Version 2026-10-21.1 · Current policy in English
Who is responsible
Passlume is operated by Darbaz AS, organisation 931122851, Nordbyringen 22C, 2069 Jessheim, Norway. We are the controller of your personal data. Contact post@bilforalle.no for privacy questions and requests.
Your photo stays private
Photo checks, face-position measurements and edits run on your device. We do not identify you, create an identity database, train models on your photographs or sell them. For standard orders, only the prepared files are uploaded at checkout to private Cloudflare storage for delivery. File access ends 24 hours after checkout begins. Files are scheduled for deletion within the following hour. You can delete them earlier from your private order page or account. Account access does not extend file storage.
Optional expert photo review
When you purchase expert review, we also upload a full-frame copy of your source photo for authorised staff to compare with your prepared photo. Large source files may be resized and compressed for review; original-file application routes preserve the original JPEG. Review files remain private for up to 7 days while awaiting review or a replacement photo. Approval starts a new 24-hour download period. Files are scheduled for deletion within the following hour; you may delete them earlier from your order or account. Replacement submissions restart the review storage period. We do not train models on your photos or send them as email attachments.
Accounts and order emails
Guest checkout is available. If you choose to sign in, we verify your email using a single-use link valid for 15 minutes. An essential, HttpOnly session cookie keeps you signed in for up to 30 days. We store your email, order details and delivery consent to fulfil your purchase and recover access. We send requested sign-in links and order confirmations. An unfinished-checkout reminder is sent only if you separately request one. No marketing subscription is created.
Support requests
Our contact form stores your name, email address, message, optional order or ticket reference, and support correspondence so we can answer your request. We issue a ticket number and email confirmation; only authorised staff can view and reply to tickets. Do not submit photos, identity documents, passwords or card details. Support records are removed after 180 days without activity. Support relies on providing the assistance you request and our legitimate interest in resolving issues and preventing abuse.
Service operations
Authorised staff can see order, download-request and support history to resolve delivery problems. We may record necessary internal support notes and abuse-prevention flags for up to one year after their last update. Administrative changes are logged for up to 180 days. This supports our legitimate interest in reliable customer support, service security and accountability. Standard-order photos and private download credentials are not exposed in the operations console. If you purchase expert review, authorised reviewers can view your source review copy and draft photo through protected, authenticated endpoints solely to perform your requested review.
Why we use information
Preparing and delivering your purchase and providing requested account access rely on performance of a contract or steps you request before a contract. Security and abuse prevention rely on our legitimate interest in protecting the service. Required accounting records rely on legal obligations. Optional reminder emails rely on your separate consent; withdraw it by contacting us or deleting your account.
Providers and transfers
Cloudflare hosts the site, database and private files. Stripe processes payments; we do not receive full card numbers. Resend processes your email address and transactional message content. Photos are not attached to emails. If you choose Google sign-in, Google authenticates you and shares your verified email address and an account identifier with us. We do not request access to your Gmail, contacts or Drive. Providers may process information outside the EEA using applicable contractual and transfer safeguards. Contact us for information about the safeguards applicable to your data.
How long information stays
Standard prepared files: 24-hour access, deletion scheduled within the next hour. Sign-in tokens: 15 minutes. Sessions: 30 days. Email queue records: up to seven days; message bodies are cleared after provider acceptance or expiry. Order metadata and delivery consent: up to 90 days in this application, separately from financial records retained as required by law. Accounts are removed after one year without sign-in, or on request. Deleting an account signs out all its sessions; it does not erase records we must retain or revoke an existing private order link. Delete stored photos separately before closing your account.
Your choices and rights
You can ask for access, correction, deletion, restriction and portability, or object to eligible processing. Some rights depend on the circumstances and applicable law. Contact post@bilforalle.no; do not attach identity documents unless we explain a necessary, secure verification process. You may complain to Datatilsynet (datatilsynet.no) or your local data protection authority. Language preferences are stored on your device. We do not use advertising trackers. Hosting and security services process connection metadata for operation and abuse prevention.
Optional website analytics
Only with your permission, Google Analytics measures visits, photo-flow steps, technical failures, purchases and download actions. It uses a pseudonymous cookie identifier and connection/device information. We do not send photographs, facial measurements, email addresses, filenames or private access links to Analytics. Purchase events include an order reference, product, currency and value. Advertising features and automatic form/link tracking are disabled. We use consent as the legal basis. Your choice is saved for up to 180 days; analytics cookies also expire after 180 days. Change or withdraw consent through Cookie preferences in the footer. Declining does not affect photo checks or purchases. Google may process analytics data outside the EEA under its applicable data-processing and transfer terms.