Privacy Policy

Last updated: 8 October 2026

This policy explains what personal information Screencap collects, why, who handles it and what choices you have. Screencap is operated by Dharma Loop LLC, a Wyoming limited liability company in the United States ("we", "us"). We are the controller of your personal information (the organisation that decides how and why it is used). You can reach us at [email protected]. Screencap is open to people worldwide, and section 6a covers extra rights if you live in the UK, the European Union or the European Economic Area (EEA).

1. What we collect

  • Account information: your email address, an optional name and an optional profile image. You sign in with a one-time code sent by email, so we do not store passwords. We set a session cookie to keep you signed in.
  • Your content: recordings, screenshots, titles, transcripts (if generated), comments, and the metadata that goes with them, such as dates and durations.
  • Your OpenRouter key (only if you add one): stored encrypted, used only to make transcripts and summaries of your own recordings, and deleted when you remove it.
  • Viewing data: when someone watches a recording, we record the time, a random session ID stored in their browser, their approximate location (country, and region or city when available, worked out by Cloudflare from their IP address), and their browser, operating system and device type. We use this to show view counts and viewing analytics to the recording's owner. We don't store viewers' IP addresses with it.
  • Server logs: IP address, user agent and request details, used for security, abuse prevention and debugging. We keep them for a limited period.
  • Analytics: we run Umami and Matomo ourselves on our own server. They are cookieless and IP addresses are anonymised. The data is not shared with advertisers.
  • Reports and messages: if you report abuse, email us or use the support chat on our website, we receive what you send, including your name and email address if you give them. If you give an email address with a report, we use it to confirm we received the report and to tell you what we decided. The chat keeps a random visitor ID in your browser's local storage so it can show your conversation again. If you open the chat while signed in to the dashboard, it also sends us your account ID, email address and name so we can find your account.

2. How we use it

  • To provide the Service: sign you in, store, process and play your recordings, and show them to the people you share them with.
  • To send sign-in codes and notification emails.
  • To keep the Service secure, prevent abuse and fix problems.
  • To review abuse and copyright reports and enforce our Terms and Acceptable Use Policy.
  • To understand, in aggregate, how the site is used.
  • To respond to valid legal process and to meet legal duties, including reporting child sexual abuse material to NCMEC as US law requires.

We do not sell your personal information. We do not share it for advertising, and Screencap has no advertising.

2a. Who we share it with (service providers)

These companies process data for us to run the Service:

  • Cloudflare: DNS, CDN, DDoS protection, sending our emails (sign-in codes and notifications), email forwarding, and R2 object storage, where your recordings are stored in North America.
  • Hetzner: servers in Germany that host the app and its database.
  • Brevo: a backup for sending emails, used only if Cloudflare cannot send one.
  • TicketDM: runs the support chat on our website. Chat messages are stored on servers in Germany.
  • Telegram: used internally to alert us when an abuse report arrives, and to deliver support chat messages to our team. Alerts and chats contain what was sent, including an email address if one was given.

Transcripts and AI summaries (optional, your own OpenRouter account). If you add your own OpenRouter API key in Settings, the audio of your recordings is sent to OpenRouter, Inc. and the speech-to-text provider you choose there, and the transcript is sent to the AI model you choose, to make transcripts, titles, summaries and chapters. This happens under your OpenRouter account and their terms, and OpenRouter bills you directly. You can turn on "Zero data retention" to use only providers that don't keep your data. Without a key, nothing is sent.

We may also disclose information when a valid US legal process requires it, or when needed to protect people from serious harm.

2b. Our legal bases (UK and EU/EEA users)

If you are in the UK or the EU/EEA, the GDPR and UK GDPR require us to have a legal basis for each use of your information. Ours are:

  • Performance of a contract with you: running your account, signing you in, sending sign-in codes and notification emails, and hosting, processing and sharing your recordings as you ask.
  • Legitimate interests: keeping the Service secure, preventing abuse and moderating content, keeping server logs, cookieless analytics to understand how the site is used, and keeping backups. We use these only where they are not outweighed by your rights and interests, and you can object (see section 6a).
  • Legal obligation: responding to lawful requests, and reporting child sexual abuse material as the law requires.

We do not rely on consent for anything, and we do not use advertising or tracking cookies. The only cookie we set is the session cookie that keeps you signed in.

2c. End-to-end encrypted recordings

The Mac app has a setting, "End-to-end encrypt recordings", which is off by default. When it is on, each recording is encrypted on your Mac before it is uploaded. The key is in the part of the share link after the # sign (for example /s/abc123#k=...). Browsers never send that part of a link to any website, so it never reaches us. We store only encrypted data and we cannot watch these recordings.

We can still see: the recording's title, length and resolution, the account that made it, when it was made and viewed, comments and reactions, view counts, the list of segments the recording is made of, and the IP addresses of the people who load it, which appear in our server logs. This information is not encrypted.

When a browser opens a full link, it keeps that recording's key in that browser on that device, so the owner's dashboard can play the recording there. The key stays in that browser and is not sent to us.

If someone reports an encrypted recording, the report form lets them choose to include the key. If they do, we store it with the report and a moderator can watch that recording to decide what to do. Without the key we cannot see the recording, and we act on the report using only what we can see.

See the Terms for what encrypted recordings cannot do.

3. Where your data is stored and international transfers

We are a US company. Recordings are stored in North America on Cloudflare R2. The app servers and database are in Germany. By using the Service you understand that your information is processed in the United States (by Dharma Loop LLC and by Cloudflare, including R2 storage in North America), in Germany (Hetzner servers) and wherever our providers operate.

If you are in the UK or the EU/EEA, your information is therefore transferred to the United States. For those transfers we rely on our providers' safeguards: the EU-US Data Privacy Framework and its UK extension where the provider is certified under it, or otherwise standard contractual clauses.

4. Retention

  • Recordings and other content stay until you delete them or your account is deleted.
  • Server logs are kept for a limited period.
  • Database backups are kept for 30 days.
  • When an account is deleted, we remove the data within 30 days, and it then rolls off backups within a further 30 days.
  • We may keep information longer where needed for legal reasons, such as records of abuse reports or a legal request.

5. Your choices

  • You can delete any recording at any time from your dashboard.
  • You can set recordings to private or password-protected.
  • You can remove your OpenRouter key or turn transcripts and summaries off at any time in Settings, under AI & transcription.
  • To delete your account, email [email protected] from the address on the account.
  • To see, correct or export what we hold about you, email us at the same address.

6. California residents

If you live in California, the California Consumer Privacy Act gives you certain rights.

Categories we collect (in the last 12 months): identifiers (email address, name, IP address); internet activity (logs, view counts, analytics); audio, visual and similar information (recordings, screenshots, profile image); and content you create (titles, transcripts, comments). We collect these directly from you and from your device, and use them for the purposes in section 2.

No sale or sharing. We do not sell personal information and we do not "share" it for cross-context behavioural advertising, as those terms are used in California law. We do not use or disclose sensitive personal information to infer characteristics about you.

Your rights. You may ask us to tell you what personal information we have collected and how we use it, to delete it, and to correct it. We will not treat you differently for using these rights.

How to ask. Email [email protected] from the address on your account. We may need to confirm it is you, and you can use an authorised agent if they can show your permission.

6a. UK, EU and EEA residents

If you live in the UK, the EU or the EEA, you have these rights over your personal information:

  • Access: to get a copy of what we hold about you.
  • Correction: to have inaccurate information fixed.
  • Deletion: to have your information erased.
  • Restriction: to ask us to pause using your information in certain cases.
  • Portability: to receive information you gave us in a common format.
  • Objection: to object to processing that we base on legitimate interests.

How to use them. Email [email protected] from the address on your account, so we can be sure it is you. We answer within one month.

Complaints. You have the right to complain to a data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk). In the EU/EEA it is the supervisory authority in the country where you live. We would appreciate the chance to put things right first, but you do not have to contact us before complaining.

7. Children

Screencap is not directed to children under 13 and we do not knowingly collect their information. Some countries set a higher minimum age for using online services without a parent's consent (see our Terms), and we ask users to respect it. If we learn that a child under 13 has an account, we delete it. If you think this has happened, email [email protected].

8. Security

We use reasonable measures to protect your information, including encrypted connections, sign-in by one-time code rather than stored passwords, and access controls on our servers. No system is perfectly secure, so we cannot guarantee absolute security. Recordings you share by public link can be seen by anyone who has the link.

Encrypted recordings: what to trust. The Screencap website's code runs in the viewer's browser. In principle it could be changed to capture keys, as is true of every website that offers end-to-end encryption. The Mac app does the encrypting, so the app is the side to trust, and its source code is public at github.com/ques123/screencap-web. The link is also the key: anyone who has the full link can watch the recording until the owner deletes it.

9. Changes to this policy

We may update this policy. When we make material changes we will change the "Last updated" date and, where appropriate, tell you by email or on the website.

10. Contact

Dharma Loop LLC, Wyoming, United States, is the controller. Privacy questions and requests: [email protected].