Last updated: October 2026.

The short version: your photos never leave your device. BgRemove was designed so that the sensitive thing — your image — physically cannot be collected, because it is never transmitted. The longer version below covers the data the site itself touches.

Your photos are processed locally

The remover is JavaScript and WebAssembly running in your browser tab. When you drop a file in, the browser reads it from your disk, decodes it, masks it and re-encodes it — all locally. You can verify this yourself: load the page, disconnect from the internet, and the tool keeps working. There is no upload endpoint in the site’s code, no image queue, no processing server.

The optional AI mode works the same way: on first use your browser downloads two files — the U²-Netp model (~4.6 MB) and the onnxruntime-web runtime (~12.7 MB) — from this same site, not a third-party CDN. Once fetched, inference runs on your device and works offline. Neither the model nor the runtime ever receives your image over a network.

This design means we couldn’t see, store or leak your photos even if we wanted to — which matters when the files are passport photos, ID documents or anything else personal.

Server logs

Everything the remover does happens before any network is involved, so our logs physically cannot contain image data — no file names, no pixels, no results. What the hosting does see is ordinary web traffic: the site is served through Cloudflare, which records standard request metadata (IP address, user agent, timestamp, which URL was fetched) to deliver pages, resist abuse and count aggregate visitors.

One detail is specific to BgRemove: the first time you press the AI button, your browser downloads the model and WebAssembly runtime files from this site. Those fetches appear in CDN logs like any other static asset download — a file path and a timestamp, nothing about the photo you are editing, which never leaves your device anyway.

Advertising and cookies

• This site may carry ads served by third-party networks such as Google AdSense. When an ad loads, the network can set or read cookies to count impressions and — where regulations allow — personalize what it shows you.
• You control that side entirely: opt out of personalized ads in Google’s Ads Settings, or block third-party cookies in your browser.
• Blocking ads changes nothing for the tool — the remover runs identically with ads on or off, and no advertising code ever touches your files.

Analytics

We may use privacy-respecting aggregate analytics (no cross-site tracking, no personal profiles) to see which pages are used. File names, image contents and removal results are never included — that data never reaches the network at all.

Usage counts: What travels for usage counts is one cookieless ping per page view — page address, the domain of the referring site, the page language and any campaign tag in the link — and a second one when you leave, with the time the page was open.

Our server adds the time, Cloudflare’s country and network-provider readings, a device type (phone, tablet, desktop or bot) inferred from the browser’s user-agent, a rough source category and a bot-filter label. Daily visitors are counted with a code hashed from your IP address, browser, the date and a secret value; it resets each day and the IP address is not stored. No cookies, and nothing about your images — no pixels, file names or sizes — is in it. The remover also sends three named counts and nothing else about the job: remove when a background removal finishes, download when you save the result, and error:process when processing fails. Your images never reach us at all.

Your choices

• Reading the site works with JavaScript disabled; only the remover needs it.
• The AI model is optional — color mode removes backgrounds with zero download.
• Cookie and ad personalization preferences are controlled by your browser settings.
• Questions about this policy: hello@photopassport.online.

Changes

Any change to this policy will appear on this page, with the date at the top moved forward.