Where does your photo actually go?

The short answer

Most free passport photo sites do the work on their own servers, which means a copy of your face travels to a computer you do not control. IDPhoto4You is explicit about it: before you upload, you accept that the picture is "stored on the website's server during the time of processing", and the page adds that images you have not deleted yourself are removed by a server process within six hours. 123PassportPhoto also processes uploads on its server, and its tool page carries no retention statement at all — it tells you the file must be under 10 MB and smaller than 4000 × 3000 pixels, and says nothing about what happens to it afterwards. The paid services describe flows that can only run on a server: passport-photo.online, whose footer reads "Powered by PhotoAiD®", says one of its photography experts will check your image, and a person cannot check a photograph that never left your phone.

None of that is hidden, and none of it requires you to trust a summary of it — including this one. Two checks, either of which takes about half a minute in the browser you already have, will tell you what any passport photo tool does with your file.

What "in the browser" actually means

There are only two places the work can happen.

On your machine. When you choose a file, the page can read it locally: the browser hands the image to code running on your own device, which draws it into a canvas, crops it, measures it and writes out a new file. The photo is loaded into memory on the computer in front of you and nothing about it is transmitted. This is ordinary web technology, not a trick, and it is why a well-built cropping tool can carry on working with the network switched off.

On their machine. The alternative is that the page copies the bytes of your photo across the internet to a server, which does the cropping (or the background replacement, or the face detection), stores the result, and sends back a picture for you to download. From the moment that copy lands, the file exists somewhere else. How long it stays there is a matter of the operator's policy, and the only thing you can read is what they choose to publish.

Neither design is dishonest; server-side processing is how anything involving a heavy model or a human reviewer has to work. The point is that the two are indistinguishable from the outside. Both show you your face in a neat rectangle, and the interface gives you no clue which one you used.

The thirty-second check

The Network panel

On a laptop, open the developer tools before you touch the photo: F12 or Ctrl+Shift+I on Windows, Cmd+Option+I on a Mac. Safari hides its Develop menu until you switch on the web developer settings, so Chrome, Edge or Firefox is the quicker route. Choose the Network tab, reload the page so the panel is recording from the start, and let it settle. Then select your photo.

Watch what appears at that instant. If a new row shows up as you pick the file, look at its size column: a photo from a recent phone is usually 2–8 MB, so a request of that order, timed to your click, is your photo leaving. A client-side tool produces no such row — choosing the file, cropping, measuring and exporting all happen with the log sitting still. Small requests may still appear on either kind of site for fonts, scripts and analytics; those are kilobytes, and they do not arrive in step with your file picker.

The offline test

This one needs no developer tools. Load the page completely, then cut the connection — aeroplane mode, Wi-Fi off, or the Offline setting in the developer tools' throttling menu. Now do the whole job: choose the photo, crop it, run whatever checks the tool offers, export the file. If a finished file lands in your downloads folder with the network disconnected, the work happened on your device, because there was nothing else it could have happened on. If the tool stalls or shows an error, it needs a server, and what it needs the server for is your photograph.

For the thorough version, stay offline until the export is finished, then reconnect with the Network panel open and watch for a minute. A page cannot send what it has already finished without sending, but this closes off the possibility of an upload queued while you were offline.

On a phone

Mobile browsers do not give you a network log without plugging into a computer, so the offline test is the practical one: load the page, switch on aeroplane mode, then try to produce the file. Or run the check on a laptop first and use the same site on your handset afterwards. Our guide to taking a passport photo with a phone covers the shooting side of the same job.

What the free tools publish about it

Only their own pages are quoted here. Wording changes, so re-check before relying on any of it.

Why uploading and editing travel together

The reason so many free tools are server-side is that the feature they lead with — automatic background replacement — is a model running on someone else's hardware. That feature is also the one several authorities write against. GOV.UK requires a passport photo to be "unaltered by computer software". The US State Department tells applicants not to change a photo using "computer software, phone applications or filters, or artificial intelligence", and says it checks photos for AI use. Canada publishes a zero-tolerance list naming brightness, contrast, colour and sharpness corrections, background replacement, filters and AI tools. Mexico does not accept retouched photographs, and Ireland's Passport Online upload must not be digitally enhanced.

Cropping and resizing sit on the other side of that line. The United Kingdom wants 35 × 45 mm with the head 29–34 mm from chin to crown, the United States wants 2 × 2 in with the head 25–35 mm, Canada wants 50 × 70 mm with the head 31–36 mm, and no phone photograph arrives at any of them by itself. Reaching those numbers is arithmetic, and arithmetic runs perfectly well on your own device. See head size and pixels and DPI for what they demand of a file.

What this site does, and how to prove it

The tool on this site reads your photo in the browser, crops it to any of 82 official formats, measures head height and eye line in millimetres against the authority's published range, checks sharpness, exposure, lighting, background and resolution, and writes out the file — all on your device. It does not retouch your face and it does not replace your background, which is the whole argument of the site rather than a limitation of it. Nobody can tell you a photo will be accepted; what a tool can do is show you the measurements next to the rule.

Do not take that on trust. Open the photo checker, run the Network panel test, then disconnect and run it again offline. The US crop, the UK crop, the 4 × 6 print sheet and the background check behave the same way. There is also a free iOS app, Passport Photo: Photo Maker ID; it is free to download and gives one free export before asking for Pro. The unlimited one is this website.

If you have already uploaded one

It is a photograph of your face taken against a plain wall, and you are about to send it to a government department anyway, so this is not a disaster. Three practical steps. First, if the tool offers a delete control, use it while the browser tab is still open — IDPhoto4You, for one, says self-deletion stops working once you close the browser. Second, read the retention line on the page you used and note the operator's country, because that determines whose data rules apply. Third, and more important for your application: if the file came back with the background changed or the skin smoothed, do not submit it. Take the picture again against a plain wall in the colour that authority asks for and crop it, which is what the rejection reasons keep pointing back to.

The State Department publishes its own photo tool, which crops a single 2 × 2 and does not tile a print sheet; for six on a page, the 4 × 6 printing guide and the cost comparison cover that. Whichever tool you settle on, the half-minute check is the same, and you only have to learn it once.