Plain-language privacy

Your photos stay yours.

SellerPhoto Studio is designed to format product photos in your browser. This page explains what stays on your device, what optional website analytics can measure, and what happens when you open checkout.

Product photos and the editor

Photos, logos, watermarks, settings, and exported images are processed on your device. SellerPhoto Studio does not upload those files to its website or include their contents in Google Analytics.

Optional Google Analytics

Analytics loads only after you choose Allow analytics. It can report page visits, broad device and browser information, interactions such as starting checkout or completing a verified purchase, and an approximate country or region derived from network information. A successful purchase event uses the random checkout-attempt identifier for duplicate prevention; it does not include the Razorpay order ID, payment ID, or download pass. Google Analytics does not receive precise GPS location, product-photo contents, or payment-card details.

Advertising storage, Google signals, and ad-personalisation signals are disabled. Your choice is stored in this browser. Use Analytics choices in the site footer to review or change it.

Google processes permitted analytics data under its own privacy policy.

Checkout and payment

When protected delivery is active, purchase buttons open Razorpay Standard Checkout. A SellerPhoto Studio delivery service creates the fixed-price order and receives the Razorpay order ID, payment ID, payment status, amount, currency, and a cryptographic payment signature. Card and UPI credentials remain with Razorpay under its own privacy policy. SellerPhoto Studio verifies a captured ₹499 INR payment before issuing a time-limited download pass. It does not place payment credentials, payment IDs, or download-pass values in website analytics.

Fulfilment records store the minimum operational data needed to prevent duplicate delivery and handle refunds: order/payment identifiers, product version, timestamps, status, and download count. Checkout rate limiting uses a one-way keyed hash of the network address rather than storing the raw address. A private cryptographically random recovery pass is stored on this device after checkout starts so an interrupted captured payment can be recovered without an external email service. Analytics is not loaded on admin or protected-download routes.

Your choices

  • Decline analytics and continue using the public demo.
  • Change your analytics choice from the footer at any time.
  • Clear this site's browser storage to remove the saved consent choice and any same-device checkout recovery pass.
  • Keep a paid download recovery link private; anyone holding it can use the remaining downloads until expiry.

Last updated: 22 August 2026