Privacy policy

eikoro — last updated 23 October 2026

eikoro is a browser-based passport, visa and ID photo tool. This policy explains, in plain English, what happens to your information. The short version: your photos and videos never leave your device, and we do not run accounts, advertising trackers or analytics cookies.

The short version

• Your photo is processed entirely in your browser. It is never uploaded, transmitted, stored or seen by us. There is no server-side image processing.
• We do not require an account, an email address or a login to use the editor.
• Our server sees a license key (when you validate a Pro purchase) and ordinary web-server information such as your IP address and browser type. That is all.
• Payments are handled by Creem, which acts as the merchant of record. Creem collects the information needed to take payment and issue a receipt. We never see your card details.
• We use no advertising cookies, no third-party analytics and no tracking pixels.

What stays on your device

Everything you load into eikoro — photos, camera frames, crops, background removal results, print sheets — is processed locally with WebAssembly and the browser's own APIs. The generated JPG or PDF is created in your browser and saved directly by your browser. If you close the tab, the working files are gone.

We store a small amount of data in your browser's local storage so the app works:

• whether you have unlocked Pro, and the license key you entered;
• your last-used country/spec and basic UI preferences.

You can clear this at any time through your browser settings or the "Remove license from this device" button. Clearing it does not cancel a purchase.

What our server receives

Our website is hosted on Vercel and our only server-side functions are a license check and a cookie-free page counter. We receive:

• License validation requests: the license key you enter, an internal device/instance identifier, and standard request metadata (IP address, user agent, timestamp, requested path). We use this only to check whether your purchase is valid and to prevent key abuse. We do not keep a database of license keys; Creem is the system of record.
• Page-view events: the page path and a coarse referrer, written as one line in the server log. No cookie, no fingerprint, no personal profile.
• Support emails: if you email us, we get your email address and whatever you choose to write.

Server logs are kept by our hosting provider for a short operational period (typically days to a few weeks) and are used for security, debugging and aggregate traffic counts. We do not sell or share this data for advertising.

IMPORTANT: We do not receive your photo, your face data, your passport or ID images, or any document number. They never leave your device.

Payments and Creem

Pro is a one-time purchase. Checkout is hosted by Creem (<https://creem.io>), which is the merchant of record for the sale. That means Creem is the legal seller to you: it processes the payment, issues the receipt/invoice, and calculates, collects and remits applicable sales tax, VAT and GST (including EU/UK VAT where required).

For a purchase, Creem collects information such as your name, email address, billing country and payment details. Creem's own privacy policy and buyer terms apply to that processing. We receive a confirmation that an order was paid, together with the buyer email, order amount, product and the license key. We use that to provide support, honor refunds and prevent fraud. We do not receive or store your card number.

Cookies and similar technologies

eikoro sets no advertising or analytics cookies. The app uses browser local storage (not a cookie) for the license and preferences described above. Creem's checkout may set its own cookies on Creem's domain; those are covered by Creem's policies.

Who we share data with

We share the minimum necessary with:

• Creem — payment processing, tax, receipts, refunds and license key issuance.
• Vercel — hosting and server logs.
• Our email provider — to receive and answer support messages.

We do not sell personal information. We may disclose information if required by law or to protect the service from fraud or abuse.

International transfers

Our hosting and payment providers may process data outside your country (for example in the United States and the European Union). Where required, they rely on appropriate safeguards such as standard contractual clauses. Because the editor is fully client-side, your photos are not part of any transfer.

Your rights

Depending on where you live (for example the EU/UK under GDPR, or California under the CCPA/CPRA), you may have the right to access, correct, delete, port or restrict processing of your personal data, and to object to certain processing. Because we hold so little, most requests will concern support emails or order records held by Creem. Email us and we will help; you can also contact Creem about your order data, and you have the right to complain to your local data protection authority.

Children

eikoro is not directed at children under 13 (or under 16 where local law requires), and we do not knowingly collect their data.

Changes

If this policy changes materially, we will update the date above and, where appropriate, put a notice on the site.

Contact

Questions about privacy: support@eikoro.com

eikoro does not provide legal, immigration or passport advice, and is not affiliated with any government or passport agency.