GDPR Compliance & Data Security Statement
At **PhotoResizer AI**, data security and regulatory compliance (including the **EU General Data Protection Regulation / GDPR**, **UK GDPR**, and **California Consumer Privacy Act / CCPA**) are guaranteed by design.
---
1. Data Protection by Design and Default (GDPR Article 25) Article 25 of the GDPR requires data controllers and processors to implement technical and organizational measures ensuring data protection principles.
PhotoResizer AI fulfills this requirement through an architectural guarantee: - **No Ingestion**: User images are loaded locally using JavaScript File Reader APIs into the client browser memory (RAM). - **No Egress**: No pixel data or image binary streams are uploaded across the internet. - **Immediate Ephemeral Erasure**: As soon as you close or refresh your browser tab, all transient image memory is purged immediately by your device's operating system and browser garbage collector.
---
2. Biometric Data Protection When users utilize our **Passport Photo Maker** to crop government document photos (such as US 2x2" or Schengen 35x45mm photos), special category biometric protection applies under GDPR Article 9.
PhotoResizer AI **never sees, analyzes, stores, or trains AI models** on your biometric face photos. The facial alignment overlays are static SVG canvas guides computed locally in your browser.
---
3. User Rights Under GDPR Because PhotoResizer AI does not collect, store, or process personal data on remote servers: - **Right to Access (Art. 15)**: You hold total local access to your images. - **Right to Erasure / Be Forgotten (Art. 17)**: Simply close the browser tab to erase all local data. - **Right to Rectification (Art. 16)**: You maintain full control of your image exports.
---