Privacy Policy

1. Who we are

PassportSnapper is operated by Mitchell Drive (“PassportSnapper,” “we,” “us,” or “our”). PassportSnapper helps users check and prepare a U.S. passport-photo output from an original photo. We are not the U.S. Department of State and do not make the final decision on photo acceptance.

Privacy contact: hello@mitchelldrive.com

2. Information we collect

• Photos and photo-related information: the original image you upload or capture, prepared and preview images, your selected output, and photo-validation information such as file, framing, lighting, background, and face-detection signals.
• Contact and delivery information: your email address, magic-link delivery, and access metadata.
• Payment information: payment status and the payment-provider session reference. We do not receive or store your full payment-card number.
• Website, security, and diagnostic information: consent and privacy-request records, the CSRF cookie, rate-limit records, internal operational events, and limited diagnostic data. If you allow analytics, Google Analytics receives limited site and funnel data, but not photo IDs, email addresses, payment details, raw validation results, landmarks, image measurements, or photo files.

3. How we use information

We use information to:

• check and prepare the photo output you select;
• process payment and deliver a paid file;
• provide customer support, prevent fraud, and secure the service;
• understand aggregate site and conversion activity; and
• comply with applicable legal obligations.

4. Service providers

We use service providers to operate PassportSnapper. Depending on the features you use and the environment in which the service is running, they may host the service, store information, process payments, deliver email, monitor errors, or—only with your consent—measure non-identifying site and funnel activity. Each provider handles information under its own applicable terms, privacy notice, and data-processing terms, as well as its agreement with us.

We do not sell personal information or share it for cross-context behavioral advertising. We keep Google Analytics advertising features and data sharing disabled.

5. Photo storage and retention

Uploaded originals, prepared files, and preview images are stored in private application storage rather than published as public image URLs. Access to paid files is controlled through the service's download flow.

Paid files are available for up to 90 days after processing. We automatically delete photo files and associated validation, preview, magic-link, and photo-linked event data after that period. We retain the minimum transaction ledger needed for tax, accounting, fraud prevention, refunds, and dispute handling for up to seven years; those records do not include your photo or validation data. Verified consent and privacy-request audit records are retained for up to three years.

6. Analytics and cookies

We use a necessary security cookie to help protect requests from forgery. Analytics is optional: Google Analytics loads only after you choose to accept analytics, and you can change that choice at any time through the Privacy preferences control. We configure analytics events to avoid sending photo IDs, email addresses, payment details, raw validation results, or image measurements.

7. Your requests

To ask about access, correction, deletion, or another privacy request, contact us at hello@mitchelldrive.com. Please email from the address used with PassportSnapper and include enough information for us to locate the request. We may verify identity and, where allowed, ask for additional information. A verified deletion request immediately revokes download access and is completed within 30 days unless an applicable law requires or allows us to retain limited information. Authorized agents may submit a request with proof of authority. We will not discriminate against you for making a privacy request; rights and exceptions vary by state.

8. Children

PassportSnapper is not directed to children under 13. A parent or guardian must submit a child's photo and may request deletion using the contact above.

9. Changes to this policy

We may update this policy when our practices or legal obligations change. We will post the revised version here and update the effective date above.