Privacy Policy

Overview

SiteSnap ("the Extension") is a Chrome extension that captures full-page screenshots of websites you visit. This policy explains exactly what data we collect, why we collect it, where it is stored, and your rights over it.

We do not sell your data, run ads, or share your information with third parties for marketing purposes.

What We Collect

Screenshot metadata includes: the domain name (hostname only — e.g. example.com, never the full URL or query parameters), image dimensions, file size, upload type, and timestamp.

What We Do Not Collect

We do not collect: full page URLs or query strings, browsing history, cookies or session data from the pages you visit, any content from form fields or text on pages you capture, keystrokes or mouse activity, device identifiers, IP addresses, or analytics or crash data of any kind.

How We Use Your Data

Screenshot images and metadata are used solely to display your captures in the SiteSnap gallery and enable you to download them. Auth tokens are used only to authenticate requests to Supabase on your behalf. Your email address is used only for account login and, if you request it, password recovery. We do not use any collected data for profiling, advertising, or analytics.

Data Storage & Security

Cloud storage is provided by Supabase (hosted on AWS). Data is encrypted in transit via TLS and at rest by Supabase's storage infrastructure. Your screenshot files are stored in a private storage bucket — they are not publicly accessible. Access requires a short-lived signed URL generated on demand.

Auth tokens stored in chrome.storage.local are scoped to the extension and are not accessible to web pages or other extensions.

Data Retention & Deletion

Your screenshots and metadata remain stored until you delete them. You can delete individual captures or batches at any time from within the extension. Deleting an item removes both the image file from cloud storage and its metadata record from the database.

To delete your account and all associated data entirely, contact us at the address below. We will permanently delete all stored images, metadata, and account information within 30 days of your request.

Third Parties

The only third-party service used is Supabase, which provides authentication and cloud storage. Supabase acts as a data processor on our behalf and is contractually prohibited from using your data for any purpose other than providing the service. You can review Supabase's privacy policy at supabase.com/privacy.

We do not use Google Analytics, Mixpanel, Sentry, or any other analytics or monitoring service.

Your Rights

You may request access to the data we hold about you, correction of inaccurate data, deletion of your account and all associated data, or a portable export of your screenshot metadata. To exercise any of these rights, contact us using the details below.

Changes to This Policy

If we make material changes to this policy, we will update the effective date above and, where required by law, notify you via the email address associated with your account. Continued use of the Extension after a policy update constitutes acceptance of the revised policy.

Contact