Cookie Notice

This notice explains the cookies ScreenPolish uses. The short version: we use only what is strictly necessary to sign you in and keep the service secure — no advertising or cross-site tracking cookies. Our optional page-view analytics is cookieless; that does not by itself remove every privacy choice, so we describe below what it collects and how to opt out.

Strictly-necessary cookies

These cookies are essential for the service to work and cannot be switched off without breaking sign-in. They are set only after you choose to sign in:

• Session cookie — keeps you securely signed in as you move between pages, so you do not have to authenticate on every click.
• CSRF token cookie — protects the sign-in and account forms against cross-site request forgery.

These are first-party cookies and exist purely to operate the service. Removing them will sign you out.

No advertising or tracking cookies

We do not use advertising cookies, cross-site trackers, or third-party profiling cookies. We do not sell data or build advertising profiles. Because your images are processed entirely in your browser, there is no image tracking of any kind.

Analytics (all cookieless)

ScreenPolish keeps a small, first-party counter of a few product events (such as opening the editor or completing an export) to understand roughly how much the product is used. It is cookieless: it sets no cookies, stores no IP address or device identifier, and cannot identify you. It only increments per-day totals.

Separately, where enabled we use Umami — a self-hosted, open-source analytics tool running on our own infrastructure — to measure page views and the same small set of product events. Umami is cookieless too: it sets no cookies and does no cross-site tracking, and it never receives your screenshots or image data. It does, however, still process some data to count visits: it derives a temporary, non-reversible hash from your IP address, user agent, and the site id, and records coarse details such as approximate location (country, and where resolved, region and city), browser, operating system, device type, language, screen size, and the sanitized public page paths you view. It is never sent the referrer, the page title, query strings, URL fragments, or the path of any private page — we suppress those before anything is transmitted. These analytics records are kept for at most 90 days — a daily cleanup job deletes any older than that. The Privacy Policy describes exactly what it collects and why.

Being cookieless does not by itself remove every privacy choice. If you turn on your browser's “Do Not Track” setting, the tracker will not collect analytics for your visit; you can also block the analytics script. Umami is disabled entirely unless we have explicitly configured it.

Managing cookies

You can clear or block cookies in your browser settings at any time. Since we only use strictly-necessary cookies, blocking them will prevent you from staying signed in, but the editor itself remains usable without an account.

Contact

Questions about cookies? Email support@getscreenpolish.com.