Privacy, by design.
ShotGuide is built local-first. This page explains exactly what stays in your browser, what leaves it, and why.
1. Screenshots and edits
Capture, annotation, PDF generation and export happen in your browser. ShotGuide does not upload screenshots, annotations or PDF files to a server for these operations.
2. Local library
Captures are stored in your browser's extension storage. Uninstalling the extension or clearing its data removes them. ShotGuide does not have a copy.
3. Share links
If you explicitly create a share link, the image is encrypted in your browser with AES-256-GCM. The encryption key is placed in the URL fragment and is not sent to the server. The share server stores ciphertext and minimal metadata (expiry, view limit, view count). The server cannot decrypt the image.
Optional password protection derives a key from your password in the browser. Revoking a link makes it return HTTP 410.
4. Payments and licenses
Pro checkout is handled by Waffo. ShotGuide receives a license confirmation and the email used for the purchase; it does not receive or store card details. License lookup is available at /license.
5. Permissions
activeTab: capture the tab you are viewing, only after you click.scripting: measure and scroll the page for full-page capture, and draw the area/element picker.storage,unlimitedStorage: keep the local library.<all_urls>(optional): all-tabs and batch capture, requested only when needed.file://*/*(optional): local HTML capture, requested only when needed.https://shotguide.facailo.xyz/*: create and open encrypted share links.
6. What we do not do
- No analytics, advertising IDs or cross-site tracking.
- No sale of personal data.
- No reading of page content unless you invoke a capture.
7. Retention
Share links expire or can be revoked. Server logs are minimized and kept only for operational security. Local data remains under your control.
8. Contact
Questions: hello@shotguide.app. Support: /support.