This policy lists every cookie and every item of browser storage that www.screshot.com uses. They are all strictly necessary for something you asked for (signing in, keeping your keys, remembering a setting), so under EU rules (ePrivacy Directive, Art. 5(3)) they don't need consent, and we don't show a cookie banner.
We use no advertising, marketing or analytics cookies and no third-party trackers.
1. Cookies
| Name | Purpose | Set | Expires |
|---|---|---|---|
ss_session |
Keeps you signed in to the Screshot web app. HttpOnly, so page scripts can't read it. | After you sign in | 30 days |
ss_csrf |
Protects your account against cross-site request forgery: changes you make must carry this value. | After you sign in | 30 days |
oauth_state, oauth_verifier, oauth_next |
Completes sign-in with Google safely and returns you to the page you came from. | While you sign in | 10 minutes |
All cookies are first-party (set by www.screshot.com only), sent over HTTPS only, and never shared with anyone.
2. Other browser storage
| Name | Purpose | Kept |
|---|---|---|
screshot-e2ee (IndexedDB) |
Your encryption keys, themselves encrypted, so you don't have to unlock them on every page. Removed when you delete your account, or when you clear this site's data. | Until removed |
theme (local storage) |
Remembers light or dark mode. | Until removed |
screshot.locale (local storage) |
Remembers the language you chose in Settings, so pages open in it at once. | Until removed |
screshot.language-suggestion (local storage) |
Remembers that you followed or dismissed the suggestion to view the site in your browser's language, so it isn't shown again. | Until removed |
screshot:workspace-suggestion-dismissed (local storage) |
Remembers that you dismissed the suggestion to create a workspace. | Until removed |
screshot.signed-in (local storage) |
Remembers only that this browser was signed in last time (the value is 1, no email or ID), so app pages keep room for the menu while they load. Removed when you sign out. |
Until you sign out |
screshot:pending-key:… (session storage) |
Keeps a link's decryption key for a moment while you sign in to comment. | Until the tab closes |
3. How we count visits without cookies
Cloudflare, which delivers the Website, counts page views for us in aggregate (Cloudflare Web Analytics). It sets no cookies, stores nothing on your device and does not identify or follow you across sites. The uninstall survey sends only the reason you pick and the extension version; we keep daily totals, not who answered.
4. The Chrome extension
The extension has no analytics and no tracking. On your device it keeps only your sign-in token (in the browser's extension storage) so it can upload a screenshot when you choose to share one.
5. Removing them
Signing out removes the sign-in cookies; deleting your account also removes your keys from this browser. You can clear everything at any time in your browser's settings (site data for www.screshot.com). The site still works for reading; signing in will set the cookies again.
6. Changes
If we ever want a cookie that is not strictly necessary, we will ask for your consent first, with "Reject" as easy as "Accept", and update this page before it is used.
7. Contact
Questions: contact@screshot.com. More about the data we process: Privacy Policy.