Privacy Policy
Last updated: 14 May 2026
This policy explains what data SnapFull collects, why we collect it, and what choices you have.
In short: your screenshots never leave your browser, and the only data we store about you is what's needed to run your account.
1. Who we are
SnapFull ("we", "us", "our") is an independent software developer based in Germany. You can reach us at hello@snapfull.net.
2. What data we collect
2a. Data you give us directly
- Account data: when you sign in with Google, we receive your email address, your display name, and your Google account avatar URL. We use these to identify your account and display your profile in the dashboard.
- Payment data: when you purchase a Pro subscription, payment information (card number, billing address, name) is collected by our payment processor, LemonSqueezy. We never see or store your payment details. We only receive a confirmation that the payment was completed.
2b. Data we generate automatically
- Subscription state: whether you're on the Free or Pro plan, when you subscribed, when your subscription renews or ends.
- A daily capture counter (
captures_today): a number used for internal analytics. Never the contents of any screenshot.
- Server logs: when your browser communicates with our servers (Supabase), the server records request metadata (IP address, timestamp, endpoint). These logs are retained by Supabase for diagnostic purposes.
2c. Data the Chrome extension does NOT collect
Screenshots themselves are never sent to our servers. All capture, processing, blur, annotation, and PDF generation happens locally in your browser. Screenshots are saved to your computer's Downloads folder or copied to your clipboard at your direction.
- Browsing history: SnapFull only reads the page you're currently capturing, only when you click the capture button. We don't track or log which sites you visit.
- Extension telemetry: the SnapFull Chrome extension does not phone home to track which features you use, when you use them, or how long you spend in the app.
2d. Marketing-site analytics (consent-based)
On snapfull.net (the marketing website, not the extension) we use Google Analytics 4 to count visits and understand which pages people find useful. Google Analytics is loaded only after you click "Accept" on the cookie banner the first time you visit. If you click "Decline" — or simply ignore the banner — no Google Analytics script is loaded and no analytics cookies are set. The site works identically either way.
When enabled, Google Analytics collects: page URL, referrer, anonymized IP-derived country, device type, browser, and time on page. It does not see your email, your screenshots, or anything you do inside the Chrome extension.
You can change your mind at any time by clearing your browser's site data for snapfull.net — the consent banner will reappear on your next visit.
3. How we use your data
We use the data we collect to:
- Operate your account (sign-in, identify you, show your profile)
- Process and confirm your Pro subscription
- Send you transactional emails (sign-in links, receipts, renewal reminders, cancellation confirmations)
- Diagnose technical issues if you contact support
We do not use your data for:
- Advertising or marketing campaigns
- Profiling or behavioral analytics
- Selling to any third party
4. Who we share data with (sub-processors)
We rely on a small number of third-party services to run SnapFull. Each handles a specific function:
| Sub-processor |
Purpose |
Data shared |
| Supabase, Inc. |
User authentication & database |
Email, display name, subscription state. Policy |
| Google, LLC |
OAuth sign-in provider |
Email, display name, avatar URL. Policy |
| Google Analytics (Google, LLC) — consent-based, marketing site only |
Aggregate site analytics on snapfull.net |
Page URL, referrer, country (from IP), device/browser. Loaded only after explicit consent. Policy |
| LemonSqueezy (Affable Capital, Inc.) |
Payment processing & Merchant of Record |
Email, payment information you enter into their checkout. Policy |
| Namecheap, Inc. |
Web hosting |
Server logs (IP, timestamp, endpoint). Policy |
These are our only sub-processors. We will update this list if it changes.
5. Where your data is stored
Supabase stores data in the region selected at sign-up (typically EU or US). LemonSqueezy stores payment data on their own infrastructure as required for processing.
If you are an EU/EEA resident, our processing of your data is covered by Standard Contractual Clauses (SCCs) with our sub-processors where applicable.
6. How long we keep your data
- Account data: kept for as long as your account exists.
- Subscription history (for billing and tax records): kept by LemonSqueezy for 7 years as required by their regulations.
- Server logs: kept by Supabase for approximately 30 days.
When you delete your account (via Settings → Delete account), we immediately and permanently delete your auth record and your profile data from our database. Subscription records held by LemonSqueezy are retained per their policy.
7. Your rights
If you are in the EU/EEA, UK, California, or another jurisdiction with comprehensive data protection laws, you have the right to:
- Access the data we hold about you
- Rectify inaccurate data
- Erase ("right to be forgotten") — you can do this immediately via Settings → Delete account, or by emailing us
- Receive your data in a portable format
- Object to certain processing
- Lodge a complaint with your local supervisory authority
To exercise any of these rights, email hello@snapfull.net. We will respond within 30 days.
8. Cookies & tracking
We use the minimum set of cookies needed to run the service:
- Authentication cookie / local storage (set by Supabase): keeps you signed in. Cleared when you sign out.
- Consent storage (
snapfull_cookie_consent in localStorage): remembers your "Accept" or "Decline" decision on the cookie banner so it doesn't reappear on every visit.
- Google Analytics cookies (
_ga, _ga_*): set only if you click Accept on the cookie banner. Used to count visits and identify returning visitors. Expire after 24 months. You can decline these — the site works the same.
We do not use Facebook Pixel, advertising cookies, or any other third-party tracking technology beyond what's listed above.
9. Children
SnapFull is not intended for users under the age of 13 (or 16 in the EU, where local law sets that age). We do not knowingly collect data from children. If we learn that we have, we will delete it.
10. Changes to this policy
We may update this Privacy Policy occasionally. The "Last updated" date at the top of this page will reflect any changes. For material changes (something that meaningfully affects your rights), we will email account holders before the change takes effect.