Privacy Policy
This policy explains what personal data shotkit ("we", "us") collects when you use https://shotkit.net and the shotkit API, why, and what you can do about it. Questions: hello@shotkit.net.
What we collect
Account data. When you sign up: your name, email address and a hash of your password (we never store the password itself). We also store your workspaces, their members and invitations.
Sessions. While you're signed in, we store a session with your IP address and browser user agent, to keep you signed in and to spot abuse.
Billing data. Payments are handled by Stripe. We store your Stripe customer ID and your subscription's plan and status. Card details go straight to Stripe and never reach our servers.
API usage. For each API request we record the workspace, the time, the source (the URL you rendered, or just "html" or "markdown" for raw content), the format, the status, the duration, the size and whether it was a cache hit. This powers your usage page and monthly quota.
Rendered files. Screenshots, PDFs, videos and other output are stored so they can be served from a URL, and deleted automatically when they expire: after 4 hours by default, or after the cache_ttl you set (at most 30 days).
Request contents. The options you send (for example HTML, cookies, headers or an authorization value for the page you render) are used to render that request. They aren't stored, apart from async jobs, which wait in a queue until they are rendered, and cached results, whose output is stored as described above. An API key you pass for vision is sent to the AI provider for that request and never stored.
Free screenshot tool. The tool at /tools/free-website-screenshot-tool needs no account. Your IP address is used to verify you're human and to limit how many screenshots you can take; the URL and the result are cached for a few hours.
Website analytics. We use our hosting provider's web analytics, which counts page views without cookies and without identifying you.
Support chats and emails. If you message us through the chat widget or by email, we keep the conversation to help you.
Why we use it
- To provide the service: your account, rendering, file delivery, usage limits and billing (performing our contract with you).
- To send account emails: email verification, password resets, and messages about your subscription.
- To prevent abuse and keep the service secure, for example bot checks at sign-up and rate limits (our legitimate interest).
- To understand how the site is used, in aggregate (legitimate interest).
We don't sell your data and we don't use it for advertising.
Who processes it
We use these kinds of providers to run shotkit. Each one only gets the data it needs:
| Provider | Purpose |
|---|---|
| Hosting provider | Hosting, file storage, compute and cookieless analytics |
| Database provider | Database (accounts, sessions, usage) |
| Stripe | Payments, invoices and tax |
| Email delivery provider | Sending account emails |
| Bot protection provider | Bot check at sign-up and on the free tool |
| Customer support provider | The chat widget on the website |
| AI provider | Only when you pass your own API key for vision with a request |
Some of these providers process data outside your country, including in the United States, under their own safeguards such as standard contractual clauses.
Cookies
We set a session cookie when you sign in, which is needed for the dashboard to work. The playground remembers your last setup in your browser's local storage. The bot check and the chat widget may set their own cookies to do their job. We don't use advertising or tracking cookies.
How long we keep it
Account, workspace and usage data are kept while your account exists. Sessions expire after inactivity. Rendered files are deleted when they expire, as described above. Billing records may be kept longer where tax law requires it. When you ask us to delete your account, we delete your personal data except what we must keep by law.
Your rights
You can ask us to access, correct, export or delete your personal data, or object to how we use it, by emailing hello@shotkit.net. If you're in the EU, the UK or another region with data protection laws, you can also complain to your local data protection authority.
Changes
If we change this policy, we'll update the date below, and tell you by email for significant changes.
Last updated: October 16, 2026.