Browser extension
privacy policy

This policy explains how Allscreenshots collects, uses, stores, and shares information through its Chrome and Firefox browser extensions. It supplements our general Privacy Policy for the Allscreenshots website and service. For questions or privacy requests, contact [email protected].

The extension creates screenshots using Allscreenshots servers. A capture sends the selected page URL and capture options to our service; it is not a local screenshot of your browser. You need an Allscreenshots account or API key and available capture credits.

The extension reads the active tab URL to show the page you can capture. When you request a capture, it sends that URL and your selected options, such as viewport, timing, element selectors, styling, and interactive actions, to the Allscreenshots API. URLs and options can contain personal information you include. The rendered website content becomes part of the resulting screenshot or other requested output.

Sign-in uses Allscreenshots authentication, including Google or GitHub, or an API key you provide. We process account and organization identifiers, authorization tokens, and usage information to authenticate requests, select your organization, show credits, and provide capture history. The extension does not receive your Google or GitHub password.

Browser extension storage keeps authentication credentials, selected organization, saved capture defaults, recent and pending capture references, and feedback invitation state. Capture references can include source URLs, result references, and error information. The extension does not collect a general history of sites you visit.

Our service processes operational information such as IP addresses, request times, request identifiers, errors, and credit usage to operate and secure the service, diagnose failures, and prevent abuse.

Session sharing is off until you enable it and accept the disclosure and browser permissions. It allows our rendering service to access a page you are signed in to. The extension can send cookies applicable to the selected URL, including login and HttpOnly cookies, the selected origin’s localStorage and sessionStorage, and authentication headers observed for that origin. This information can contain sensitive credentials and grant access to private account content.

Permission for the current host and its parent hosts allows the extension to read shared login cookies applicable to the page. It does not copy unrelated sites’ sessions. Session data is used to render your requested capture in a temporary browser; it is excluded from stored request options, and these captures bypass the shared screenshot cache.

The extension keeps observed authentication headers in memory, discards them after collection, and does not persist site cookies or browser storage in extension storage or pending capture records. Sharing ends on navigation, tab closure, permission revocation, sign-out, or after five minutes. Browser site permissions can remain granted until you revoke them.

The resulting screenshot or output may still contain private information after session sharing ends. It follows the same storage and deletion rules as other captures. Enable sharing only for content you want Allscreenshots to process.

If you submit feedback, we receive your message, optional rating, account or organization reference, and any follow-up contact preference. We store this information to read and respond to feedback and improve the service. Do not include passwords, API keys, or other secrets in feedback.

A local counter records completed captures and whether you have seen or dismissed the feedback invitation shown after ten successful captures. The counter is not browsing analytics and contains no credentials or browsing history. Submitting feedback is optional; on Firefox, you can decline the separate feedback-data permission and continue using capture features.

We use extension data to authenticate you, render and deliver requested captures, display results and usage, save your preferences, respond to feedback, and maintain service reliability and security. The extension contains no advertising or analytics code. We do not sell extension user data or use it for advertising or ad targeting.

Hosting, rendering, storage, authentication, and support or notification providers process information as needed to deliver these functions. Authorized members of your Allscreenshots organization may be able to access its captures. Staff access is limited to purposes such as providing support, investigating issues, security, and legal obligations. We may disclose information when required by law or necessary to protect users and the service.

The use and transfer of information received from browser APIs follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Information is used for the extension’s disclosed user-facing features and associated permitted support, security, and legal purposes.

The Allscreenshots website and dashboard are separate from the extension and may use cookies, analytics, and support tools described in our general Privacy Policy. Google, GitHub, and other service providers also have their own privacy policies. Service providers may process information outside your country.

Connections to the Allscreenshots API use HTTPS. Credentials are stored in browser extension storage so the extension can authenticate future requests. Access tokens expire and may be renewed using refresh tokens. Signing out clears local credentials and account or capture references and revokes the extension’s OAuth refresh token; it does not revoke an API key in your dashboard.

Screenshots, source URLs, and capture metadata are stored in your Allscreenshots organization according to your account’s retention settings or until you delete them. Recent and pending references may also be kept locally to display results and recover capture status. Saved defaults and feedback invitation preferences can remain locally until cleared or the extension is removed.

Feedback and service records are retained as needed to handle feedback and support, operate and secure the service, and meet legal obligations. Deletion of active records may not immediately remove copies from backups or records we must retain for legal or security reasons. Contact us about retention or deletion of your information.

You can use public-page captures without sharing a site session. Turn off “Use this site session” to stop sharing and revoke access for the current site. In Settings, “Manage site access” lets you review and revoke previously approved sites. You can also manage extension permissions in your browser.

Delete stored captures in the Allscreenshots dashboard gallery. Revoke API keys in the dashboard when you no longer need them. Sign out to remove extension credentials. Uninstalling removes the extension’s browser storage but does not delete captures or other records held by Allscreenshots.

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of your personal information, restrict or object to processing, withdraw consent, or complain to a privacy regulator. Send requests, including account or feedback deletion requests, to [email protected]. We may need to verify your identity before acting on a request.

We may update this policy as the extension or service changes. The date at the top identifies the latest revision. Where required, we will provide additional notice or request consent for material changes.

Allscreenshots is responsible for the processing described in this policy. Contact [email protected] for privacy questions and requests, or [email protected] for help using the extension.