Privacy policy

Screenshotfiles is designed to collect as little personal data as possible. This policy explains what we process, why we are allowed to process it, how long we keep it, who else is involved, and what you can require us to do about it. It applies to the website, the installable app, the browser extension and the share pages at screenshotfiles.com.

Who is responsible for your data

Data we process

• Browser session. We place a random, HttpOnly session token so you can start without an account. Only a SHA-256 hash of that token is stored on our side, and sessions can be revoked.
• Account email address. If you create or access an account, we store your email address and when it was verified. To sign you in we email you a 6-digit code, which expires after 15 minutes and of which only a hash is stored.
• Passkeys. If you add a passkey, we store its public key, a signature counter, the label you gave the device, and when it was created and last used. The private key never leaves your device and we never receive it.
• Optional profile photo. If you add one, it is resized and stored with your private account data. It is shown only inside your account and never on a share page.
• Your screenshots and recordings in the cloud. Images you synchronize are converted to WebP and stored in Cloudflare R2, together with their name, tags, favorite status, dates and size. Screen recordings are stored the same way in the format your browser recorded. Recordings never contain sound: the recorder does not ask for a microphone. Guest uploads are limited to 5 screenshots and 10 MB for 7 days, free accounts to 25 screenshots and 100 MB for 30 days, and Pro accounts to 2,000 screenshots and 2 GB.
• Encrypted local vault. New screenshots, recordings and imported images are encrypted on your device with the browser Web Crypto API and stored in your browser before cloud synchronization is attempted. The device key cannot be exported and stays in that browser. Files that stay local are not sent to us, and neither is anything about them.
• Collections. The names of your collections and which screenshots are in them.
• Share links. For each link you create we store which screenshot or collection it opens, when it expires, whether it opens only once, and, if you protect it, a scrypt hash of the password. We count how often a link is opened and when it was last opened. We record nothing about the person who opens it.
• OCR text. Text recognition runs in your browser. For Pro accounts the recognized text is stored in the cloud search index so screenshots can be found by their contents. Screenshots are never sent to an external OCR or AI provider, and we do not use your content to train anything.
• Browser extension captures. When you send a capture from the Screenshotfiles extension, the page title, web address and domain are stored with the screenshot so you can find its source later. Until it is handed to the app, a capture is held inside the extension encrypted with a key that lasts only for the browser session, and it is removed after transfer, after download, or after one hour.
• Integrations. If you connect Slack or a webhook, we store the address you entered. When you send a screenshot there, we deliver its name, its share link, its tags, its creation date and a link to the image that stops working after one hour. What happens to that data at the destination is governed by the destination you chose, not by us.
• Pro billing references. Stripe collects your payment details itself, as explained under Service providers. We store the Stripe customer and subscription references, the subscription status and its dates. To allow one free trial per payment method, a fingerprint Stripe provides is turned into a keyed one-way hash before we store it. We never receive full card or bank details.
• Withdrawals. If you withdraw from a Pro subscription, we record when the withdrawal reached us, which subscription it covered and what was refunded.
• Reports of illegal content. If you report a share link, we store your report, the link it concerns and, if you give them, your name and email address, so we can handle the report and tell you the outcome.
• Support messages. If you use the contact form or email us, we process your name, email address, subject, message and a request reference so we can answer you.
• Security and abuse prevention. To enforce upload limits and stop abuse, we keep a keyed hash of your IP address per day, never the address itself, and rate-limit counters stored under a hash. The sign-in form and the report form run a Cloudflare Turnstile check to tell people from bots.
• Technical logs. Our application does not write IP addresses, email addresses or screenshot contents to its logs. Cloudflare, which sits in front of every request, and our hosting provider keep their own short-lived request logs, which include IP addresses, to operate and protect their networks.

Retention and deletion

• A browser session expires after 7 days of inactivity and no later than 30 days after it was created. Signing out revokes it immediately.
• Guest screenshots are deleted automatically after 7 days, free account screenshots after 30 days. Screenshots of a Pro account are kept while Pro is active. When Pro ends, the free 30-day retention applies from that moment. Quick Share images are deleted after 24 hours.
• Cloud expiry does not remove an encrypted local copy. A local copy is deleted only after you confirm that in Screenshotfiles or clear your browser data, and clearing browser data removes it together with its key, which makes it unrecoverable.
• Deleting a screenshot removes the stored file and its database record. Expired sign-in codes and expired share links are removed automatically.
• Passkeys are removed immediately when you delete them or your account.
• Invoices, the accounting records behind them, and records of withdrawals are kept for 7 years, because Dutch tax law requires it. Together with the payment records Stripe keeps under its own responsibility, these are what we cannot delete on request.
• Daily IP hashes are removed after two days. Rate-limit counters expire with their time window. One-trial payment-method hashes are kept for up to two years to prevent trial fraud, including after account deletion.
• Delivered transactional email jobs are removed after 30 days. Jobs that permanently failed are removed after 90 days so delivery problems can be investigated.
• Reports of illegal content and what we did about them are kept for 2 years, so repeated abuse can be recognised and a decision can be explained if it is challenged.
• Support correspondence is kept only as long as needed to answer the request and handle reasonable follow-up.

Why we are allowed to process this

Under the General Data Protection Regulation every purpose needs a legal basis. These are ours.

Where we rely on a legitimate interest, that interest is keeping the service secure and financially viable, and we have weighed it against your privacy. You can object to that processing at any time, see your rights below.

An email address is required to hold an account, because there is no other way to sign you in or reach you about your subscription. Everything else is optional. You can use Screenshotfiles as a guest without giving us any identifying data at all.

Service providers and where your data goes

Two different relationships are involved, and the difference decides who answers to you for what.

Cloudflare, Railway and Stripe are established in the United States, and Cloudflare and Railway may process data outside the European Economic Area. For our processors these transfers take place under the EU-US Data Privacy Framework where the provider is certified, and otherwise under the European Commission's standard contractual clauses, together with the measures described under Security. Brevo processes data in the European Union. You can ask us for details of the safeguards that apply to a specific provider.

Business accounts

If you use Screenshotfiles for an organisation and your screenshots contain personal data of other people, such as customers or colleagues, your organisation decides why that data is captured and is its controller. For that content we act as a processor on your organisation's behalf. A data processing agreement under article 28 GDPR is available on request from support@screenshotfiles.com. For everything else in this policy, such as your own account and billing data, we remain the controller.

Your rights

You have the following rights over your personal data. Most of them you can exercise yourself, immediately, from the Account screen.

• Access. Ask what we hold about you. The Account screen exports your account data and OCR text, and downloads all your images.
• Rectification. Have inaccurate data corrected.
• Erasure. Delete individual screenshots, or delete your account permanently. Account deletion removes cloud screenshots and recordings, share links, collections, OCR text, integrations and profile data, and cancels an active Pro subscription. What survives it is listed under Retention: records we must keep by law, the trial-fraud hash, and the payment records Stripe holds as its own controller.
• Restriction. Ask us to stop processing while a dispute about accuracy or legitimate interest is resolved.
• Portability. Receive the data you gave us in a structured, commonly used, machine-readable format. The account export is JSON and the image download is a standard archive.
• Objection. Object to processing based on a legitimate interest, which here means abuse prevention, security and trial-fraud prevention.
• Withdraw consent. Where we rely on consent, which is only the optional profile photo, you can withdraw it at any time by removing the photo. This does not affect processing that already happened.

For anything that cannot be done in the app, email support@screenshotfiles.com. We answer within one month, and tell you if we need longer because a request is complex. Exercising these rights is free unless a request is manifestly unfounded or excessive. We may ask you to confirm the request from the email address on the account, so nobody else can obtain your data.

If you live outside the Netherlands

We apply this policy and the rights above to everyone, wherever they live. If you live in another EU or EEA country, you can complain to the data protection authority there. If you live in the United Kingdom, the UK GDPR gives you the same rights and you can complain to the Information Commissioner's Office, ico.org.uk. If you live in Switzerland, you can complain to the Federal Data Protection and Information Commissioner, edoeb.admin.ch.

Complaints

If you think we handle your data incorrectly, please tell us first so we can put it right. You also have the right to lodge a complaint with a supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl.

Cookies and storage on your device

We use only cookies and device storage that are strictly necessary to provide the service you asked for: the session cookie, two security mechanisms of Cloudflare, the encrypted local vault, the offline cache of the app, and the interface settings you chose. Dutch and European law does not require consent for those, which is why you are not shown a cookie banner. We use no analytics, advertising or tracking cookies, no tracking pixels and no third-party trackers. The full list, with what each item does and how long it lasts, is in our cookie policy.

Automated decisions

We do not make decisions about you by automated means that produce legal effects or similarly significantly affect you, and we do not profile you. Three checks are automated but limited in effect: whether your account is eligible for the one free trial, whether traffic looks abusive and should be rate limited, and the Turnstile bot check on the sign-in form and the report form. If one of them affects you and looks wrong, email us and a person will look at it.

Children

Screenshotfiles is not intended for children under 16. We do not knowingly process the data of a child under 16. If you believe a child has created an account, email us and we will delete it.

Security

We use revocable hashed sessions, short-lived hashed sign-in codes, passkeys, private object storage with links that expire, exact-size signed uploads, server-side authorization on every request, database-backed rate limiting and a strict content security policy that lets no script from another origin run, apart from the Cloudflare bot check. Local copies are encrypted on your device. No online service can guarantee absolute security, so keep your own copy of screenshots that matter to you. If a breach ever puts your data at risk, we report it to the Autoriteit Persoonsgegevens within 72 hours and tell you without undue delay when the law requires it.

Changes to this policy

We update this policy when the service or the law changes. The date at the top shows the current version. If a change materially affects how we use your data, we tell account holders by email before it takes effect, so you can object or close your account.

Contact

Questions about privacy can be sent to support@screenshotfiles.com or by post to the address at the top of this page.