Privacy policy

Last updated 9 November 2026

Who we are

Fullshot is made by practical.tools ("we", "us"). This policy covers the Fullshot Chrome extension and the share site at fullshot.practical.tools. Questions go to info@practical.tools.

What stays on your computer

Everything you capture or record is stored in your browser's own storage on your computer: the images and videos, your edits and notes, the text read from the page so you can search it, and your settings. None of it is sent to us. Uninstalling Fullshot or deleting a capture removes it.

To capture a page, Fullshot reads that page in the tab you're on, at the moment you ask. It doesn't watch your browsing, and it doesn't read pages you don't capture.

Usage data

To find out what works, what breaks and what people never find, Fullshot and this site send usage data to PostHog, an analytics service.

From the extension, under the random install ID described below:

• which features you use and when: captures and their type, the editor's tools, copying, saving and the file type, making and removing links, notes, the tour, settings you change (for switches and menus, the new value; for typed settings, only which one changed), and Premium prompts and activation;
• how captures go: how long they took, their size in pixels, whether they worked, Fullshot's own error message if they didn't, and the domain of the site (for example "github.com", never the full address), so we can fix sites that don't capture well;
• errors in Fullshot's own pages, with addresses and email addresses removed;
• Fullshot's version, your plan (free or Premium), your browser's language, how many days since you installed it, and an approximate location (country and city) that PostHog works out from your IP address. The IP address itself is discarded, not stored.

Never sent: your screenshots or recordings, the text, title or full address of any page, what you write in notes, your license key, or anything about pages you don't capture.

To turn it off, open Fullshot's Settings and switch off Help improve Fullshot. Nothing more is sent from then on.

On this site, PostHog records the pages you view, what you click, where you came from and your browser and device type. It uses no cookies: it counts visitors with a daily-changing value worked out from the request, which isn't stored, and doesn't record location. On the home, Terms and Privacy pages it also records how you move around the page (session replay), with anything you type hidden. On shared links it records only page views and button clicks, with all text hidden and no replay, so a shared screenshot, its notes and names never reach PostHog.

When you remove Fullshot, Chrome opens a page here asking why. Opening it records that Fullshot was removed, under the install ID; your answer, if you send one, is kept with it. With usage data turned off, the page doesn't get the install ID.

We use usage data only to improve Fullshot, look at it in aggregate or per install (never per person, since we don't know who you are), and don't sell it or use it for ads.

When you share a link

Clicking Get link uploads one capture so other people can open it. For that link we store:

• The file (screenshot or video) and, for videos, a still image used in link previews.
• Details shown on the page: the capture's title, the address it was captured from, its size, and when the link was made and ends.
• A link record: the link's ID, its type and size, when it was made and ends, and a scrambled form of the IP address it was made from (see below). For a video link, also a scrambled form of Fullshot's install ID and whether it was made with Premium.
• With Premium, if you choose them: a password for the link, stored only as a hash we can't read back, and your branding: the logo, name and web address you set in Fullshot's settings.

The file and everything shown on the page are deleted when the link ends: after 24 hours on the free plan, after up to 30 days with Premium, or as soon as you take it down or delete the capture. The link record is kept until 30 days after the link ends, so limits keep working, and then deleted.

Anyone who has the link can open it. Links aren't listed or indexed anywhere, but treat them like any address you send around.

Password-protected links

With Premium, a link can have a password. We store it only as a one-way hash, with the link, and delete it with the link. When someone enters the right password, the share site sets a cookie in their browser that opens that one link until it ends; it's the only cookie Fullshot sets, and it isn't used for anything else. Each wrong try stores a scrambled form of the visitor's IP address for a day, to stop guessing.

Notes and live cursors on shared links

People who open a link can leave notes. A note stores what they wrote, the name they typed (if any), where it's pinned, when it was left, and a scrambled form of their IP address used only to limit how fast notes can be posted. Notes are deleted together with the link.

While people have a link open, their cursor position and the name they typed are sent live to the others looking at it. This isn't stored anywhere; it ends when they close the page. To make this work, share pages load a small script from jsDelivr, a public code host, which sees the viewer's IP address like any website would.

Reports

Anyone can report a link. A report stores the link, the reason, any details written, and a scrambled form of the reporter's network address, so one network can only report a link once. Reports are kept for 30 days. Enough reports from different networks hide a link until we review it.

About scrambled IP addresses and install IDs

Where we mention one, we don't store the IP address itself. We store a one-way, keyed hash of it (for IPv6, of the first half, which identifies a network rather than a device). We use it only to enforce limits and stop abuse, and it's deleted on the schedules above.

When it's installed, Fullshot makes a random install ID. It isn't linked to your name, your Google account or your browser, and it changes if you reinstall. Fullshot sends it with usage data (unless you turn that off), when you share a video, so the free plan's one live video link works per install rather than per network, and with Premium license checks (see below). For a video link we store a keyed hash of it in the link record, deleted with that record.

Premium and payments

Premium is sold through Gumroad, which handles the payment and your card details under Gumroad's privacy policy. As the seller, we see the email address and order details Gumroad shares with sellers, and we use them only to help with your purchase.

Your license key is stored in Fullshot's settings on your computer. Fullshot sends it to our share site when you unlock Premium, about twice a day to check it's still valid, and with Premium requests such as a longer-lived link. The share site asks Gumroad whether the key is valid and remembers the answer for a few minutes. To keep each key to 2 computers, it stores a hash of the key and a hash of each computer's random install ID, with when that computer last used it. That record is deleted when you click Remove key, or after 60 days without use. We don't connect it to your captures.

Services we use

• Supabase stores shared files, link records, notes and reports, in the European Union, and carries live cursors.
• Vercel runs the share site. Its servers handle requests in the United States, and its network serves pages worldwide.
• Gumroad sells Premium and checks license keys.
• PostHog receives and stores usage data, in the United States.
• Google distributes the extension through the Chrome Web Store.

Like most hosts, Vercel and Supabase keep short-lived request logs, which include IP addresses, to run and secure their services.

What we don't do

We don't show ads, and don't sell or rent any data. We don't track you across other sites. We don't use your captures or notes to train anything, and they're never part of usage data.

Your choices and rights

You can take down any link you shared, at any time, from the editor or the library; its file and notes go at once. Depending on where you live, you may have the right to ask what we hold about you, to correct it, or to have it deleted. Because we don't have accounts, most of what we hold can't be tied to you, but write to info@practical.tools with a link or receipt and we'll help.

Children

Fullshot isn't directed at children under 13, and we don't knowingly collect anything from them.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change affects how we handle shared links or payments, we'll also say so on this site before it takes effect.