Here's the updated Privacy Policy for the cloud-based approach:
Last Updated: October 23, 2025
Flowshot is a Chrome extension that captures screenshots on-demand and uploads them to your personal cloud dashboard. This policy explains what data we collect, how we use it, and your privacy rights.
What we collect:
Screenshots of visible webpage content when you press Option+Shift+S or click the extension icon
Source URL of the webpage where screenshot was captured
Viewport dimensions and scroll position at time of capture
Screenshot title (extracted from URL or customizable in dashboard)
Capture timestamp
How it's stored:
Uploaded to Flowshot's secure cloud servers via Supabase
Associated with your user account
Accessible from any device when logged in
How it's used:
Organized in your personal dashboard
Shareable via public links (when you choose to share)
Searchable and browsable in your account
Data retention:
Stored until you delete screenshots from your dashboard
Archived screenshots retained until permanent deletion
Account deletion removes all associated screenshots
What we collect:
Email address (for account creation and authentication)
Account preferences and settings
Session cookies (for authentication)
How it's stored:
Securely managed through Supabase authentication
Encrypted in transit and at rest
How it's used:
Account authentication and access control
Screenshot ownership and privacy management
Service communications (if enabled)
What we collect through analytics services:
Extension installation and update events
Screenshot capture events (count only, not content)
Feature usage patterns
Extension version information
Anonymous session identifiers
How it's used:
Understand usage patterns and improve functionality
Monitor performance and reliability
Guide feature development
Data transmitted:
Only anonymous usage events
No screenshot content, browsing history, or personal data
Complete browsing history or tracking across websites
Screenshot content for analytics (content stays private in your account)
Passwords, credentials, or financial information beyond payment processing
Precise location data or IP addresses (beyond standard server logs)
Data from inactive browser tabs or when extension is not actively used
Keystrokes or form input data
Manages user authentication and screenshot storage
Processes data according to their privacy policy: https://supabase.com/privacy
Data encrypted in transit (HTTPS) and at rest
SOC 2 Type II compliant infrastructure
Process anonymous usage statistics only
No personally identifiable information shared
No screenshot content transmitted
Can be disabled in extension settings
activeTab: Required to capture screenshots of the currently visible tab content when you trigger capture
tabs: Access current tab's URL and title to save as metadata with screenshots
storage: Store user preferences and extension settings locally in your browser
scripting: Inject scripts to capture viewport metadata (dimensions, scroll position) with each screenshot
notifications: Show success/error notifications for capture and upload status
cookies: Maintain authentication session with Flowshot cloud service for secure uploads
Host permission (flowshot-saas-git-dev-dennis-yus-projects.vercel.app): Communicate with Flowshot's API to upload screenshots to your dashboard
Account control: You own your data and can delete your account at any time
Screenshot management: Edit, archive, or permanently delete screenshots from your dashboard
Privacy control: Choose which screenshots to share via public links
Data export: Download screenshots individually or in bulk from your dashboard
Analytics opt-out: Disable analytics in extension settings
Access anywhere: View your screenshots from any device by logging into your dashboard
When you generate a public share link for a screenshot:
Anyone with the link can view, copy, and download that specific screenshot
No login required for viewers
You can revoke share links at any time from your dashboard
Shared screenshots do not expose other screenshots in your account
All data transmitted via encrypted HTTPS connections
Screenshots stored on secure, SOC 2 compliant infrastructure
Account passwords hashed using industry-standard encryption
Session-based authentication with secure cookie management
Regular security audits and updates
Access controls ensure only you can access your screenshots
Screenshots: Retained until you delete them from your dashboard
Account data: Retained while your account is active; deleted upon account deletion
Analytics data: Retained according to analytics service policies and your settings
Shared links: Active until you revoke them
Flowshot is not intended for users under 13 years of age. We do not knowingly collect data from children under 13.
Your data may be stored and processed in data centers located in different countries. We ensure appropriate safeguards are in place for international data transfers.
We may update this privacy policy as needed. Material changes will be communicated via email or dashboard notification. Continued use after changes constitutes acceptance of the updated policy.
For privacy questions or data requests, contact us at:
Email: contact@flowshot.co
Support: Through the Chrome Web Store support page
Your Rights Under GDPR/CCPA: If applicable, you have the right to access, correct, delete, or export your personal data. Contact us to exercise these rights.