Cookie policy
This page lists every cookie and every other piece of storage that Screenshotfiles places on your device, what each one is for, and how long it stays. It belongs with our privacy policy, which explains everything else we process.
The short version
Everything on this page is strictly necessary to provide the service you asked for. We use no analytics cookies, no advertising cookies, no tracking pixels, no social media plugins and no third-party trackers, and nothing on this page is used to follow you across other websites.
Dutch law (article 11.7a of the Telecommunicatiewet) and the European ePrivacy rules require consent only for storage that is not strictly necessary. Because there is none, you are not shown a cookie banner. You are told instead, which is what this page is for.
Cookies
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
| __Host-sf_session | Screenshotfiles | Keeps you signed in and tells your library apart from everyone else's, also when you use Screenshotfiles as a guest. It holds a random token; only a hash of it is stored on our side. It is HttpOnly, so no script can read it. | Ends after 7 days without use, and after 30 days at most. Signing out removes it. |
| __cf_bm | Cloudflare, on our domain | Cloudflare's bot protection, which shields the site from automated attacks. It holds no information about who you are. | 30 minutes |
The sign-in form and the report form run Cloudflare Turnstile, a check that tells people from bots without asking you to solve puzzles. It runs in a frame loaded from challenges.cloudflare.com and may use storage within that frame. It is needed to stop sign-in codes being sent to addresses in bulk, and reports being sent in bulk. Cloudflare describes it in its Turnstile Privacy Addendum.
When you upgrade to Pro, you pay on a page hosted by Stripe at checkout.stripe.com. Cookies on that page are set by Stripe, on Stripe's own domain, for payment security and fraud prevention, and are governed by Stripe's own cookie policy. They are not placed on screenshotfiles.com.
Storage in your browser
The cookie rules cover any information stored on your device, not only cookies. Screenshotfiles also keeps the following in your browser. None of it is sent to us unless the description says so.
| Where | Name | Purpose | Lasts |
|---|---|---|---|
| IndexedDB | screenshotfiles-local-vault | Your encrypted local vault: screenshots and recordings encrypted on this device, their details, and the encryption key, which cannot be exported. Files are sent to the cloud only when they are synchronized. | Until you delete the items or clear site data |
| Cache Storage | screenshotfiles-shell-... | The app's own files, so it opens quickly and works offline as an installed app. Holds no personal data. | Replaced with each new version of the app |
| Local storage | sf_ui_settings_v1 | The settings you chose, such as light or dark appearance. | Until you clear site data |
| Local storage | sf_local_vault_scope_v1, sf_local_vault_scope_type_v1 | Which account or guest session the local vault on this device belongs to, so a different account never sees your local files. | Until you clear site data or delete your account |
| Local storage | sf_name_template, sf_project, sf_seq | Your automatic naming pattern and its running number. | Until you clear site data |
| Local storage | sf_quick_mode | Whether you turned on Quick Share mode. | Until you clear site data |
| Local storage | sf_account_nudge_dismissed | Remembers that you closed the suggestion to create an account, so it is not shown again. | Until you clear site data |
| Local storage | sf_checkout_after_auth | Remembers that you were on your way to upgrading when you were asked to sign in, so you land back there. | Removed once used |
| Session storage | sf_local_warning_seen, sf_account_deleted | Remembers for this tab only that a notice was already shown. | Until the tab is closed |
If you use the Screenshotfiles browser extension, it holds a capture for at most one hour, encrypted with a key that exists only for the current browser session, until the capture has been handed to the app. It stores nothing else.
Removing it
You can remove all of it at any time by clearing the site data for screenshotfiles.com in your browser settings. Be aware that this also deletes the local vault and its key: screenshots that exist only on this device are then gone for good. Synchronize or download anything you want to keep first.
What would change this page
Our content security policy does not allow scripts from other websites to run on screenshotfiles.com, apart from the Cloudflare bot check, so analytics or advertising tools cannot be added by accident. If we ever decide to use something that is not strictly necessary, such as analytics that use cookies, we will update this page first and ask for your consent before anything is stored, with refusing as easy as accepting.
Contact
Questions about cookies can be sent to support@screenshotfiles.com.