Privacy

Effective September 8, 2026.

The app

Sealshot processes everything on your Mac. Screenshots, OCR text, annotations, generated metadata, and search indexes never leave your device. The app requires no account and collects no telemetry or analytics — nothing about what you capture, or how you use Sealshot, is ever sent anywhere. The three downloads it does make are listed below.

Sealshot makes exactly three network requests, and all three are downloads. None of them sends anything about you — no account, no identifier, no license key, no usage data, and never your content.

Update check. Once a day Sealshot reads a public version feed and downloads a new release if there is one. You can turn this off in Settings ▸ General.
Revocation list. On launch, Sealshot downloads a small public file listing licenses that have been revoked — after a refund, for example. It is a plain download of the whole list, which Sealshot then checks on your Mac: it never asks a server about your license, and never sends your license ID. This follows the same setting as the update check, so turning that off turns this off too.
Enhanced redaction model. Only if you choose to enable it, and only once, with your explicit consent. The model then runs entirely on your Mac and you can remove it at any time.

Each of these is an ordinary file download, so the server sees what any download reveals — that some computer asked for a file — and nothing that identifies you or your copy of Sealshot. There is no request in which Sealshot reports anything back.

One thing worth naming: when you click Donate… (or Buy in older versions), Sealshot opens this website in your browser. Some older versions also had a Renew button whose link carried your license ID and email address so a purchase could be matched to an existing license. Either way that is your browser, at your request — not Sealshot reporting in. Nothing is sent if you never click it, and the "I've donated" checkbox sends nothing at all: it is a setting on your Mac, and we never verify it.

This website

seal-shot.com is a static site and sets no cookies. It uses Cloudflare Web Analytics, which counts page views without cookies, without fingerprinting, and without building any profile of you. It records the page you visited, the referring site, and general details of your browser and country — never an identifier that follows you between visits or between sites. There is nothing here to opt out of, because nothing identifies you.

One other thing is counted. When you click a Download button, the page tells a server of ours that a download button was clicked, and which of the two it was — the one on the home page, or the one that fetches the file. That is the entire message. No identifier, no cookie, no address, not even the page you came from, and nothing that could link one click to another or to a visit. It is a tally and nothing more. It is sent after you click and never delays the download; if you block JavaScript it is never sent at all, and the download works exactly the same.

The pages with a video on them — the home page and download — show a still image and a play button, not a YouTube player. Nothing is requested from Google, and no cookie of theirs is set, unless you press play. Do press it and the player loads from youtube-nocookie.com, at which point YouTube can see that you are watching and may store data on your device under Google's own terms — which is why it waits for you to ask. The still is served from this site, so even the thumbnail costs you nothing.

Donating

Payments are handled by Polar, our merchant of record. Your card details go to Polar and its payment processor and never reach us — we never see or store them. Polar holds your name, billing address, email address, and receipt history as the seller of record.

For each donation we keep one record of our own — your name, email address, the date, and the order id — in Cloudflare's key-value storage, so support questions about a donation can be answered. We do not store your billing address, and nothing is emailed to you by us: Polar's receipt is the only mail. These records are never sold, shared, or used for marketing, and on request we delete them.

Licenses bought before Sealshot became donation-supported are still on file — name, billing address, email, license ID, and what was issued — because answering support questions about a past purchase requires them. The license file itself names its owner in signed text; that was the sharing deterrent of the old model, and it is why the file is worth treating like a receipt rather than attaching to a public bug report. These records are deletable on request too.

Feedback form

If you send feedback through the support form, your message — and your name and email address, if you choose to include them — is emailed straight to our inbox by our own service, through Resend, the same provider that delivers licenses. Nothing is stored on the way: there is no database of submissions, so the message exists only as an email. It goes through no third-party form relay, and we use it only to respond to you and improve Sealshot. It is never sold or shared.

If you sign up for updates, your email address is stored with Kit, our email service, and used only to send Sealshot news, offers, and tips. Signup is double opt-in, every email includes an unsubscribe link, and your address is never sold or shared.

Questions