Privacy policy

Last updated: 2026

Privshot ("we", "us") helps you detect and redact personal data in images. Privacy is the point of the product, so we collect as little as possible and keep your images for as short a time as possible.

Images you upload

Screenshots and images you submit to the web tool, the browser extension, or the API are processed server-side in memory to run OCR and PII detection, then discarded immediately once the response is returned. We do not store them, log their contents, share them with third parties, or use them to train any machine-learning model.

Browser extension

Our browser extension captures a screenshot of your current tab only when you click its button or use its shortcut, and sends that image to Privshot to detect PII. The capture is handled exactly like any other image (processed in memory, then discarded immediately) and is never stored, shared, or used to train any model. The extension does not read other page content, does not track your browsing, and stores only an optional API key locally on your device. In the default (no-key) mode, the redaction boxes are drawn in your browser.

Account data

If you create an account for API access, we store your email address, a securely hashed password, and hashed API keys (we never keep API keys or passwords in plaintext). This data is used to authenticate you, meter usage, and send service emails.

Payments

Payments are handled by Stripe. We never receive or store your full card details; Stripe processes them under its own privacy terms. We keep a record of your purchases, credit balance and subscription status to run your account.

Cookies

We use a small number of strictly necessary cookies for your login session and CSRF protection. We do not use advertising or cross-site tracking cookies.

Service emails

We send transactional emails (email verification, password reset, low-credit and payment notifications). You can control optional notifications from your account settings.

Your rights

Depending on your jurisdiction (including the EU/EEA under the GDPR), you may request access to, correction of, or deletion of your account data. You can delete your account at any time, or contact us at privshot@protonmail.com (or via our contact page).

Changes

We may update this policy; the "last updated" date above reflects the latest revision.