Privacy Policy for Screenshots.Guru

The short version

• The screenshots you edit are never uploaded to us. Styling and export happen on your own device. We never receive the image you are working on. Microsoft Clarity records the editor with the canvas blanked out. Plerdy is not started in the editors, but if you move into one from our other pages without reloading, a copy started there keeps running, and Plerdy cannot blank anything out.
• One exception, and it is worth knowing about. If you save a Brand Kit preset (a saved style), any logo or background image you uploaded is stored with it in our database, because the point of a saved preset is that it follows you to your next device.
• We never see your card. Payment happens on Paddle’s side; we only store the identifiers it gives us back.

What we collect

Account details. When you sign in with Google we receive and store your name, email address and the URL of your Google profile picture. The picture is shown in your account menu; our hosting provider fetches it from Google and resizes it, so your browser loads it from us rather than from Google. When you sign in with an email link we store only your email address, and your initial is drawn on your device instead. The first time you sign in with Google we also store what Google returns with the sign-in: your Google account id and the tokens Google issues, one of which carries your full name. If you buy before you have an account, one is created for the email address you gave Paddle.

Feedback. When you send us feedback we store your message, the page you were on, your screen size and your browser’s user-agent string (which names the browser, its version and your operating system), so we can reproduce what you saw. If you are signed in we also store your email address and which plan you are on. We read it to decide what to build; we do not reply to it. So that one person cannot flood the form, we also keep a keyed one-way fingerprint of your IP address, and we never store the address itself.

Sign-in protection. To stop someone using the sign-in form to send a flood of emails, we count recent attempts. Upstash holds your IP address for up to two minutes and the email address you typed (in a normalised form) for up to two hours; our database holds that form of the address for one hour, and a count of the links sent to it that day until the day ends (UTC). All of it is deleted automatically when that time is up.

Billing details. After a purchase we store the customer, subscription and price identifiers that Paddle returns (for a Lifetime purchase, its transaction identifier), which plan you are on, and whether your access is active. We do not receive, store or process card numbers.

Brand Kit presets. If you are signed in with an active plan and you save a preset, we store the name you gave it and its style settings — background, shadow, rounding, frame and logo placement. Where that style includes a logo or a custom background image you supplied, the image itself is stored with the preset (up to about 0.5 MB for a logo and 1.5 MB for a background).

The screenshot you are editing. Not collected. The editor loads it into your browser, styles it there and exports it there. It is never sent to us.

Free-try usage. The count of free exports you have used is kept in your own browser’s local storage, not on our servers. Clearing your browser data resets it.

The release-day kit by email. If you ask us to send the release-day screenshot kit from the free editor, we store the address you typed, the page you were on and how many free exports you had made, in a record separate from any account. We use it to send you the kit, to understand how many people who try the editor want it, and we may write to you about Screenshots.Guru. Every message carries an unsubscribe link, and using it stops all of them. So that one person cannot enter a hundred addresses, we also keep the same one-way fingerprint of your IP address described above. If you ask for the kit while signed in with that same address, or sign in with it later, the record is linked to your account. Either way the record itself is kept for the period described below. Write to contact@screenshots.guru at any time and we will delete it.

Usage and device data. Our analytics providers (listed below) collect the usual technical information — pages viewed, referrer, approximate location derived from IP address, browser and device type. Microsoft Clarity additionally records interactions such as clicks and scrolling in order to replay sessions; wherever a page shows something of yours (the editor canvas, your logo, your text, your email address) the recording has it blanked out. Plerdy records clicks and scrolling, and it cannot blank anything out. It is started only on our marketing pages, where, if you are signed in, it can see the name or email shown in the account menu and what you type into the feedback form. A copy started there keeps running if you go on to the editor, the free editor, sign-in or your account settings without a page reload. When you are signed in, Amplitude links these events to your account id, including your purchase: we pass Amplitude’s device and session ids to Paddle with the checkout for that.

Why we use it, and on what basis

• To run the Service — signing you in, checking whether your plan is active, storing your presets. This is necessary to perform our contract with you.
• To take payment and meet tax obligations — contract performance and legal obligation.
• To support you when you write to us — legitimate interest in answering our customers.
• To understand how the site is used — our legitimate interest in improving it. See the cookies section below for how this currently works.
• To measure and target our advertising — Google Ads conversions and remarketing audiences, and the identifier Clarity syncs with Microsoft: our legitimate interest in reaching people likely to use the Service.

We do not sell your personal data, but visit data is shared with Google and Microsoft for advertising as described above. We do not use your images to train anything.

Who else processes it

We use the following providers. Several are outside your country, so your data may be transferred internationally, including to the United States, under the transfer safeguards those providers put in place.

• Google — sign-in; Google Analytics for audience measurement; and Google Ads, which our Analytics property is linked to, so Google can count ad conversions and build advertising audiences (remarketing) from visits.
• Paddle.com Market Ltd — merchant of record: takes payment, handles tax, issues receipts and processes refunds.
• Paddle Retain (ProfitWell) — loaded by Paddle’s checkout script on pages with a purchase button; Paddle uses it for subscription analytics and to recover failed payments.
• MongoDB Atlas — the database holding your account and your saved presets.
• Microsoft Clarity — session analytics and session replay. Clarity also syncs Microsoft’s own identifier through bing.com, which Microsoft uses across its services, including Microsoft Advertising.
• Plerdy — heatmaps and click analytics, started on our marketing pages (see “Usage and device data” above for where it can keep running).
• Amplitude — product analytics.
• Ahrefs Analytics — traffic measurement.
• Resend — sending your sign-in link and the release-day kit.
• Upstash — short-lived counters that keep the sign-in form and our other forms from being flooded, keyed on your IP address for sign-in and on its fingerprint or your account id elsewhere.
• Netlify — hosting and delivery of the site.

Cookies and analytics

We use cookies that are necessary for the site to work, such as keeping you signed in. Your free-export count stays in your browser’s local storage.

We also load the analytics providers listed above. To be straightforward about it: they load when you open the site, and there is no consent prompt. You can block them with your browser’s privacy settings or an extension, and the Service will keep working normally. If you would rather we deleted analytics data associated with you, write to us.

How long we keep it

Account and preset data is kept while your account exists. Feedback is deleted automatically two years after you send it. The release-day kit record is deleted automatically two years after it last changed — for example, two years after you unsubscribe. Records of purchases are kept for as long as tax and accounting law requires, which is generally several years and is largely Paddle’s responsibility as merchant of record. Analytics data is kept according to each provider’s own retention settings.

Your rights

Depending on where you live, you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask for it in a portable format, or object to processing based on legitimate interest.

There is currently no self-serve button to close your account. To close your account and have its data removed, email contact@screenshots.guru and we will action it. While your plan is active you can delete any Brand Kit preset yourself from inside the editor; without an active plan, your account settings let you delete all of your saved presets at once.

If you are in the EU or UK and you think we have handled your data badly, you can complain to your national data protection authority.

Children

The Service is not directed at children and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.

Changes to this policy

When this policy changes materially we will update the date at the top of the page before the change takes effect. The terms under which you use the Service are in our Terms of Service.