What happens to your photo
Your photo is loaded into your browser as an in-memory blob. It is decoded, cropped, resized and encoded by your browser tab. It is then offered to you as a download via a temporary object URL, which is revoked when you leave the page. At no point does the image leave your device. Our web servers never receive it, our analytics never see it, and our advertising provider never has access to it.
The technical details are in How it works and Methodology. The legal commitments are in our Privacy Policy.
What we do log
- Standard web server logs (IP, user-agent, requested URL, timestamp) for security and abuse prevention. Retained 30 days.
- Aggregated, cookieless analytics (page-level pageviews and country rollups). No cross-site tracking, no individual user profiles.
- Consent records for visitors who interact with the cookie banner, so we can prove your choice. Stored locally in your browser.
Security posture
- HTTPS-only. HSTS preloaded.
- Content-Security-Policy restricts script execution to first-party and Google AdSense origins.
- Static site delivery via a hardened CDN; no user-data database for the tool itself.
- Dependencies are pinned and audited; security advisories on direct dependencies are reviewed weekly.
Acceptable use
PhotoFileSize is provided for lawful personal and commercial use — preparing photos for documents, applications, profiles, listings and websites. You agree not to use the tool to:
- Create or edit a photo that misrepresents another person's identity on a government, financial or KYC document.
- Process images that depict child sexual abuse material, non-consensual intimate imagery, or content unlawful in your jurisdiction.
- Circumvent the site's technical protections, scrape it at a rate that degrades service for other users, or repackage it as your own product.
Because processing is local-first, we have no ability to inspect or moderate the content of files you process — but the rules above are a condition of using the site.
Reporting abuse or a vulnerability
Suspected abuse, takedown requests, or security vulnerabilities can be reported to hello@photofilesize.com. For security issues, please prefix the subject line with [Security] and allow up to 5 business days for triage.
Children
The tool is not directed at children under 13 and we do not knowingly collect personal data from them. Parents preparing a passport photo for a child should follow the relevant authority's child-photo guidelines linked from each country page.