Privacy Policy

The short version

• Your screenshots never leave your browser. Uploads, edits and exports all run locally — we do not upload, copy or store your images.
• We only collect what we need. If you sign in: name, email and profile picture from Google. If you save presets: their name and settings. That’s it.
• We do not sell personal data. Ever.

What we collect

Screenshots and edits

Nothing. Image processing happens in your browser via the HTML5 Canvas API. Your screenshots are not uploaded to our servers and we have no way to view them.

Account information (if you sign in)

We use Google OAuth via Better Auth for sign-in. When you sign in, we receive and store:

• Your name, email and profile picture URL from Google.
• An internal user ID we generate, plus session tokens.
• Timestamps for account creation and the most recent update.

We do not receive your Google password. Sign-out and account deletion invalidate the session immediately.

Saved presets

If you save a preset while signed in, we store the preset’s name and the editor settings (padding, shadow, background ID etc.) on our database. Presets contain no image data.

Payment data (Pro purchase)

Pro purchases are processed by Polar. We do not receive or store your credit card details. We do receive a record that you completed a purchase, which we use to flag your account as Pro. Polar’s privacy policy governs the payment itself.

Analytics

We use a lightweight, privacy-respecting analytics tool to track anonymous product events (e.g. “export succeeded”, “export failed”). No personal data, IP addresses or screenshots are sent.

Cookies

We use a small number of strictly necessary cookies for sign-in sessions. See our Cookie Policy for the full list.

How we use your data

• To create and manage your account.
• To sync your saved presets across devices.
• To unlock Pro features after a successful purchase.
• To improve the product based on anonymous usage events.

We do not use your data to train AI models, build advertising profiles or send marketing emails without your explicit opt-in.

Who we share data with

We use the following third-party service providers (sub-processors):

• Google — OAuth sign-in. We receive profile data; Google receives nothing about your edits.
• Polar — payment processing for Pro purchases.
• Neon — managed Postgres for account and preset storage.
• Vercel — application hosting and edge delivery.

Each provider has its own privacy commitments. We only share the minimum data required for each provider to do its job.

Data retention

Account, preset and purchase records are kept while your account is active. If you delete your account (see below), all associated records are removed from our database within 30 days. Anonymized analytics events are retained for product improvement.

Your rights

You can, at any time:

• Sign in and delete any preset you no longer want.
• Request account deletion (and all associated data) by emailing the address below.
• Request a copy of the personal data we hold about you.

If you are in the EU, UK, California or another jurisdiction with applicable data protection laws (GDPR, UK GDPR, CCPA etc.), you have the right to access, correct, delete and port your data, and to object to or restrict its processing. We honor those rights regardless of where you live.

Security

We use industry-standard encryption in transit (HTTPS) and at rest for stored account data. No system is 100 % secure, so if you ever suspect unauthorized access to your account, contact us immediately.

Children

cozyscreenshot is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal data from anyone in those groups.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with an updated “last updated” date. Continued use of the service after changes means you accept the revised policy.

Contact

Questions, data requests, or anything else: email hello@cozyscreenshot.com. We try to reply within 5 business days.