Your screenshots stay on your device.

What the apps do with your screenshots

Capture, balancing, redaction, text recognition and export all run on your device. Your images are not uploaded to us or to anyone else.

• On Windows, text recognition uses the OCR built into Windows. On Android, it uses an on-device model that ships with the app.
• The text found in your screenshots is never logged.

What is stored on your device

• Web editor. The editor on this site keeps your saved looks (style settings only, never images) in your browser's local storage. Clear them by clearing this site's data.
• History. Captures and their editable settings are saved so you can reopen them. On Windows they are in a history folder under %LOCALAPPDATA%\Polishot. On Android they are in the app's private storage.
• Search index. The text recognised in a capture is stored next to it so history can be searched. It stays on your device.
• Deleting. Delete one capture, or clear all history, from inside the app. On Windows you can also delete the folder. Uninstalling the Android app removes its data.
• Settings and license key. Stored on your device, in Windows Credential Manager and in Android Keystore-backed storage.

Accounts and telemetry

There is no account, and the apps collect no analytics of their own. They do not need an internet connection to work. If crash reports or usage statistics are ever added, they will be opt-in and listed here first.

One exception on Android: text recognition uses Google's on-device ML Kit model. Google's library sends anonymous diagnostics to Google, such as the device model, Android version, app version and how long recognition took. It never sends your images or the text in them, and Google does not offer a way to switch this off. Windows does not use it.

Quick send

Quick send moves images between your PC and your phone over your local network. The devices find each other on that network, pair by comparing a six-digit code you confirm on both screens, and then send images directly to each other, encrypted. No server of ours is involved, and a device that has not been paired is refused.

Licenses and purchases

A license key contains a hash of the email address it was issued to, not the address itself. The app checks the key on your device, so activating it sends nothing.

Licenses are not on sale yet. When they are, this section will name the payment provider and say what is kept about a purchase. At a minimum, that is the email address a key was issued to.

This website

• No tracking cookies and no analytics scripts.
• Visitor counter. When it is switched on, the site shows how many different people have visited. It counts a one-way hash of your IP address, your browser string and a secret salt, kept in a structure that only estimates a total and cannot list who is in it. The address itself is not stored or logged, no cookie is set, and a flag in your tab's session storage stops it counting you twice in one visit.
• The web editor processes an image inside your browser tab. The image is not uploaded.
• Fonts are served from this site. There are no third-party font or script requests.
• The site is hosted on Vercel, which keeps standard server logs (IP address, page requested, user agent) for security and operations.
• Downloads are plain files served over HTTPS. Downloading one sends nothing beyond a normal web request.

Questions

A contact address will be listed here before the first release.