Your family photographs
should stay yours.

No password account required

An anonymous photo set access token is stored in your browser before purchase. After a Credits purchase, the checkout email is used as the balance recovery identity. A new device can request a short-lived 6-digit email code; a separate backup Recovery Key can be kept for cases where email access is lost. Recovery credentials are stored by Photo Restorer as hashes rather than plain-text keys.

Temporary photo storage

Originals, restoration results and related job metadata are scheduled for automatic removal after 30 days. Balance, credit ledger and purchase records are separate from photo storage and are retained as needed to provide purchased Credits and maintain payment records.

Free-preview abuse prevention

To limit repeated free AI usage, Photo Restorer may use a random browser identifier and network signals such as IP address. Server-side anti-abuse records use keyed hashes for browser, IP and verified-email signals. These signals are used for rate limiting and verification, not as ownership of a balance. Suspicious free-preview traffic may be asked to complete Cloudflare Turnstile or verify an email.

Email verification

Six-digit verification codes are short-lived and single-use. Email recovery requests return the same public response whether or not an address has a balance; balance details are disclosed only after successful verification. Changing a recovery email requires verification of the new address.

AI processing

Photos selected for restoration are sent to configured external image-analysis and image-restoration providers only as needed to perform the requested restoration. Photos merely waiting for restoration are not sent to those providers until the job is accepted.

Provider policies

Retention, training and regional processing policies of the configured third-party providers must be verified against their current production terms before launch. Photo Restorer does not claim that a third-party provider stores nothing unless that provider's current policy supports the claim.

Payments

Stripe handles payment card data. Photo Restorer records Credits purchases, ledger entries, restoration delivery and related order events needed to provide the service, prevent duplicate charges, handle refunds and resolve payment disputes.