Legal

Privacy Policy

Effective date: April 30, 2026 · Last updated: September 30, 2026

At Maxisnap, your privacy matters. This policy explains what data we collect, why we collect it, and how we protect it. We've written it in plain language because legal jargon helps no one.

The short version: We collect product analytics and the account data we need to operate Maxisnap. Your screenshots are yours. We don't sell your information, run advertising on it, or share it with data brokers. You can turn telemetry off in Settings.

1. What Data We Collect

Account information

When you create a Maxisnap account, including a free account, we store your email address, profile, plan, and Studio entitlement. For paying accounts we also store Stripe customer and subscription identifiers, payment status, and renewal dates. Stripe handles payment-card details; we do not store full card numbers or security codes.

Signing in with Google

Choosing "Continue with Google" on the login or sign-up page sends you to Google to authenticate. Google then returns your Google account ID, the email address on that account, whether Google has verified that address, and the display name. We store the account ID and the email address so we can recognise your Maxisnap account the next time you sign in, and we use the display name to fill in your profile. We do not receive your Google password, we do not store your Google profile picture, and we do not request access to Gmail, Drive, Contacts, or any other Google service. What Google records about the sign-in is covered by Google's privacy policy.

Signing in with Google is optional — an email address and password give you the same account. To disconnect it later, remove Maxisnap under your Google account connections, and set a password in your dashboard settings first so that you can still sign in.

Signing in with Apple

Where available, Sign in with Apple is optional. Apple returns an account identifier, your verified email address or a private relay address, and your name when you choose to share it. We store these details to recognise your account. We never receive your Apple password.

Apple refresh tokens are encrypted on our server so we can revoke access when you delete your account. If revocation fails, the encrypted token and the identifiers needed to retry are retained until the retry succeeds, then deleted. Your Apple token is never stored in the desktop app.

Product analytics and crash reports

The Maxisnap desktop application collects telemetry to help us understand how the app is used, diagnose bugs, and improve the product. This includes:

  • Application version, install ID, session ID, and update status
  • Windows or macOS version, device class, monitor count, resolution, DPI scaling, locale, and time zone
  • Feature usage events such as capture mode, annotation tool, upload results, settings views, and update checks. Upload events can include the destination hostname, but not the file URL, path, or query string.
  • Crash diagnostics such as exception type, stack hash, app version, and a short list of recent in-app actions
  • Server-derived country, region, city, and network provider, plus your IP address and a salted hash for support, abuse prevention, and analytics. Full IP addresses are restricted to private operator records. Hashed identifiers are pseudonymous, not a guarantee of anonymity.
  • For signed-in users, account identifiers such as email address, user ID, and plan tier so we can link app usage to your account for support and analytics

Usage starts with a random install ID. When you sign in and prove ownership of that install, we can associate its retained earlier events and later usage with your account for support and analytics.

Telemetry opt-out

In Windows v2.5.2 and later, and in the Mac app, turn off "Share usage stats" in Settings to stop optional usage and crash telemetry and discard queued optional events. This does not stop account, upload, billing, or update requests needed for features you use. Website analytics have separate controls described below.

Local troubleshooting logs stay on your device. When you submit a bug report, you choose whether to attach diagnostics, recent actions, or a screenshot. Sending a report does not require an attachment or enable optional telemetry. In the Mac app, a report sent after a crash includes the crash summary and the app's recent log lines, which contain no captures, file paths or passwords; the dialog says so before you send, and Save to File lets you read them first.

What optional telemetry does not collect

  • The visual contents of your screenshots
  • Your browsing history or activity outside of Maxisnap
  • Personal files on your computer
  • What you type, and the contents of your screen — the desktop app does not log keystrokes and does not record your screen except when you explicitly start a recording
  • Information from other applications running on your device

These exclusions apply to optional telemetry. Content you choose to upload or attach to a bug report is sent for that purpose. Website analytics are covered separately below.

2. Screenshots and Uploads

Your screenshots are not stored on our servers unless you explicitly choose to upload them.

When you capture a screenshot, it exists only on your local machine. If you choose to upload via Maxisnap Cloud (the built-in shareable-link feature), the image is uploaded to our Cloudflare R2 storage to generate the link. Specifically:

  • Retention. Free uploads expire after 30 days. Paid uploads have no fixed expiry; cancellation changes account features and future upload allowances but does not automatically delete existing paid uploads.
  • Access. Public uploads can be viewed by anyone with their unique link. Private uploads require the owner's signed-in account. Featuring an upload on your public profile is a separate, optional setting.
  • Deletion. You can delete uploads from your dashboard. Successful deletion permanently removes the hosted file. If storage is temporarily unavailable, deletion remains pending and is retried; the dashboard reports the failure.

If you use Studio's "Add Your Own Server" feature to upload to your FTP, SFTP, S3-compatible, or HTTP endpoint, your screenshots are sent directly to your infrastructure and never pass through our servers. Studio gives you complete control of where the bytes go.

3. How We Use Your Data

We use the data we collect to:

  • Provide and maintain the Maxisnap service
  • Process Pro subscription and Studio one-time payments via Stripe
  • Send transactional account emails (password resets, subscription confirmations, and account security warnings)
  • Send occasional product update notices to Pro customers (you can opt out)
  • Improve application performance and features based on aggregated usage patterns
  • Diagnose and fix bugs using crash reports and stack traces

We do not use your data for advertising. We do not sell, rent, or share your personal information with third parties for their marketing purposes. We do not participate in cross-site advertising networks or behavioral-ad bidding.

4. Payment Data — Stripe

Pro subscriptions and Studio purchases use Stripe-hosted Checkout with Stripe Managed Payments. For these transactions, the Stripe entity identified at checkout (currently Link) acts as merchant of record and independently handles the transaction, supported tax obligations, payment credentials, fraud screening, disputes, receipts, and transaction support. Sensitive payment details go directly from your browser to Stripe over an encrypted connection; they do not pass through Maxisnap's servers, and we do not see, log, or store full payment-card numbers or security codes.

Maxisnap stores only the Stripe identifiers and transaction facts needed to provide access, reconcile billing, prevent duplicate processing, support refunds, and keep required financial records. These can include customer, Checkout Session, subscription, invoice, PaymentIntent, charge, refund, and dispute identifiers; amount, currency, status, and timestamps; and the email associated with your Maxisnap account. We do not copy payment-card details into the Maxisnap database. Read Stripe's own privacy practices at stripe.com/privacy.

5. Data Sharing

We do not sell your personal data. We share limited data with the following service providers, only to operate the Service:

  • Stripe and Link — Stripe-hosted Checkout, merchant-of-record transaction services, supported tax handling, fraud and dispute management, receipts, refunds, transaction support, and the customer billing portal
  • Cloudflare — CDN, DNS, R2 storage for shared images, D1 database for accounts, and Workers compute for the API
  • Resend — transactional account email delivery for password resets, subscription confirmations, support messages, and security notifications. Stripe or Link sends payment receipts and transaction-level billing notices for Managed Payments transactions.
  • Google (sign-in only) — used solely when you choose "Continue with Google". Google authenticates you and returns the account details listed in section 1. Signing in with an email address and password does not involve Google.
  • Apple (sign-in only) authenticates you only when you choose Sign in with Apple and returns the account details described in section 1.
  • Google Analytics 4 — aggregated website usage analytics on maxisnap.com. Configured with IP anonymisation on and Google advertising features off, so your visit is not used to build advertising audiences.
  • Clicky — website usage analytics, click heatmaps, and download/signup goal tracking on maxisnap.com. Clicky's script is served from maxisnap.com. If you sign in, your username and display name are attached to your Clicky session so we can support your account; your email address is not sent to Clicky.

Those two are the only analytics providers on the website. We do not use a session-replay or screen-recording tool on maxisnap.com. We previously used Microsoft Clarity for heatmaps and session replay; it was removed on August 6, 2026 and no longer loads on any page.

Consent. If you are visiting from the EU, the EEA, the United Kingdom or Switzerland, neither analytics provider loads until you choose "Allow" on the banner we show on your first visit. Choose "Decline" and nothing is loaded at all. Your choice is remembered in your browser's local storage (under ms_analytics_consent) and nowhere else — to change it, clear your site data for maxisnap.com and the banner will appear again. To decide whether to show the banner we ask our own server for the country code Cloudflare associates with your connection; that single lookup returns only a country code, is not logged, and no IP address is stored.

Outside those countries, analytics load as described above without a banner. Wherever you are, both providers can also be blocked with any standard content blocker or by disabling JavaScript, and neither is required for the site to work. If you would like your website analytics data deleted, email privacy@maxisnap.com.

These providers are contractually obligated to use your data only to provide services to us and to protect your information. We may also disclose data if required by law (for example, a valid subpoena) or where we believe disclosure is necessary to protect the safety of users or the integrity of the Service.

6. Cookies

The Maxisnap website uses minimal cookies:

  • Essential cookies. Required for the website to function (for example, the session cookie for Pro account login).
  • Analytics cookies. Site usage analytics (Google Analytics 4 and Clicky) to help us improve the website experience. Both are described in the Data Sharing section above.

We do not use advertising cookies, retargeting pixels, or any third-party tracking beyond the two analytics providers named above, and we do not run a session-replay tool. The desktop application does not use cookies; it stores its own settings locally on your machine.

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/HTTPS), encrypted storage at rest for sensitive data, hashed passwords, salted one-way hashing for analytics IPs, and access controls on our admin systems. Stripe's PCI-DSS Level 1 infrastructure handles all card data. However, no method of electronic transmission or storage is fully secure, and we cannot guarantee absolute security. If we ever experience a security incident that affects your data, we will notify you and the appropriate regulators in accordance with applicable law.

8. GDPR Rights (EEA, UK, Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under GDPR and equivalent laws:

  • Right to access. Request a copy of the personal data we hold about you.
  • Right to rectification. Request correction of inaccurate data.
  • Right to erasure. Request deletion of your personal data.
  • Right to portability. Request your data in a machine-readable format.
  • Right to object. Object to processing for specific purposes.
  • Right to restrict processing. Request that we limit how we use your data.
  • Right to withdraw consent. Withdraw consent for any processing based on consent.
  • Right to lodge a complaint. Complain to your local data-protection authority.

9. CCPA / CPRA Rights (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and the California Privacy Rights Act:

  • Right to know. Know what personal information we collect, the sources we collect it from, the purposes for collection, and the categories of third parties with whom we share it.
  • Right to delete. Request deletion of personal information we hold.
  • Right to correct. Request correction of inaccurate information.
  • Right to opt out of sale or sharing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do use the two website analytics providers named in the Data Sharing section; you can block them with any content blocker, and you can ask us to delete your analytics data by emailing privacy@maxisnap.com.
  • Right to non-discrimination. We will not deny you service or charge you a different price for exercising these rights.

To exercise GDPR or CCPA rights, email privacy@maxisnap.com from the address on your account. We will respond within 30 days (45 days for some CCPA requests, where allowed). We may need to verify your identity before fulfilling certain requests.

10. Data Retention

  • Account data. Retained while your account is active, plus 30 days after deletion to handle billing reconciliation and accidental-deletion recovery.
  • Maxisnap Cloud uploads. Free-tier uploads retained 30 days; paid-tier (Pro and Pro Plus) uploads kept while your subscription is active. You can delete sooner at any time.
  • Analytics data. Aggregated analytics retained up to 24 months. Event-level desktop telemetry retained only as long as needed for product analysis, debugging, and abuse prevention — typically up to 12 months.
  • Crash reports. Retained for 12 months to allow us to correlate recurring issues across releases.
  • Billing records. Retained for 7 years where required by tax and accounting law.

11. Children's Privacy

Maxisnap is not directed at children under 13. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 13, we will delete it promptly. Parents or guardians who believe their child has used Maxisnap can email privacy@maxisnap.com to request deletion.

12. International Data Transfers

Maxisnap's infrastructure is hosted on Cloudflare's global network. Your data may be processed where Cloudflare and our service providers operate. Stripe and Link separately process Managed Payments transaction data in their independent merchant-of-record role. Each provider applies the data-transfer safeguards described in its own privacy terms; where Maxisnap acts as controller, we use the safeguards required by GDPR for transfers from the EEA.

13. Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will notify Pro and Studio customers by email and update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

14. Contact Us

If you have questions about this privacy policy or how we handle your data:

Terms of Service Refund Policy FAQ Contact Us