Privacy Policy
Last updated 10 October 2026
This policy explains what personal data ScreenshotNeo (run by Yorker Media) collects, why, and what you can ask us to do with it.
What we collect
- Account: your name, e-mail address and a salted hash of your password (if you set one). Sign-in codes are stored only as hashes and expire after 10 minutes.
- API use: for each request, the URL you asked for, the options (without the values of headers, cookies or authorization you send), the result, timing and size. We keep the page title we read for your request log.
- Rate limiting and security: IP addresses of requests to the website and the demo, kept for up to two hours.
- Website visits: Google Analytics counts visits to our public pages (pages seen, referrer, rough location, device type). It never runs in your dashboard, on sign-in pages or on API requests.
- Where a sign-up came from: if you reached us by a link with campaign tags (
utm_…) or from another website, this browser tab remembers that, and we keep it with your account when you sign up: the campaign tags, the site you came from (without its query string) and the first page you opened. Nothing else about you. - Payments: handled by Dodo Payments. We receive the plan, amount, status and a reference, never your card details.
What we don’t do
We don’t sell data, we don’t use advertising cookies, and we don’t look at your screenshots except to fix a problem you report or to stop abuse.
Screenshots and files
By default screenshots are returned and not stored. They are kept only when you turn caching on (for the time you choose, up to 30 days) or when a JSON or async result needs a download link (24 hours). Kept files are stored in the European Union (with Cloudflare R2) and each one is deleted when its time is up. Each render runs in its own browser context, so no cookies or storage pass between customers.
Cookies
We set only the cookies needed to keep you signed in and to finish a sign-in. On the public pages, Google Analytics sets its own first-party cookies (_ga, _ga_*) to count visits; you can block them in your browser without losing anything. A remembered theme or code language stays in your browser’s local storage, and how a tab first reached us stays in that tab’s session storage until you close it.
Who helps us run the service
- Cloudflare (network and security, and storage in the European Union for kept result files)
- Our hosting providers (servers in Germany; our blog runs on a server in the United States)
- Dodo Payments (payments and tax)
- Google Workspace / Gmail (sending account e-mails)
- Google Analytics (visit statistics for the public website)
How long we keep data
Request logs: 90 days. Account data: while your account is open, then deleted within 30 days of closing it, except what we must keep for tax and accounting.
Your rights
You can ask for a copy of your data, correct it, or have it deleted by writing to hello@screenshotneo.com. We answer within 30 days.