Privacy Policy: SnapVisaPhoto

Last updated: 30 October 2026

SnapVisaPhoto (“we”) is run by Skuld Luo as an individual, based in Guiyang, Guizhou, China. The website is snapvisaphoto.com. Contact: snapvisaphoto@mail.grokbot.com.

We are not a government agency and we are not affiliated with any government.

What we do

We offer a photo compliance check and cropping/layout to official specs. For US passport and Schengen (Germany) visa photos, we only crop and scale your photo; we never change its content. For UK digital photos we do not crop at all: you receive your original file with only EXIF/GPS metadata removed. We do not use generative AI, and we do not edit faces or backgrounds.

Data we process

• Photos you provide. We process the photo you choose (as a JPEG copy made by your browser), the crop rectangle, the selected spec/mode, a random order ID, and the payment status.
  • Before payment, only in your browser. Face and background checks and the watermarked preview run only in your browser. Facial landmarks never leave your device. Before you press Pay, nothing about your photo is sent to us.
  • When you press Pay, the photo is uploaded once to temporary storage on Cloudflare R2, with EXIF/GPS metadata removed:
    • US passport and Schengen visa: your browser re-encodes the photo to JPEG (at most 3000 px on the long side).
    • UK digital passport: UK digital photos are delivered as your original file with EXIF/GPS metadata removed losslessly; only if the file is not a JPEG or is larger than 10 MB does your browser convert it to JPEG at the same pixel size (quality reduced in steps from 95% until it is under 10 MB), and files under 50 KB are flagged so you can retake them.
  • After payment, the final files (for example a 2x2 or 35x45 mm digital JPEG, or a 4x6 print sheet for US/Schengen) are generated on request by Cloudflare Images. This step only crops, resizes, and places the photo. For UK digital, you receive your original file without cropping. The files are streamed to you and not stored.
• Retention.
  • Every uploaded photo, paid or unpaid, is deleted within approximately 24 hours of upload.
  • You can delete your photo immediately with the “Delete my photo now” button.
  • If you receive a refund, your photo is deleted as soon as we receive the refund notification from Creem.
  • Download links expire after 15 minutes. You can request new links while your order exists, that is, until the photo is deleted (about 24 hours after upload).
  • You must download your files within 24 hours. After that they cannot be recovered.
  • We keep no order database. Order status is stored only alongside the temporary photo and is deleted with it. Creem keeps payment records as required by law.
• Payment data. Creem acts as the Merchant of Record for purchases (https://docs.creem.io/merchant-of-record/what-is). Creem processes your payment and billing data as the seller of record. We do not receive your full card details. Creem handles that data under its own privacy policy (https://www.creem.io/privacy) and terms (https://www.creem.io/terms).
• Contact data. If you email us, we use your email address and messages only to answer you. We keep them for 12 months and then delete them.
• Cookies: none. The face model runs from files hosted on our own domain, not a third-party CDN. Analytics: we currently use no analytics or tracking tools. If we add any, we will update this policy before they go live.

Sub-processors

• Cloudflare: hosting, temporary R2 storage, and Cloudflare Images (crop/resize/layout).
• Creem: payments, as Merchant of Record.

How we use data

We use your data only to provide the service, process payments, and answer support requests. We do not sell personal data. Your photos are never used as training data for AI or machine learning, whether by us or by any third party. We do not use your photos for advertising profiles, and we never retouch them.

Your rights

You can ask us to tell you what personal data we hold about you, to correct it, or to delete it. Email snapvisaphoto@mail.grokbot.com. Depending on where you live, laws such as the EU GDPR, the UK GDPR, or the California Consumer Privacy Act (CCPA) may give you further rights, for example to object to or restrict processing, to receive your data in a portable form, or to complain to your local data protection authority. We will not treat you differently for using any of these rights.

Our setup limits what we can return. We have no user accounts and no order database, and we delete photos about 24 hours after upload. So after that point we usually hold nothing about you except emails you have sent us. Creem holds payment records, so please contact Creem for those.

We do not sell or share your personal information for cross-context behavioural advertising, as the CCPA defines those terms. We set no cookies and do not track you across sites.

Children

The service is meant for adults. A parent or legal guardian may upload a photo of their child to prepare a document photo for that child. By doing so they confirm that they have the authority to do so. Children’s photos are handled exactly like any other photo: processed in the browser before payment, deleted about 24 hours after upload, never sold, and never used to train models. Children should not use the service or contact us on their own. If you believe a child has sent us personal data, email us and we will delete it.

Changes

We will post updates to this policy on this page and change the “Last updated” date.