Privacy policy
Last updated 14 July 2026
The short version
ReadyStill processes screenshots locally in the Chrome extension. We do not upload, store, sell, or use screenshot content for advertising or model training.
Who is responsible for account data
The seller identified on the Contact page controls the ReadyStill account and licensing data described here. Razorpay, Supabase, Vercel, and Cloudflare process limited data for their stated operational roles.
What the extension accesses
When you explicitly invoke ReadyStill, Chrome grants temporary access to the active tab so the extension can identify the selected element or region, capture visible pixels, and—for Full-page Beta—coordinate a capped local scroll-and-stitch. It may inspect page geometry, visible text, and form-field signals such as email addresses, phone-like values, and credential-like fields to suggest areas for privacy review. This page access is temporary and the inspected content is not transmitted.
What stays on your device
Screenshot pixels, temporary capture tiles, captured page URL and title, locally detected privacy signals, annotations, saved style defaults, annotation colors, privacy-review rectangles, trial usage, device identity, and the signed license entitlement are stored or processed locally. The URL and title help identify the source of a temporary project; they are never included in license requests or website analytics. A local scheduled cleanup checks every 30 minutes and deletes temporary screenshot projects and their metadata after they are 24 hours old. They are not retained as cloud history.
What the website stores
Supabase stores your sign-in email, payment-order references, purchase status, license entitlement, and hashed device identifiers. Razorpay processes payment details; ReadyStill stores only provider IDs and verification status, never card or bank credentials.
License checks
After activation, the extension may attempt to contact ReadyStill no more than once per day while online to refresh refund and device status. Failed attempts count toward that limit. The request contains the signed entitlement and opaque device identifier—not screenshot pixels, page URLs, or DOM content. The device-bound entitlement has practical 100-year validity, so a service or network outage does not expire an already activated local core.
Analytics and operational logs
The initial extension release contains no product analytics. The public marketing pages use Vercel Web Analytics for aggregate, cookie-free page-view and referrer reporting. ReadyStill removes query strings and excludes account, authentication, checkout, callback, and API routes from that measurement. Website and API providers may also retain ordinary security and operational logs such as request time, IP address, user agent, route, and response status. Screenshot pixels, captured page URLs, and captured DOM text are never added to analytics events.
Clipboard access
ReadyStill asks for Chrome's optional clipboard-write permission only when you choose Copy. It is used only to place the rendered PNG on your clipboard.
Data sharing and subprocessors
Vercel hosts the website and APIs, Supabase provides authentication and database services, Cloudflare Turnstile protects sign-in from abuse, Resend delivers account email, and Razorpay processes payments. We share only the information required to operate those services. We do not sell personal information.
Deletion and support
You can delete your sign-in identity from the Account page after typing an explicit confirmation, or email support@readystill.app if you cannot access the account. Deletion permanently anonymizes the authentication email and removes abandoned checkout state. Opaque purchase, refund, dispute, entitlement, device-limit, and deletion-request records remain only as needed to honor a paid lifetime license and meet tax, accounting, fraud, chargeback, or other legal obligations. Human-readable device labels are removed. A pending payment must be resolved first so deletion cannot strand a paid purchase. Already activated installations continue, but account-page key recovery is no longer available.
You may request a copy of account data through support. ReadyStill does not keep a cloud screenshot library, and screenshot pixels are never part of the account-deletion process. The Contact page provides the seller and grievance details for escalation.
Future hosted features
If ReadyStill later offers an optional hosted or AI feature, it will require a separate explicit action and disclosure before any screenshot content leaves the device. It will not silently change the local-core behavior described here.