Privacy Policy

1. Who we are

SiteSnap ("SiteSnap", "we", "us") is a screenshot capture service for designers, operated by Eugene Riabov (nii.design). This policy covers everything that makes up the SiteSnap service: the Chrome extension, the Figma plugin, and the web app (including the gallery and account pages) at sitesnap.nii.design.

By using any part of the service, you agree to this policy. If you do not agree with it, please do not use SiteSnap.

2. What we collect

We collect the minimum needed to run the service:

• Account information. When you sign up or sign in with Google or Figma, we receive your email address, display name, and avatar from the provider you chose. We never see or store your password for those providers.
• Authentication data. Session tokens (access and refresh tokens) are stored locally on your device — in the browser extension's local storage or your browser's local storage — so you stay signed in. They are used solely to authenticate your requests to our backend.
• Content you capture. Screenshots you take are uploaded to your own private storage bucket and the related records (file name, size, dimensions, source page URL, capture date) are saved to your account so your gallery works. Your captures are private by default and visible only to you.
• Usage data. Basic counters tied to your account, such as the number of captures and storage used, so we can show usage stats and enforce plan limits.
• Support requests. If you contact us through the support form, we collect your name, email address, and the message you send, so we can respond.
• Technical data. Our hosting and backend providers log standard technical information (such as IP address, browser type, and timestamps) needed to operate and secure the infrastructure.

We do not collect your browsing history, monitor the pages you visit, log keystrokes, or capture anything without an explicit action from you. A screenshot is taken only when you trigger one.

3. How we use your data

• To provide the service: capturing, storing, and displaying your screenshots, and syncing them between the extension, the web gallery, and the Figma plugin.
• To authenticate you and keep your account secure.
• To show usage statistics and apply plan limits.
• To respond to support requests.
• To maintain, debug, and improve the service.

We do not sell or rent your data, use it for advertising, profile you, or use your data for any purpose unrelated to SiteSnap's single purpose: capturing and managing screenshots. We do not use your captures to train machine-learning models.

4. Cookies and local storage

SiteSnap uses only essential cookies and browser local storage. They keep you signed in (session tokens), remember basic preferences, and record that you have seen our cookie notice. We do not use advertising, analytics, or cross-site tracking cookies.

Because these are strictly necessary for the service to function, they cannot be switched off while using SiteSnap. You can remove them at any time by signing out and clearing your browser storage.

5. Where your data is stored

Your account data and captures are stored with our backend provider, Supabase, on secure cloud infrastructure. Files are kept in private, per-user storage buckets and database access is protected by row-level security, so your data is accessible only to your authenticated account.

For users in the Russian Federation: in accordance with Federal Law No. 152-FZ "On Personal Data", the personal data of citizens of the Russian Federation is recorded, systematized, accumulated, stored, and updated using databases located on servers within the territory of the Russian Federation.

6. Third-party services

We rely on a small number of providers to run SiteSnap, each of which processes data only as needed to deliver the service:

• Supabase — database, authentication, and file storage for your account and captures.
• Google — optional sign-in with your Google account (OAuth). We receive only your basic profile (email, name, avatar); we access nothing else in your Google account.
• Figma — optional sign-in with your Figma account and the SiteSnap Figma plugin, which accesses your captures only when you use it.
• Vercel — hosting for the website and web gallery, including standard server logs.

These providers act as processors on our behalf and are bound by their own security and privacy obligations. We do not transfer your personal data to any other third parties, except where required by law.

7. Data retention and deletion

We keep your data for as long as your account exists. You can delete individual captures at any time from your gallery — deletion removes both the file and its database record.

If you delete your account (or ask us to via the support page), we delete your account record, your captures, and associated data from our systems. Residual copies in encrypted backups are purged on the backup rotation schedule. Support correspondence may be retained for a reasonable period for record-keeping purposes.

8. Your rights

Depending on where you live (including under the GDPR for users in the EU/EEA and Federal Law 152-FZ for users in Russia), you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data ("right to be forgotten");
• export your data in a portable format;
• restrict or object to processing;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us through the support page. We respond to verified requests within 30 days.

9. Security

All traffic between your device and our servers is encrypted with TLS. Captures are stored in private buckets that require authentication; database access is restricted with row-level security; and session tokens are stored only on your device. No method of transmission or storage is 100% secure, but we work to protect your data using current industry practices, and we will notify affected users without undue delay if we become aware of a breach involving personal data.

10. Children

SiteSnap is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the service evolves. When we do, we will update the effective date above; for material changes we will additionally notify you in the app or by email. Continued use of SiteSnap after changes take effect means you accept the updated policy.

12. Contact

Questions about this policy or your data? Reach us through the support page — choose the "Privacy & data" topic and we will get back to you.