Legal

Privacy Policy

Effective October 3, 2026

Shotshot is a local-first creative application. This policy explains what information our hosted services process when you sign in, subscribe, connect a device, or use cloud-powered features.

Information we process

• Google account details you authorize, such as your email address, display name, and profile image.
• Subscription, transaction, and customer identifiers supplied by Stripe.
• Device session details, plan entitlements, credit balances, and aggregate cloud usage records.
• Security and operational records needed to prevent abuse, diagnose errors, and operate the service.

Local projects and provider keys

Shotshot projects and creative context are designed to stay on your device unless you deliberately send content to a connected cloud or AI provider. API keys you add for your own providers are stored in the desktop environment and are not part of your Shotshot web account.

Website analytics

This website can load Google Analytics 4 to measure aggregate page views (which pages are visited and from which country). GA4 sets first-party cookies and may send your IP-derived (roughly geolocation) data to Google. You can block this with browser cookie settings or a content blocker; the site works fully without it. The desktop application itself never loads Google Analytics.

How we use information

We use account data to authenticate you, link desktop sessions, provide subscriptions and usage balances, deliver requested features, protect the service, and respond to support requests. We do not sell personal information or use Google account data for advertising.

Service providers

We use Google for sign-in, Supabase for account and service data, Stripe for payment processing, and Vercel for web and API hosting. Each provider processes information under its own privacy terms and our service configuration.

Retention and your choices

We retain information while your account is active and as reasonably necessary for billing, security, dispute resolution, and legal obligations. You may revoke Google access from your Google Account and ask us to access, correct, or delete account data, subject to records we must retain.

Contact

For privacy questions or account requests, email mr.foow@gmail.com.