Privacy Policy

Passly — Passport Photo Studio · Last updated 15 October 2026

1. Who we are

Passly ("the extension", "we", "us") is a browser extension for Chrome that helps you crop, check and export passport, visa and ID photos to published official requirements. For the purposes of data protection law, the data controller is Yang Shouxu, and you can reach us at support@passlyphoto.com or at the postal address in section 13.

2. What we do with your photos

When you select a photo, it is read directly from your device into the extension's page. All processing — cropping, rotating, color adjustment, background analysis, and export — happens locally in your browser using the standard Canvas API.

• Your photos are never uploaded to any server.
• Your photos are never transmitted over the internet.
• Your photos are never stored by the extension after you close the tab.
• We have no technical means of accessing your photos.

This is true whether you are using the free features or have unlocked export. The sign-in and payment checks described below never involve your photo.

3. What is stored on your device

The extension saves a small set of preferences so it works the way you left it. These are stored locally on your device using the browser's extension storage (chrome.storage.local):

• Your selected interface language
• Your light or dark theme preference
• The last document specification you chose
• Your preferred export quality setting
• Whether guides are shown
• If you have signed in: the email address you signed in with, so the extension can show you which account your purchase is attached to (see section 4)
• If you have signed in: a sign-in token and, once you have bought, a signed entitlement token — so you are not asked to sign in every time and can export while offline
• A random installation id, which lets us tell one device from another

The email address and the tokens are the only items here that are about you rather than about your settings, and they stay on your device. They are sent to our license server when you sign in or check your purchase, and nowhere else. Signing out removes them immediately; uninstalling the extension removes all of it.

4. What we collect when you buy

Checking a photo is free and requires no account and no personal data. Only if you choose to buy does anything about you reach us.

You sign in with Google. Google then tells us three things: your email address, whether that address is verified, and a stable account identifier for it. We key our records on that identifier rather than on the address, because an address can be changed or reassigned while the identifier cannot. We do not receive your name, your profile picture, your contacts, or your Google password.

On our license server we store:

• Google's account identifier for you;
• a one-way hash (SHA-256) of your email address, never the address itself;
• your purchase status (active, refunded or cancelled) and the dates involved;
• the payment provider's order reference;
• a random installation id for each device you use, so that one account being used on many machines can be noticed.

One exception, and it lasts minutes: while a sign-in is in progress the email address is held on the server in readable form, so the sign-in can complete. It is deleted as soon as the sign-in finishes, or automatically within 5 minutes if it never does. After that we hold only the hash, and use it to recognise the same address at your next sign-in.

There is no license key. Nothing is emailed to you and there is nothing to copy down or lose — the purchase is attached to your Google account, so signing in on another computer unlocks export there too.

We never receive or store your card number, your name, or your billing address. Those are collected and held by our payment provider (see section 7).

Our basis for holding this information is that it is necessary to perform our contract with you — delivering the purchase you paid for and keeping it working — and, for the purchase record itself, to meet our legal obligations to keep sales records.

5. What we do not do

• We do not collect your photos or any image data — ever.
• We do not use analytics, tracking, or telemetry of any kind.
• We do not use cookies.
• We do not sell, rent, or share your information for advertising.
• We do not use remote code. All code that runs is contained in the installed package.
• We do not access your browsing history, tabs, bookmarks, or any website content.
• We do not ask for your name, address, phone number, or any government identifier.
• We do not read anything from your Google account beyond the email address and account identifier described in section 4.

6. Permissions we request and why

• storage — to remember the preferences and tokens listed in section 3.
• identity — to open Google's sign-in page in a window and receive the result. It runs only when you click to sign in, and it gives us no access to your Google account beyond that sign-in result.
• Network access to our license server (optional) — requested only at the moment you first sign in. The extension is installed with no network permission at all; the prompt appears only when you use the paid features, and the extension makes no network request until then. What is sent is the sign-in code, and afterwards the token that proves which account is asking.

The extension has no ability to read or modify the pages you visit.

7. Payment provider and other third parties

Payments are processed by Waffo (Waffo Hong Kong Limited), who act as the seller of record. This means Waffo are the legal seller to you and handle any applicable sales tax, VAT or GST in your country. Your card details are entered on Waffo's hosted checkout page and are governed by Waffo's own privacy policy, available from their website at waffo.ai. Waffo tell us the email address you paid with and an order reference, which is how the purchase is attached to your account. We never see or store your card number.

Sign-in is provided by Google. When you sign in, Google handles that request under Google's own privacy policy, and tells us the email address, whether it is verified, and the account identifier described in section 4.

We do not share your information with any other third party. Our licence server is hosted in Singapore, so the record described in section 4 is stored outside the country you live in. It is transferred there for one reason only — that is where the service that keeps your purchase working runs — and it is not transferred anywhere else. Any transfer made by our payment provider or by Google is governed by their own safeguards.

8. Keeping and deleting your information

What is on your device is removed when you sign out, uninstall the extension, or clear its storage.

On our license server, four clocks apply:

• A sign-in in progress — 5 minutes. The email address is held in readable form only while the sign-in completes, then it is deleted.
• An unpaid checkout — 7 days. If you open a checkout page and do not pay, our record of it is discarded after a week.
• Your sign-in on a device — 180 days. A token that keeps that browser signed in so you are not asked every time. Signing out, or uninstalling, ends it.
• The purchase record — seven years. Google's account identifier, the hash of your email address, the order reference, and the purchase dates. We use that period because it matches the record-keeping obligations that apply to the sale of digital goods, so that we can keep your purchase working, process refunds, and respond to tax or accounting queries. After seven years the record is deleted.

You can ask us to delete your record earlier (see section 9) — note that deleting it will end your access to export, because we can no longer confirm that the purchase was made.

9. Your rights

Depending on where you live, you may have the right to access, correct, or delete the information we hold about you, to object to or restrict its processing, and to ask us to explain how it is used. Because we hold your address only as a hash, we may ask you to tell us the email address you signed in with, so that we can find the matching record.

To exercise any of these rights, contact us at support@passlyphoto.com. If you are in the EU or UK, you also have the right to complain to your local data protection authority.

10. Limited Use disclosure

Passly's use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not use or transfer user data for purposes unrelated to the extension's single stated purpose, and we do not use or transfer user data to determine creditworthiness or for lending purposes.

11. Children's privacy

The extension is not directed at children. We do not knowingly collect information from anyone under 13 (or the minimum age in your country), and we ask that children do not make a purchase.

12. Changes to this policy

If this policy changes, the "last updated" date above will change with it. Material changes will be noted in the extension's release notes.

13. Contact

Questions about this policy, or requests about your data:

• Controller: Yang Shouxu
• Email: support@passlyphoto.com
• Postal address: Zone 1, Living Area, Qishan Campus, Fuzhou University, Minhou County, Fuzhou, Fujian, China