Privacy and cookies

In short

• The passport size resizer and the print template work in your browser: the photo is not uploaded to any server.
• In the tool on the home page and in the checked photo, the photo is sent encrypted to our photo analysis service to fix and check it.
• If you buy, we keep your prepared photo for 24 hours (Standard plan) or 7 days (Premium plan), after which it is deleted automatically.
• You don’t need to create an account. We don’t sell your data.
• We only use analytics if you accept it.

Who is responsible

Foto Carnet Ya (fotocarnetya.com) is a private service run by the same team as ApprovaVisa, with which it shares the photo analysis service, customer support and order management. For any question about your data, email us at support@approvavisa.com.

What data we process and why

• Your photo. To crop it, give it a white background, check that it meets the document’s requirements and, if you buy it, prepare the final files. In the home-page tool and in the checked photo it is sent to our analysis service as soon as you upload it; before you pay we only show you a watermarked preview.
• Your email and payment details. Dodo Payments collects them when you pay. We receive your email, the amount, the currency and the payment identifier to send you the photo, give you access to the download, answer your questions and process refunds. We never see or store your card details.
• Order details. The chosen document, the plan, the date and an order code (starting with “fcy_”), to deliver your purchase, handle refunds and meet accounting obligations.
• Premium plan. A person on our team receives your photo and your email to review it within 3 hours and email you if anything needs changing.
• Technical data. To protect the service (for example, to limit the number of attempts) we temporarily process your IP address. Error logs don’t include your photo or your email.

The basis for this processing is providing the service you request and, for analytics, your consent. What accounting law requires is kept to meet that legal obligation.

How long we keep your data

• Photo of a paid order: 24 hours on the Standard plan and 7 days on Premium. After that it is deleted automatically from our storage. You can ask us to delete it sooner.
• Copy in your browser: while you pay, we keep the photo in your own browser so we can prepare it when you come back from payment. It is deleted as soon as the files are ready.
• Order and payment details: for as long as needed to handle the order, refunds and claims, and for the periods required by accounting and tax rules. They don’t contain your photo.
• Emails: those you send us and those we send you are kept in our support inbox for as long as needed to help you.

Who we share data with

Only with the providers we need to run the service, each for its own purpose:

• ApprovaVisa photo analysis service: fixes and checks the photo.
• Dodo Payments: processes the payment and issues the invoice as merchant of record.
• Cloudflare R2: stores the photos of paid orders and the order records.
• Resend: sends the emails with your photo.
• Google Analytics: only if you accept analytics (see below).
• Our hosting provider: serves the website.

Some of these providers may process data outside the European Economic Area, with the safeguards required by the GDPR.

Cookies and analytics

Without your permission we don’t use analytics or advertising cookies. For the site to work we store in your browser your choice about analytics (for up to 180 days) and, while you pay, the photo and your order code. These are not tracking cookies.

If you accept analytics, we use Google Analytics 4 to count visits and see which steps of the tool work best. It may process device and browser data, your IP address and an identifier stored in cookies (_ga). We have advertising signals and ad personalisation turned off. The events we send never include your photo, your email, the order code or addresses with parameters.

You can change your mind at any time under “Cookie preferences” at the bottom of every page. If you reject it, we stop loading Google Analytics and delete its cookies; the tool works just the same. More information in Google’s privacy policy.

Your rights

You can ask us for access to your data, to correct or delete it, to restrict or object to its processing and for its portability, and you can withdraw your consent to analytics at any time. Email us at support@approvavisa.com with your order number if you have one. If you think we haven’t handled your request properly, you can complain to the Spanish Data Protection Agency (AEPD).

See also the terms of service and the refund policy.