Screenshot MakerPrivacy Policy
Last updated: July 13, 2026
This document describes how Screenshot Maker currently operates. It is not legal advice.
1. Who we are
Screenshot Maker ("we", "us", "our") is operated by Brooks Marquez and provides an online tool that lets users edit and export screenshot-style templates for marketing and creative purposes.
Data controller: Brooks Marquez (operating Screenshot Maker)
Privacy contact: Submit requests through our contact form.
2. Scope
This Privacy Policy explains how we collect, use, store, and share personal information when you:
- visit https://screenshotmaker.app;
- create an account or sign in;
- use our editor and export features;
- subscribe to a paid plan;
- contact us for support.
It does not apply to third-party websites or services linked from our site (including Google sign-in and Stripe checkout), which have their own privacy policies.
3. Information we collect
3.1 Information you provide
| Data | When collected | Purpose |
|---|---|---|
| Name, email address, profile picture | When you sign in with Google | Account creation, authentication, support |
| Message content, name, and email | When you use the contact form | Respond to inquiries |
| Billing details | When you subscribe to Pro | Process payment (collected and stored by Stripe, not on our servers) |
We do not collect or store passwords. Authentication is handled through Google OAuth.
3.2 Information collected automatically
| Data | Purpose |
|---|---|
| Account and session identifiers | Keep you signed in, secure the service |
| Template export metadata (template ID, timestamp) | Operate your account, understand product usage |
| IP address (contact form only) | Rate-limit abuse of the contact endpoint |
| Server and application logs | Security, debugging, and reliability (may include IP address, browser type, request timestamps) |
3.3 Information we do not collect or store
- Exported image files. Rendering and export happen in your browser. We do not upload or store the PNG files you generate.
- Editor field contents (text, numbers, labels you type into templates). These remain in your browser unless you choose to export or share them yourself.
- Advertising or behavioral tracking cookies. We do not run third-party ad networks on the service.
4. How we use your information
We use personal information to:
- provide, maintain, and improve Screenshot Maker;
- authenticate users and manage accounts;
- process subscriptions and billing through Stripe;
- send transactional emails (e.g. contact form confirmations);
- respond to support requests;
- detect, prevent, and address fraud, abuse, and security issues;
- comply with legal obligations.
We do not sell your personal information.
5. Legal bases for processing (EEA, UK, and Switzerland)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal data on the following bases:
| Processing activity | Legal basis |
|---|---|
| Providing the service and managing your account | Contract (Art. 6(1)(b) GDPR) |
| Subscription billing | Contract; Legal obligation where applicable |
| Security, abuse prevention, and service logs | Legitimate interests (Art. 6(1)(f) GDPR) — keeping the service secure and reliable |
| Contact form responses | Legitimate interests / Contract (depending on context) |
| Compliance with law | Legal obligation (Art. 6(1)(c) GDPR) |
Where we rely on legitimate interests, you may object as described in Section 10.
6. How we share information
We share personal information only with service providers that help us operate the service, under contracts that require them to protect your data and use it only for our instructions:
| Provider | Role | Location / notes |
|---|---|---|
| Supabase | Authentication and database hosting | United States |
| Stripe, Inc. | Payment processing and subscription management | United States and other locations per Stripe |
| Resend | Transactional email (contact form) | United States |
| OAuth sign-in | Per Google’s policies | |
| Vercel | Website hosting and infrastructure | United States / global edge network |
We may also disclose information if required by law, court order, or governmental request, or to protect the rights, safety, and security of users, the public, or Screenshot Maker.
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any material change in ownership or use of your personal information.
7. International data transfers
Our primary database and authentication provider (Supabase) is hosted in the United States. Other providers may also process data in the United States or other countries. Where required by law, we rely on appropriate safeguards such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent mechanisms offered by our processors.
8. Data retention
| Data type | Retention period |
|---|---|
| Account profile (name, email, avatar) | Until you delete your account or ask us to delete it |
| Subscription records | For the life of the account, plus periods required for tax, accounting, and dispute resolution |
| Export metadata (template ID, timestamp) | Until account deletion, unless aggregated earlier for analytics |
| Contact form submissions | As long as needed to handle your request, typically up to 24 months |
| Server logs | Generally up to 90 days, unless needed for security investigations |
Stripe retains payment records according to its own retention policies.
9. Security
We use technical and organizational measures designed to protect personal information, including encryption in transit (HTTPS), access controls, and industry-standard practices through our infrastructure providers. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
10. Your privacy rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Delete your information;
- Export your information in a portable format;
- Object to or restrict certain processing;
- Withdraw consent where processing is consent-based;
- Opt out of certain processing under U.S. state privacy laws.
10.1 EEA / UK residents
You may lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO). In the EU, contact your member state's supervisory authority.
10.2 California residents (CCPA / CPRA)
In the preceding 12 months we have collected the categories of information described in Section 3 for the business purposes in Section 4. We do not sell or share personal information for cross-context behavioral advertising. You may request access, deletion, or correction by contacting us. We will not discriminate against you for exercising your rights.
10.3 How to exercise your rights
Contact us via the contact form. We may need to verify your identity before fulfilling a request. We aim to respond within 30 days (or the period required by applicable law).
11. Cookies and similar technologies
We use:
| Cookie / storage | Type | Purpose | Duration |
|---|---|---|---|
| Supabase auth session cookies | Essential | Sign-in and session management | Session / per Supabase configuration |
| gdpr_consent | Preference | Remember your cookie banner choice (EU visitors) | 180 days |
We do not use third-party advertising cookies. If we add analytics cookies in the future, we will update this policy and, where required, obtain consent before enabling them.
You can control cookies through your browser settings. Disabling essential cookies may prevent you from signing in.
12. Children
Screenshot Maker is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on this page and update the "Last updated" date. Where required by law, we will provide additional notice (for example, by email or in-app notice).
Continued use of the service after changes take effect constitutes acceptance of the updated policy, except where your consent is required by law.
14. Contact
Questions about this Privacy Policy or requests to exercise your rights may be submitted through our contact form.