Privacy Policy

1. Introduction

ShotPad ("the Extension") is a Chrome browser extension that allows users to capture screenshots, annotate them, and save or share the results. This Privacy Policy explains what data the Extension collects, how it is used, and your rights regarding that data.

By installing and using ShotPad, you agree to the practices described in this policy.

2. Data Collection — Free Tier

The free version of ShotPad is designed with a zero-collection architecture:

• Screenshots are captured using Chrome's built-in chrome.tabs.captureVisibleTab API and processed entirely within your browser.
• All data (screenshots, annotations, user preferences) is stored locally using chrome.storage.local and never transmitted to any external server.
• No analytics, no tracking pixels, no cookies, no fingerprinting.
• No personal information (name, email, IP address) is collected, stored, or processed.

When you download a screenshot as PNG or copy it to your clipboard, this action happens entirely on your device.

3. Data Collection — Pro Tier

If you choose to upgrade to ShotPad Pro, the following additional data processing occurs:

• Authentication: We use Supabase for user authentication. When you create an account, your email address and a hashed password are stored securely in Supabase's infrastructure.
• Cloud Storage: Screenshots you explicitly choose to save to the cloud are uploaded to Supabase Storage. These files are associated with your account and accessible only to you.
• Payment Processing: Payments are handled by third-party payment processors. ShotPad does not store your credit card number or payment details directly.

Pro features like screen recording and auto-upload only transmit data when you explicitly enable them.

4. Permissions

ShotPad requests the following Chrome permissions:

• activeTab — To capture the visible area of the current tab when you initiate a screenshot.
• storage — To save your preferences and screenshots locally.
• commands — To register the keyboard shortcut (Ctrl+Shift+X).
• downloads — To save annotated screenshots as PNG files to your computer.
• clipboardWrite — To copy screenshots to your clipboard.
• scripting — To inject the region-select overlay and full-page scroll capture functionality.

Each permission is used solely for its stated purpose. We follow the principle of least privilege — we never request more access than needed.

5. Third-Party Services

Free Tier: No third-party services are used. Zero external network requests.

Pro Tier:

• Supabase (authentication & cloud storage) — Supabase Privacy Policy
• Payment processor (billing) — Subject to their respective privacy policies, linked during checkout.

6. Data Retention & Deletion

• Free Tier: All data is stored locally on your device. Uninstalling the extension removes all data. You can also clear data via Chrome's extension settings at any time.
• Pro Tier: Cloud-stored screenshots and account data can be deleted at any time from your account settings. Upon account deletion, all associated data is permanently removed from our servers within 30 days.

7. Children's Privacy

ShotPad is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data (via Pro tier sign-up), please contact us and we will promptly delete it.

8. Security

We take security seriously:

• Free tier data never leaves your device — the most secure architecture possible.
• Pro tier uses Supabase's enterprise-grade security, including encryption at rest and in transit (TLS 1.2+).
• Authentication tokens are stored securely and never exposed to web pages.
• Our source code is open source and available for security audits.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For significant changes, we will notify users through the extension's update notes.

10. Contact

If you have questions or concerns about this Privacy Policy, you can:

• Open an issue on our GitHub repository
• Email us at privacy@shotpad.app