legal

Privacy Policy

Last updated: September 3, 2026

Who we are

shotanvil is operated by Psyke Tech Ltd., a company registered in Sofia, Bulgaria. This policy explains what data we collect when you use shotanvil.com or the shotanvil API, and why.

Contact us about this policy or any privacy request at [email protected].

What we collect

Website analytics. We use PostHog in cookieless mode — no cookies are set by PostHog. PostHog processes pseudonymous usage events (page views, clicks) and standard request metadata (IP address, browser/device info) to help us understand how the site is used. We also use Google Analytics (GA4), which does set cookies (e.g. _ga) to distinguish visitors and sessions, to measure traffic sources and site usage.

Account and API data. If you get an API key, we store your email address, your API key, your plan tier, and your usage counters (screenshots taken per billing period) — needed to authenticate requests and enforce plan limits.

Payment data. Card payments are processed by our payment provider, acting as merchant of record. We never see or store your card number — we receive only your subscription status and plan from them via webhook. Agents paying per call via the x402 protocol pay directly on-chain; we only see the wallet address and payment amount, no other personal data is required.

Screenshot content.We do not retain the pages you ask us to render. The default cache TTL is 0 — a screenshot or PDF is generated, returned in the API response, and then discarded; we don't keep a copy.

Operational logs. We may briefly retain request metadata (the target URL, timestamp, and response status — not the rendered content) for abuse prevention, rate-limit enforcement, and debugging.

Who we share data with

We don't sell your data. We share the minimum necessary data with the vendors that run shotanvil:

  • Our payment provider (merchant of record) — billing and subscription data
  • PostHog — pseudonymous, cookieless website analytics
  • Google Analytics (GA4) — website traffic analytics, sets cookies
  • Hetzner Online GmbH — hosts the API backend
  • Cloudflare — DNS, CDN, and email routing
  • Hostinger — hosts this website

Some of these providers process data outside your home country. We only work with providers that offer an appropriate legal basis for that transfer under their own terms.

Your rights

You can ask us to access, correct, export, or delete your account data at any time by emailing [email protected]. If you're in the EU/EEA or UK, this includes the rights granted under GDPR/UK GDPR.

Data retention

We keep account and usage data for as long as your account is active, plus a reasonable period afterward for billing records and legal compliance. Screenshot content itself is never retained, as described above.

Children

shotanvil is not directed at, and we do not knowingly collect data from, anyone under 16.

Changes to this policy

If we make a material change, we'll update the date at the top of this page.

← Back to shotanvil.com