Privacy Policy
How RestorePhoto handles photos, accounts, and processing providers.
Optional Microsoft Clarity
With your permission, we use Microsoft Clarity for heatmaps and masked session recordings to understand how visitors use our public pages. Clarity may process page interactions, browser/device information and network information including your IP address, and use analytics cookies. Advertising storage is denied. Microsoft processes this data under its Privacy Statement.
Clarity does not load until you accept optional cookies or enable Clarity in Cookie settings. It is disabled on account, sign-in and contact pages, on pages with query parameters, and when our account check identifies a signed-in visitor or cannot confirm anonymous access. Page content is masked before Clarity loads; recording stops when a photo file is selected. We do not send account identifiers or custom photo data to Clarity.
Use Cookie settings at the bottom of the page to reject or withdraw permission. Your choice is saved in this browser's local storage. Withdrawal stops further recording on this site; it does not erase previously collected data. Global Privacy Control prevents Clarity from starting. Essential sign-in cookies and our separate cookie-free Plausible measurement are not controlled by this optional choice.
Optional Google Analytics
If you accept optional cookies or enable Visits and tool events in Cookie settings, we use Google Analytics cookies to measure public page visits and structured actions such as selecting a file, submitting a restoration, viewing a result or starting checkout. The Cookie settings panel also lets you choose visits/tool measurement and Clarity separately. We send only allowlisted event details, public page paths, safe campaign tags, referring website domains and basic device information, not photos, filenames, account identifiers, email addresses, private download links or raw error messages. Network requests expose your IP address to Google.
Advertising storage, advertising personalization and Google signals are disabled. Use Cookie settings in the footer to withdraw permission. Withdrawal stops future events, not previously collected data. Global Privacy Control prevents activation. Read Google's Privacy Policy.
Optional tool measurement with Plausible
Cookie-free public page measurement is separate from optional tool events. A previous Google Analytics choice does not authorize Plausible tool events; the new choice starts off until you explicitly select it. If you enable “Visits and tool events” in Cookie settings, we also send structured restoration events to Plausible at plausible.shipsolo.io: file selection, successful upload preparation, submission, a usable result, a manual result-link action, final errors and confirmed cancellation. Result-link actions do not prove that a file was saved or that you were satisfied.
Event properties are limited to fixed stage and reason categories, a download-action label and a test marker. Photos, filenames, result links, storage paths, account identifiers, email addresses, task identifiers and raw errors are not sent. Task identifiers used to prevent repeat counting remain in this tab's session storage until it is closed. Cookie settings stores your permission locally; withdrawing it stops future tool events. Global Privacy Control keeps optional tool events off. Network requests expose your IP address to the analytics host. Public paths, safe campaign tags and coarse referring website origins remain available for attribution.
Who we are
RestorePhoto is a face photo restoration service at restorephoto.org. Contact support@restorephoto.org or use /contact for support, privacy, billing, deletion, or abuse reports. The contact form accepts text only, not image attachments.
Information used to provide the service
We process your uploaded photo and generated result so you can restore, compare, and download it. Cloudflare processes uploads to check and prepare image dimensions before restoration. Use a static JPEG, PNG, or WebP file no larger than 20,000,000 bytes, with no side over 8,192 pixels and no more than 16,777,216 pixels in total. If a file exceeds the processing limit, re-export a smaller file and select it again.
We retain limited image fingerprints, processing settings, quote and confirmation records, and job-attempt records to protect requests from changes and prevent duplicate charging. These records can be linked to a job and are not anonymous. We do not retain Google access, refresh, or ID tokens.
We use cookie-free Plausible analytics hosted at plausible.shipsolo.io to measure public page visits and engagement. Measurements include public page paths, campaign tags, referring website domains and basic browser/device information. Network requests also expose the visitor IP address to the analytics host. We do not send photo contents, private download links, account identifiers, payment details or OAuth parameters to analytics. Automatic form, file-download and outbound-link tracking is disabled.
How photos are processed
Photos are sent to OpenAI for safety checks and to fal.ai for AI restoration. Cloudflare provides hosting, storage, and image preparation; Google provides sign-in; Stripe processes payments. Card details are handled by Stripe rather than the photo upload form. Provider data-use, retention, location, and terms apply; we do not promise that every provider excludes every training use. Providers may process information outside your country. Do not upload sensitive photos unless you accept this processing.
AI and safety limits
AI restoration may add plausible details that were not in the original photo or change facial features. Results are not guaranteed to preserve identity and are not for forensic, ID, immigration, or legal use.
Safety checks apply to both uploaded photos and generated results. If a required check fails, is unavailable, or cannot be validated, the service does not provide a restoration result and does not charge restorations. Automated checks cannot detect every kind of illegal or harmful content and are not a complete system for detecting child sexual abuse material.
Do not upload illegal material. Report abuse through /contact without attaching images. We may restrict access and retain information necessary to handle abuse or legal obligations. We review legally valid requests from authorities and provide notice where lawful.
Photos of other people and children
You must have the right to upload and process the photo, including permission or other lawful authority for recognizable third parties. Photos of children may only be uploaded by an adult with lawful authority for family-photo restoration. Do not upload child sexual abuse material or non-consensual intimate images.
Retention and deletion
Original uploads, prepared images, and results share a photo-access deadline 24 hours after the original upload is first accepted. Waiting, refreshing, retrying, and crossing midnight do not extend that deadline. Results may be available for less than 24 hours. Cleanup retries failures, so physical deletion can occur later. Photo deletion does not automatically erase account, payment, usage, support, security, eligibility, or reconciliation records. It does not cancel a subscription or recall a request already sent to a processing provider. Provider-side retention is separate from our photo cleanup.
Your rights
Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of your information, withdraw consent where processing relies on it, and complain to a data protection authority. Contact support to make a request. We may need to verify your identity to prevent unauthorized access. There is no self-service account export or account deletion page.
Security
We use private photo storage, short-lived access links, upload validation, and access controls. Do not share private result links. No online service is completely secure. We will provide notices of a breach where required by law.
Payments
The current offers are Starter ($2.99 one-time, 30 restorations), Family ($5.99 one-time, 75 restorations), Archive ($9.99 one-time, 150 restorations), Monthly ($5.99 per month, 100 restorations per billing period), and Pro Monthly ($14.99 per month, 300 restorations per billing period). 1 photo = 1 restoration. New one-time packs are valid for 12 calendar months from purchase and do not renew. Monthly plans renew monthly until cancelled; unused monthly restorations do not roll over. Cancel anytime through subscription settings or contact support. Existing purchases retain their original allowance, expiry date, and processing terms. A checkout request is not a completed payment.
Changes and contact
We publish policy changes on this page and provide notices where required. For questions or requests, contact support@restorephoto.org or /contact. Do not send images, passwords, or card details in a support message.