Legal

Privacy

SnapSite stores some data because that is how a screenshot job works. This page says what is stored, for how long, and what operators can see. It does not claim that nothing is stored.

What is processed

• The URL you submit, including the query string if the page needs it. It is deleted from the job record when the job completes or fails.
• The capture options: viewport, format, delay, and wait mode. These are not secret, and they do not include the URL.
• The image file, only until your browser has received it. Anything still on disk is deleted within 15 minutes.
• A hash of the client IP address, using a salt kept on the server. The raw address is not written to the database.
• An account email and a password hash, if you register. The password itself is not stored.
• Bitcoin invoices: the address, the amount, the plan, and the transaction id after payment. An extended public key is kept so later invoices can use a new address. Addresses that already have a payment are not reused. A private key is never stored.
• API key hashes, key prefixes, plan, and last-used time. The full key is not stored.
• Contact-form messages, until an operator deletes them.
• Aggregate counts of jobs created, completed, failed, and blocked. Those counts have no URLs in them.

What logs contain

Operational logs include an event name, the hostname, a status or error code, and timing. They do not include the URL path, query string, API key, admin token, or cookie. A failed capture stores a fixed error message, not the browser’s error string, because that string often contains the URL.

Who can see a capture

There is no public gallery. The image is removed from the server once it has been delivered. Operators can see the hostname, status, and error code. They cannot open a list of full URLs from the operator panel.

If you use an API key, jobs are tied to that key’s id. Revoking the key stops new jobs. It does not delete an image that has not expired yet; the retention window still applies.

Retention

A finished image is deleted as soon as it is delivered, and leftover files are removed within 15 minutes. Failed jobs are kept only long enough for the form to show the error. Contact messages stay until deleted. Hashed usage counters for the current day stay so the daily limit can be enforced.

This deployment does not send data to a third-party analytics script. Fonts are served by this site.