller responsible for processing your data under the General Data Protection Regulation (GDPR) is:

Sven Perlberg
Lydia-Rabinowitsch-Straße 8
10557 Berlin, Germany
Email: help@onepassphoto.com

2. What we process and why

  • Photos you upload, to create and check your compliant document photo. Processing is automated; no one views your photo unless you contact us for support, or unless you ordered prints, in which case we look at the print file before it goes to the printer so a faulty print is never produced. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
  • Order and payment data (such as your name, email, and payment confirmation), to process your purchase, send your receipt, and meet accounting and tax duties. Legal basis: Art. 6(1)(b) and Art. 6(1)(c) GDPR.
  • Shipping details (your name and postal address), only if you order printed photos. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
  • Basic technical data (such as IP address, browser, and device type), to operate the site securely. Legal basis: our legitimate interest in a working, secure service (Art. 6(1)(f) GDPR).
  • Usage statistics, only if you allow analytics cookies. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

3. Your photos

Uploaded images and the photos we generate are stored only as long as needed to deliver your result and are deleted automatically: uploads within 7 days, and the finished photo you purchased within 30 days. We do not sell your photos, share them for advertising, or use them to train artificial intelligence or any other model.

4. Payments

Payments are handled by Stripe. We do not store your full card details. Stripe processes your payment data to complete the transaction and may transfer data to the United States under the appropriate safeguards (EU Standard Contractual Clauses). See Stripe's privacy policy at stripe.com/privacy.

5. Printed photos

If you order prints, the print file and your delivery details are passed to our printing and fulfilment partner, Prodigi, solely to produce and ship your order. What they receive is your name, your postal address, and your email address if you gave one. If you only buy the digital photo, nothing is sent to Prodigi.

6. Emails we send

Your receipt, your download link, and any order updates are sent through our email provider, Brevo, which processes your email address to deliver those messages. These are transactional emails about your own order. We do not add you to a marketing list.

7. Service providers and where data is processed

We use the following providers to run the service. Each processes data only on our instructions and only for the purpose named:

  • Hetzner Online GmbH (Germany): hosts the photo engine that processes your upload and stores your order.
  • Cloudflare: serves this website.
  • Stripe: processes your payment.
  • Prodigi: prints and ships your photos, only if you order prints.
  • Brevo: sends your receipt and download email.
  • Google: provides Google Analytics, and only if you allow analytics cookies.

8. Cookies and analytics

The cookies needed to run the site and your checkout are always active. Beyond those, we use Google Analytics to understand how the site is used, and it is loaded only after you allow analytics cookies in the consent banner. Until you allow it, no analytics request is sent and no analytics cookie is set. We do not use advertising cookies or cross-site tracking, and the advertising signals in Google Consent Mode stay switched off whatever you choose. You can change or withdraw your choice at any time through the cookie preferences on this site.

9. How long we keep data

Uploads are deleted within 7 days and finished photos within 30 days. Order and invoice records are kept for as long as required by German commercial and tax law.

10. Your rights

You have the right to access, correct, delete, restrict, or port your personal data, and to object to processing. Where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, email help@onepassphoto.com.

You also have the right to lodge a complaint with a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

11. International users

The service is available to users outside the European Union. Where data is transferred to processors outside the EU, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

12. Changes and contact

We may update this policy as the service evolves. For any question about your data, email help@onepassphoto.com.