Privacy Policy

Who we are

AppShotEditor (appshoteditor.com) is a browser-based editor for App Store and Google Play screenshots. It is made by Furvur Inc, which is the data controller for the personal data described in this policy. This policy explains what data we collect when you use the editor, an account, a paid plan or the Agent Skill, why we collect it, and what you can do about it.

You can use the editor without an account. If you do, your work stays in your browser and we do not receive your projects or images. If you sign in, we store your account and your projects on our servers so they sync between devices.

What we collect

If you do not sign in

Your projects, screens, images and settings are saved only in your browser's storage (IndexedDB and localStorage) on your device. We do not receive them. You can delete them at any time by clearing this site's data in your browser. We still receive the usage and log data described below.

Account data

You sign in with Google or GitHub. We do not use passwords. When you sign in, we store:

• Your name, email address and profile picture URL, as provided by Google or GitHub
• Which provider you used and your account id at that provider, plus the sign-in tokens the provider returns
• A session record that keeps you signed in
• Your plan, the storage you use, when you signed up, and your email preferences (see Email below)

Project content (signed in)

When you are signed in, the editor still saves to your browser, and it also copies your projects to our servers. This includes:

• Each project's content: screens, text, layers, layout, settings and small preview thumbnails
• Project details: name, number of screens, size and dates
• Images you upload (for example your app screenshots), with their file name, size, dimensions and type
• Projects you made in that browser before you signed in, which are uploaded once you are signed in

Uploaded images count against your plan's storage limit (25 MB on the Free plan, more on paid plans).

Agent Skill and API tokens

If you create an API token for the Agent Skill, we store a name for the token, when it was created, when it was last used, and whether you revoked it. We store only a one-way hash of the token, not the token itself, so we cannot show it to you again. Screenshots that the skill uploads with your token are stored in your account like any other upload. A layout that the skill sends to the editor is stored temporarily and expires after 24 hours.

Payments

Paid plans are handled by Stripe. You enter your payment details on Stripe's checkout and billing pages, not on our site, so your card details never reach our servers. When you start a checkout, we create a Stripe customer with your email address and your account id. We store your Stripe customer id, your subscription id, the subscription status and the end date of your current billing period, so we know which plan you are on. Stripe keeps your payment details, invoices and billing history under its own privacy policy.

Email

If you create an account, we add you to our email list so we can send account emails, such as a short getting-started series. We send these with Broadcast, an email platform that Furvur hosts itself at broadcast.furvur.com. We share only your email address, your name, your account id and your plan with it. Tips and tricks (marketing) emails are sent only if you opt in. You can change that choice at any time on your Account page. We record your choice and when you made it. Every email has an unsubscribe link, and if you unsubscribe, we turn off tips emails for your account too.

Usage and analytics

We use two analytics tools to understand how the site is used. They load on every page, including the editor. They receive information such as the pages you visit, the referring site, your browser and device type, and your approximate location derived from your IP address. They do not receive your projects or images.

• Plausible Analytics, which Furvur hosts itself at analytics.furvur.com. It runs on servers that Furvur rents from Hetzner. It does not use cookies and reports only aggregated statistics.
• Cloudflare Web Analytics, which Cloudflare adds to our pages. It does not use cookies. See Cloudflare's Privacy Policy.

Logs and security

Like any website, our hosting provider Cloudflare processes your IP address, browser information and the requests you make in order to deliver the site and protect it from abuse. Our own error logs can contain your account id, but we do not write your email address to them. To prevent abuse, we limit how often signed-in users can call some features. These limits are counted per account, not per IP address, and the counters expire within a few minutes. Cloudflare keeps its request and Worker logs for the periods set out in its own terms; see Cloudflare's Privacy Policy.

Fonts

We load fonts from Google Fonts. Your browser downloads them from Google's servers, so Google receives your IP address and browser information. See Google's Privacy Policy.

How we use your data

• To sign you in and keep you signed in
• To store and sync your projects and images, and to enforce your plan's storage limit
• To let the Agent Skill upload screenshots and open layouts in your account
• To take payments and know which plan you are on
• To send account emails, and tips emails if you opted in
• To understand how the site is used and improve it
• To keep the service secure and prevent abuse

We do not sell your data, and we do not use your projects or images for advertising. We do not show ads.

Who can see your data

Your projects and images are private to your account. A small number of authorized administrators can see an overview of accounts: name, email address, plan, subscription status, storage used, sign-up date, sign-in provider and number of projects. This overview shows account information only. It does not show project content or images, and our staff do not access your projects or images.

Where your data is stored and processed

• Cloudflare hosts the app on Cloudflare Workers. Account data and project details are stored in Cloudflare D1, project content and images in Cloudflare R2, and temporary data (Agent Skill layouts and rate-limit counters) in Cloudflare Workers KV. This data is hosted on Cloudflare's network. Cloudflare runs a global network, so your data can be processed outside your country.
• Google and GitHub handle sign-in when you choose them.
• Stripe processes payments for paid plans.
• Broadcast, hosted by Furvur at broadcast.furvur.com, sends our emails. It runs on servers that Furvur rents from Hetzner.
• Plausible Analytics, hosted by Furvur at analytics.furvur.com, measures site usage. It runs on servers that Furvur rents from Hetzner.
• Google provides Google Fonts.

Cookies and browser storage

We use only these cookies:

• Sign-in cookies (names that start with authjs): a session cookie that keeps you signed in, a security (CSRF) cookie, and short-lived cookies used during sign-in. They are needed for accounts to work. Sessions expire after 30 days without use.

The editor also uses your browser's storage (IndexedDB and localStorage) to save your projects and a few preferences, such as the last project you opened and whether you dismissed a notice. This data stays on your device. Plausible and Cloudflare Web Analytics do not set cookies.

How long we keep data, and how to delete it

• Delete your account. On your Account page you can permanently delete your account. This cancels any active subscription, then deletes your account record, sign-in records, sessions, API tokens, project records, and all your stored projects and images. It also asks Broadcast to erase your details. This cannot be undone.
• Delete a project. When you delete a project, it is deleted from our servers right away.
• Delete an image. You can delete uploaded images in your Account page's screenshot library. They are deleted from storage right away.
• API tokens. You can revoke a token at any time. A revoked token stops working at once; its record stays in your account until you delete the account.
• Everything else stays while your account exists. Agent Skill layouts expire after 24 hours.
• Stripe. Deleting your account cancels your subscription, but it does not delete Stripe's own customer record. Stripe keeps its customer and payment records under its own terms, for example as it is required to for tax and accounting.
• Backups. Deleted data can stay in our hosting provider's backups for a limited time before it is overwritten.

Your rights

Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you can ask us to:

• Tell you what personal data we hold about you and give you a copy
• Correct data that is wrong
• Delete your data (you can also do this yourself on your Account page)
• Stop sending you marketing emails (use the Account page or any unsubscribe link)
• Object to or restrict some uses of your data

There is no self-serve data export yet, so contact us for a copy of your data. We will not treat you differently for using these rights. You can also complain to your local data protection authority.

Children

AppShotEditor is intended for people who are 18 or older. We do not knowingly collect data from children. If you think a child has given us data, contact us and we will delete it.

Changes to this policy

We may update this policy when the service changes. We will change the "Last updated" date at the top of this page. If a change is significant, we will also tell signed-in users by email or in the app. Please review this policy and our Terms of Service each time you use AppShotEditor.

Contact

For questions about this policy or your data, or to make a request, including a request to see, correct or delete your data, email Furvur Inc at support@appshoteditor.com.