Data Protection & Storage

Privacy Policy

Effective Date: November 6, 2026

Private Asset Storage

Screenshots and custom fonts live outside the public webroot and stream only to your authenticated session.

Zero AI Model Training

We never sell your project metadata or use your pre-release app screenshots to train machine-learning models.

Instant Self-Serve Purge

Delete any app or your entire account from Profile settings to permanently purge stored files and database rows.

1. Information We Collect

Account profile: Your name, email address, hashed password (or Google OAuth identifier when Google sign-in is used), and workspace preferences.
Project & asset data: App names, selected store devices, captions, uploaded mobile screenshots, custom background images, and uploaded .ttf/.otf/.woff/.woff2 font files.
Billing records: Optional company/VAT invoice metadata and Stripe customer/subscription identifiers. Raw payment card numbers are handled exclusively by Stripe and never touch ShotForge servers.

2. How Screenshot & Font Uploads Are Protected

All customer uploads are stored in private server directories outside public/ and served strictly through authenticated controller routes that verify project ownership before streaming bytes. Pre-release app UI captures are never assigned public unauthenticated URLs.

Final PNG and JPG store exports are composited directly inside your browser via HTML5 Canvas and OffscreenCanvas Web Workers, then packaged into a local ZIP download without persisting your exported archive on shared public storage.

3. Machine Translation Requests

When you trigger automatic caption translation in the editor or Bulk Caption Matrix, only the text segments of your source captions (not your screenshot images) are transmitted to the configured translation API (DeepL or Google Cloud Translation) to return localized strings.

4. Cookies & Session State

ShotForge uses strictly necessary HTTP-only encrypted session and CSRF-protection cookies to keep you signed in and protect form submissions. We do not embed third-party behavioral advertising networks or cross-site tracking pixels.

5. Data Retention & Self-Serve Deletion

You retain full control over your workspace lifecycle:

Deleting an individual screen, screenshot override, or custom font immediately removes its underlying file from private disk storage.
Deleting your account under Account → Profile permanently deletes your user record, apps, captions, invoice metadata, and all associated private uploads.

6. Contact & Privacy Requests

For data access, portability, or privacy questions, contact us at [email protected] .