Privacy

The validator never stores your file

A file dropped into the screenshot validator is read into memory, decoded to answer the questions on that page, and dropped. It is not stored in object storage, it is not written to a database, and its file name is not recorded anywhere. There is no session and no account involved, so there is nothing for it to be attached to.

That is a structural property rather than a policy: the code that answers that endpoint imports neither the storage client nor the database, and a test fails if a call to store anything ever appears in it.

Addresses are hashed before they are stored

Shipshot rate-limits its unauthenticated endpoints by network address so one caller cannot spend the machine. The address itself is never written down: it is combined with a server-side secret and reduced to a keyed hash, and it is that hash which becomes the counter’s key. The secret is what makes the hash irreversible in practice — an unsalted one would be a lookup table over the whole address space.

Counters expire on their own window — an hour at the longest — and nothing retains them afterwards.

What an account stores

• Your email address, so you can sign in and be told about your own exports.
• Your projects, their saved revisions, and the images you upload to them.
• Your exports and the archives they produced.
• A Stripe customer id, if you subscribe. Card details are held by Stripe and never reach Shipshot.

Uploaded images have their embedded metadata stripped on the way in, so a camera’s location tag does not survive into an export.

Guests

Opening the editor without signing up creates a guest account so the work has somewhere to live. It holds no email address and no name. It and everything in it are deleted automatically after a month of inactivity; signing up before then turns it into your account, in place, with nothing copied.

No training on your content

Shipshot does not train any model on customer content, and does not pass it to anyone who would. This is stated in the terms as a commitment, not only here as a description.

Deletion

Ask, and the account and everything under it is deleted — projects, revisions, uploads, exports and archives. Storage objects that no row references are swept separately, so nothing survives as an orphan.