Picshot — Privacy Policy

Last updated: 2026-05-13

Summary

Picshot does not collect, transmit, sell, share, or store any personal data. The extension runs entirely on your device. It does not have a server.

What Picshot does on your device

When you trigger the capture hotkey (Ctrl+Shift+Y / ⌘+Shift+Y) or click the toolbar icon, Picshot:

• Captures a PNG of the visible tab using the browser's built-in tabs.captureVisibleTab API.
• Renders an in-page overlay so you can select a region and annotate it.
• On your action, either copies the resulting image to the clipboard, saves it via the browser's downloads API, or opens a print preview.

The image never leaves the browser. There is no upload, no telemetry, no analytics, no remote logging, no crash reporting service, and no third-party SDK embedded in the extension.

What Picshot stores

Only your preferences (default action, image format) are saved, using the browser's local extension storage API (chrome.storage.local / browser.storage.local). This data stays on your device. It is never transmitted anywhere. You can clear it at any time from the browser's extension settings.

Permissions used and why

• activeTab — Capture the currently-visible tab pixels when you press the hotkey or click the action button. Limited to the tab you actively invoke Picshot on.
• scripting — Inject the in-page annotation overlay into the active tab.
• storage — Save your preferences (default action, image format) locally.
• downloads — Save the captured/annotated image to your Downloads directory when you click "Save".
• clipboardWrite — Copy the captured/annotated image to your system clipboard when you click "Copy" or press Ctrl+C.
• notifications — Show a brief notification when capture is blocked by browser-restricted URLs (chrome://, about:, the Web Store, etc.).

Picshot declares no host_permissions. It cannot read or modify any site without your explicit invocation on that tab.

Network access

Picshot makes no outbound network requests. The shipped build is audited against this guarantee (npm run audit:no-network). The extension's manifest contains no host permissions and the source contains no fetch, XMLHttpRequest, WebSocket, navigator.sendBeacon, or similar APIs.

Children

Picshot is a general-purpose utility and is not directed at children under 13. It does not collect any data from any user, including children.

Changes to this policy

If the privacy practices ever change, this document will be updated and the "Last updated" date at the top will reflect the change. Material changes will be communicated via the extension's store listing.

Contact

Questions: umerfarooqkhan325@gmail.com