Shotdex is a Chrome extension that captures screenshots of web pages and lets you edit them. This policy explains exactly what data it handles, what stays on your computer, and what is sent to us.
Shotdex is operated by Syntaximos LLC, 30 North Gould Street, Sheridan, WY 82801, United States ("we", "us"). You can reach us at support@syntaximos.com or through https://syntaximos.com/contact.
What this policy covers. This policy is about the Shotdex Chrome extension — the software that runs inside your browser. Our general privacy policy at https://syntaximos.com/privacy-policy covers the Syntaximos website and your Syntaximos account, including what our website collects when you visit it. Where the two overlap, this policy is the more specific one and governs the extension's behaviour. Nothing described on this page applies to our website, and nothing described in the general policy describes anything the extension does.
The short version
- Your screenshots never leave your device. Every image Shotdex captures is rendered and stored on your own computer, in the browser's local database. We have no copy of it, no ability to see it, and no server that receives it.
- The pages you visit are not tracked. The extension does not read, log, or transmit the contents, URLs, or history of the pages you browse. It only touches a page at the moment you ask it to capture that page.
- Shotdex requires a free account, so we do hold your email address and the fact that you have a Shotdex licence. Your email address and your licence status are the only personal data the extension ever causes us to hold.
- No analytics, no tracking pixels, no advertising, no third-party scripts are present in the extension.
- We never sell your data, and we never share it for anyone else's advertising or marketing.
1. What is stored on your device, and only on your device
The following never leaves your computer. It is not backed up to us, not synced between your machines, and not readable by us.
1.1 Your captures
Every screenshot is written to an IndexedDB database named shotdex inside your Chrome profile. Each capture record contains:
| Stored | What it is |
|---|---|
| The image | The captured screenshot, as an image file |
| A thumbnail | A small version, used to draw the library grid |
| Page URL | The address of the page you captured |
| Page title | The title of the page you captured |
| Favicon | The page's icon, copied into the record as an image |
| Capture settings | The mode used (full page, viewport, element, region), the resolution, corner radii, padding, viewport size, page theme colour and colour scheme |
| Timestamp | When the capture was taken |
The page URL, title and favicon are stored so the editor can name your exported file and fill in the browser-mockup frames with the real address bar and icon of the page you shot. They are used for that and nothing else, and they are never transmitted.
Alongside the captures, the same local database holds your collections, your saved design presets, and the design settings attached to each capture.
1.2 Your settings
Chrome's local extension storage holds your chosen capture resolution and your chosen element padding.
1.3 Your sign-in state
Chrome's local extension storage also holds a small record of your sign-in: your account's user ID, whether your licence is active, when it was last checked, and a one-way SHA-256 hash of your session token used to detect that the session changed. Your email address and name are not written to disk by the extension — they are read from your session for display in the extension's own interface and are discarded when the browser closes.
1.4 Deleting all of it
Removing Shotdex from Chrome deletes all of the above. You can also clear captures at any time from the Shotdex library, without uninstalling.
2. What is sent to our servers
Shotdex contacts exactly one service: our own, at syntaximos.com and api.syntaximos.com. It contacts no other server for any reason. These are the complete set of requests it makes:
| When | What is sent |
|---|---|
| You click "Sign in" | A request for a one-time handshake code. Nothing about you is sent. |
| You complete sign-in | The handshake code, plus your syntaximos.com session cookie, so we can attach the browser to your account. |
| On install, on browser start, and roughly every 6 hours | Your account's user ID and the word shotdex, so we can answer whether your licence is active. |
| You click a locked Pro feature | Your browser opens our pricing page with a parameter naming which feature you clicked (for example ?from=export-scale), so we can see which features people want. This is an ordinary page visit that you initiate by clicking. |
No screenshot, no page URL, no page title, no page content, and no browsing history is included in any of these requests. There is no other outbound request in the extension.
2.1 Requests to the site you are capturing
When you take a capture, Shotdex downloads that page's own favicon from that page's own server so it can store the icon with your capture. This is an ordinary request for a public icon, sent to the site you are already visiting, and carries no information about you or about Shotdex.
3. Your account
A free Shotdex account is required to use the extension. When you register at https://syntaximos.com/register we collect:
- Your email address — used to identify your account, to carry your licence between your machines, to send you essential service messages (password resets, licence and receipt information), and to answer you if you contact support.
- Your name, if you choose to provide one.
- A password, which is stored only as a salted one-way hash. We cannot read it.
3.1 Marketing email
At signup you choose whether you want product news and updates. If you say no, we send you only essential service messages. If you say yes, every email we send carries a one-click unsubscribe link, and unsubscribing takes effect immediately. We do not pass your email address to anyone else for their own marketing, ever.
3.2 Payment
Shotdex Pro is sold through our payment processor, Stripe. Your card details go directly to Stripe and are never seen by, sent to, or stored on our servers. We keep only the fact that a purchase succeeded and what it entitles you to. Stripe's privacy policy is at https://stripe.com/privacy.
3.3 Deleting your account
You can delete your account at any time from https://syntaximos.com/dashboard, or by emailing support@syntaximos.com. Deletion is immediate: your email address, your name and your account record are erased from our systems as soon as the deletion is confirmed. The only thing we keep afterwards is a record of any completed purchase, for the period in section 4, because we are required to be able to account for money we have been paid. Deleting your account does not touch the captures on your own computer — those are yours, and you remove them by clearing the Shotdex library or uninstalling the extension.
4. How long we keep things
| Data | Retained |
|---|---|
| Your captures and designs | On your device, until you delete them or uninstall. Shotdex automatically removes older, unnamed captures to stay within your storage budget; anything you have named, starred or filed into a collection is never removed automatically. |
| Your account record and email address | Until you delete your account. |
| Purchase records | 1 year. Stripe keeps its own record of the transaction independently, under its policy. |
| Server request logs | 90 days, then deleted. |
5. Why Shotdex asks for each browser permission
Chrome shows a list of permissions when you install. Here is what each one is for, and what it is not used for.
debugger— This is what makes high-resolution capture possible. Shotdex uses Chrome's DevTools Protocol to re-render the page at the resolution you chose, which is the only way to produce a screenshot sharper than your own display. While a capture is being taken, Chrome shows a "Shotdex is debugging this browser" banner; it disappears when the capture finishes. Shotdex attaches only for the duration of a capture you asked for, and detaches immediately afterwards.- Access to all websites (
<all_urls>) — Screenshots are taken of whatever page you are on, so capture has to work on any site. Shotdex does not read, collect or transmit the content of the pages you visit. It touches a page only when you start a capture on it. activeTabandscripting— Used to place the element and region picker overlay onto the page, and to drive scrolling for full-page captures. This happens in the tab you are capturing, only after you start a capture.storageandunlimitedStorage— Used to save your settings and to store your captures locally. High-resolution screenshots are large files, and without the unlimited variant Chrome may silently discard your library to reclaim space.tabs— Used to read the title and address of the tab you are capturing, so your exported file can be named after it and the browser mockups can show the real address bar.contextMenus— Adds the four capture modes to the right-click menu.clipboardWrite— Used when you press Copy, to put the finished image on your system clipboard.cookies— Used to read one cookie, namedSYNSD, onsyntaximos.comonly, to tell whether you are signed in to your Shotdex account. Although the permission technically allows more, Shotdex reads no other cookie on any other site, and never transmits any cookie anywhere except back to our own service during sign-in.alarms— Used to re-check your sign-in status roughly every six hours, rather than on every capture, so our service is not contacted repeatedly.
6. What Shotdex does not contain
For the avoidance of doubt, the extension contains:
- No analytics or telemetry of any kind.
- No advertising, and no advertising identifiers.
- No third-party scripts, SDKs, tracking pixels, or fingerprinting.
- No remotely-loaded or remotely-executed code. Everything Shotdex runs is contained in the package you installed and reviewed by the Chrome Web Store.
- No screen recording, no video, no audio, no microphone or camera access.
7. Sharing and disclosure
We do not sell your personal information, and we do not share it for anyone else's advertising or marketing. We disclose personal data only:
- To the service providers who operate our infrastructure and payments on our behalf, and only to the extent they need it to provide that service.
- Where we are legally required to, such as in response to a valid legal request.
- To a successor entity in the event of a merger or acquisition, in which case this policy continues to apply to the data transferred.
8. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, to object to or restrict how we use it, and to withdraw consent to marketing email at any time. You can exercise all of these by emailing support@syntaximos.com, and we will respond within 30 days.
If you are in the European Economic Area or the United Kingdom, our legal bases for processing are: performance of a contract (holding your account so the extension works and your licence follows you), legitimate interests (keeping the service secure and working), and consent (marketing email, which you may withdraw at any time). You also have the right to complain to your local data protection authority.
If you are a California resident, you have the rights described in the CCPA/CPRA, including the right to know, delete, and correct. We do not sell or share personal information as those terms are defined by that law.
Where your data is processed
Syntaximos LLC is established in the United States, and the account data described in this policy is stored and processed there. If you use Shotdex from the European Economic Area, the United Kingdom, or elsewhere, the account data you give us is sent to and held in the United States, which may protect personal data differently from your own country. Your screenshots are unaffected by this: they never leave your device, so they are never transferred anywhere.
9. Children
Shotdex is not directed at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, email support@syntaximos.com and we will delete it.
10. Security
Traffic between the extension and our service is encrypted with HTTPS. Passwords are stored only as salted one-way hashes. Because your screenshots never reach us, there is no server-side store of your images that could be breached.
11. Changes to this policy
If we change this policy we will update the date at the top. If a change materially affects how we handle your personal data, we will tell you in the extension or by email before it takes effect.
12. Contact
Questions about this policy, or about your data: