Last updated: September 2026.

The short version: your photos never leave your device. BgRemove was designed so that the sensitive thing — your image — physically cannot be collected, because it is never transmitted. The longer version below covers the data the site itself touches.

Your photos are processed locally

The remover is JavaScript and WebAssembly running in your browser tab. When you drop a file in, the browser reads it from your disk, decodes it, masks it and re-encodes it — all locally. You can verify this yourself: load the page, disconnect from the internet, and the tool keeps working. There is no upload endpoint in the site’s code, no image queue, no processing server.

The optional AI mode works the same way: on first use your browser downloads two files — the U²-Netp model (~4.6 MB) and the onnxruntime-web runtime (~12.7 MB) — from this same site, not a third-party CDN. Once fetched, inference runs on your device and works offline. Neither the model nor the runtime ever receives your image over a network.

This design means we couldn’t see, store or leak your photos even if we wanted to — which matters when the files are passport photos, ID documents or anything else personal.

Server logs

Everything the remover does happens before any network is involved, so our logs physically cannot contain image data — no file names, no pixels, no results. What the hosting does see is ordinary web traffic: the site is served through Cloudflare, which records standard request metadata (IP address, user agent, timestamp, which URL was fetched) to deliver pages, resist abuse and count aggregate visitors.

One detail is specific to BgRemove: the first time you press the AI button, your browser downloads the model and WebAssembly runtime files from this site. Those fetches appear in CDN logs like any other static asset download — a file path and a timestamp, nothing about the photo you are editing, which never leaves your device anyway.

Advertising and cookies

• This site may carry ads served by third-party networks such as Google AdSense. When an ad loads, the network can set or read cookies to count impressions and — where regulations allow — personalize what it shows you.
• You control that side entirely: opt out of personalized ads in Google’s Ads Settings, or block third-party cookies in your browser.
• Blocking ads changes nothing for the tool — the remover runs identically with ads on or off, and no advertising code ever touches your files.

Analytics

We may use privacy-respecting aggregate analytics (no cross-site tracking, no personal profiles) to see which pages are used. File names, image contents and removal results are never included — that data never reaches the network at all.

Usage counts: this site sends a small cookieless ping (page address, referring site, country reported by the CDN, time on page) so we can see which tools get used. We also count which features you use (such as downloading a result image) — never what you upload; your images never reach us at all. No cookies, no device identifier, nothing you type — and it’s the only ping we make.

Your choices

• Reading the site works with JavaScript disabled; only the remover needs it.
• The AI model is optional — color mode removes backgrounds with zero download.
• Cookie and ad personalization preferences are controlled by your browser settings.
• Questions about this policy: hello@photopassport.online.

Changes

If this policy changes, the updated version will be posted on this page with a new “last updated” date.