Privacy Policy

Overview

Screenshot Studio combines a browser-based image editor with a workspace platform. An account and workspace membership are required to use the editor. We store the identity, session, membership, and workspace data needed to provide that service.

Editing, compositing, and preview rendering happen on your device in the browser canvas. Several operations do send data off your device. Account and workspace operations, export compression, URL capture, tweet import, and remote-image import send the data needed for those operations to our servers or the named providers below. Public content pages are funded by advertising. We do not sell your personal information.

What Stays On Your Device

Images you import from your device are read in the browser and are never uploaded to us for editing. The editor also stores your work in your own browser:

• Drafts: your in-progress canvas is autosaved to IndexedDB and deleted automatically after 7 days.
• Images: imported images under 500KB are kept in local storage so a reload does not lose them. Larger images are held in memory only.
• Preferences: aspect ratio, export settings, custom presets, theme, and recent exports.
• Image tools: the compress, convert, resize, crop, rotate, and background removal tools process files in your browser tab and write the result straight to your downloads. Re-encoding also drops embedded EXIF metadata such as camera details and GPS location.

None of this reaches our servers. Clearing site data in your browser removes all of it.

What Leaves Your Device

• Account and workspace data: we store your name, email address, authentication and session records, workspace memberships, organization settings, audit records, and the releases and assets your workspace creates. Access to tenant data is scoped to workspace membership and role.
• Export compression: when you export, the rendered image is sent to our /api/export endpoint, recompressed in memory with Sharp, and returned to you. It is not written to disk, not stored, and not logged. Images above 4MB, and any failure or timeout, fall back to compression inside your browser.
• Capturing a screenshot from a URL: the address you enter is sent to Microlink, which loads that page and captures it. The resulting image is cached in Cloudflare R2, and our database stores the normalized URL, a hash of it, the device and color-scheme options, and the storage key so repeat captures are fast. Only public web pages you explicitly submit are captured.
• Importing a tweet: the numeric post id is sent to X's public syndication API to fetch the post content that gets rendered on your canvas.
• Removing a background: the image is processed entirely in your browser and is never uploaded. The first time you use it, your browser downloads the AI model files directly from Hugging Face, which receives a standard file request (including your IP address) but no image data. The model is then cached in your browser.
• Remote images: images referenced by URL are fetched through our image proxy, which is restricted to an allowlist of hosts.

Advertising

Screenshot Studio is free because it shows ads served by Google AdSense on content pages such as guides, comparisons, and tool pages. The images you edit are never shared with Google or any ad partner.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
• You may opt out of personalized advertising by visiting Google Ads Settings or My Ad Center. You can also opt out of some third-party vendors' use of cookies for personalized advertising at aboutads.info (US) or youronlinechoices.eu (EU).
• Google may also work with other certified ad vendors when serving ads here. The list of these vendors is available in Google's ad technology providers list.
• Learn more about how Google uses information from sites or apps that use its services.

If you opt out, you will still see ads, but they will not be personalized based on your browsing.

Analytics

We use analytics to learn which pages and features are useful and to find bugs. We look at aggregate numbers, not at individuals.

• PostHog: when the deployment configures a PostHog key, feature usage events, such as which editor controls are used and whether an export succeeded. Events never contain your images.

Hosting and Security

• Hosting and network: the deployment's hosting, storage, and network providers may process standard request metadata, including IP addresses, for security and reliability.
• Rate limiting: the screenshot API stores a one-way hash derived from your client address in Redis for up to 60 seconds to enforce its per-minute limit. The raw address is not used as the rate-limit key.

Cookies

We use secure authentication and session cookies for signed-in users. We also set NEXT_LOCALE to remember your language choice, and screenshot-studio-store-active only when you have an App Store screenshot project open, so the page can restore it on your next visit. That cookie holds the value 1 and no identifier.

The following third parties may set cookies or similar identifiers when you visit the site:

• Google AdSense: Serving ads, limiting how often you see the same ad, measuring ad performance, fraud prevention, and (only where you allow it) ad personalization. Policy.
• PostHog: Product analytics for feature usage when the deployment configures a PostHog key. May store a first-party identifier so repeat visits are recognized. Policy.

You can block or delete cookies in your browser settings. Signing in requires the authentication cookies; the other cookies are optional.

Consent in the EEA, UK, and Switzerland

If you visit from the European Economic Area, the United Kingdom, or Switzerland, a consent message from a Google-certified consent management platform asks for your choice before Google and its ad partners use cookies or your data for personalized ads. If you decline, Google may still show non-personalized ads, which use cookies only for frequency capping, aggregated reporting, and fraud prevention. You can change your choice at any time from the "Privacy and cookie settings" link at the bottom of the page.

Legal Bases

Where data protection laws such as the GDPR apply, we process data on these bases: your consent for personalized advertising and non-essential cookies; our legitimate interest in keeping the site secure, reliable, and improving it, for request logs, rate limiting, and aggregate analytics; and performance of the service you ask for, when you use URL capture, tweet import, or export compression.

Data Retention

• Images you edit: never stored on our servers. Export compression happens in memory and is discarded immediately.
• Cached URL screenshots: kept so repeat captures are fast, and removed on request for pages you control.
• Account and workspace data: kept while your workspace is active, then deleted after the displayed recovery period, except records we must retain for security or legal obligations.
• Rate-limit entries: up to 60 seconds in Redis.
• Analytics and advertising data: retained by each provider under its own policy and retention settings.

Your Rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict processing, and to withdraw consent at any time. We will help with any request we can act on.

California and other US state residents: we do not sell personal information for money. Personalized advertising by Google may be considered "sharing" under some state laws; you can opt out using the advertising links above or by emailing us.

To make a request, email [email protected]. You also have the right to complain to your local data protection authority.

Your Choices

• Clear site data in your browser to remove every draft, image, and preference stored locally.
• Opt out of personalized ads with Google Ads Settings, and block cookies or use a content blocker. The editor works without analytics and without ads.
• Skip URL capture and tweet import if you do not want those requests made. Importing images from your device never leaves the browser.
• Email us to have a cached screenshot of a page you control removed.
• Use the workspace administration controls to request deletion of workspace data, subject to the displayed recovery period and records we must retain for security or legal obligations.

Children

Screenshot Studio is not directed at children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect information from them. Ads on this site are not intended for children.

Open Source

Screenshot Studio is open source. Every claim on this page about how the editor handles your images can be checked against the source code on GitHub.

Changes

We update this policy when the site changes, for example when we add or remove a third-party service. Changes are reflected on this page with an updated date.

Contact

Questions about this policy or your data: email [email protected] or use our contact page.