Privacy policy

Peter Hildel

Gustav-Adolf-Str. 19

90513 Zirndorf, Germany

Email: info@shotforge.studio

Website: https://shotforge.studio

This privacy policy applies to the website https://shotforge.studio and the ShotForge web app provided there.

ShotForge processes uploaded screenshots and settings locally in your browser. Editing and exporting happen on the device you are using.

No user account is required. The application does not transmit uploaded images to a server operated by ShotForge.

To keep a session available after reloading the page, ShotForge stores uploaded screenshots and settings locally in the browser (IndexedDB) on the device being used. This stored session data is not transmitted and can be deleted at any time via Reset session in the app or through the browser data settings.

Named projects are also stored locally in the browser (IndexedDB) only and can be deleted individually in the project manager. Downloading a project file creates a ZIP file on your own device; it is not transmitted anywhere.

ShotForge creates the upload package, including screenshots, bundle ID and version, locally in your browser. The website does not contact Apple for this feature and receives no Apple credentials.

Only when you run Fastlane on your Mac and confirm the upload are the finished screenshots sent to Apple. ShotForge receives neither these images nor your Apple credentials. The private .p8 key stays on your device outside the package; local connection settings are stored with restricted permissions in your user configuration directory.

Setting up Homebrew, Ruby or Fastlane downloads software from their respective providers. Apple's privacy terms also apply to the later upload. Fastlane usage statistics are disabled for the supplied lane.

ShotForge includes an optional assistant that drafts suggestions for screenshot headlines. It is labelled as such and has to be started deliberately.

Where the browser provides a built-in language model (currently Chrome with Built-in AI), the text is generated entirely on your device. The app details you enter are not transmitted to ShotForge or to any external service. The browser vendor's own privacy terms apply to the model itself.

Without such a model the assistant falls back to fixed text templates. No AI processing takes place in that mode.

Suggestions are non-binding and are shown before they are applied. Responsibility for the published text rests with the person exporting the screenshot.

If you optionally import an App Store URL in the assistant, your browser calls Apple's public lookup endpoint (itunes.apple.com). Apple may process your IP address and the requested app ID in doing so. The import is voluntary; without it no such connection is made.

When the hosted website is accessed, the hosting provider may process technical server log files, for example IP address, access time, browser information and requested files.

This processing is used to provide the website securely, reliably and without errors.

ShotForge does not use analytics cookies or create user profiles. There is no cross-site tracking.

The app uses local browser storage for language selection and session persistence only.

Apart from hosting the website, connections to third parties are made only for the voluntary App Store import in the assistant (see AI-assisted assistant) and for download statistics (see Download statistics).

To understand how ShotForge is used, we count triggered downloads. After you trigger a download – in the editor a single image, an export ZIP, an App Store upload package or a project file, on the template pages the free sample project – the website sends a request to our statistics server. It contains only the export type, meaning which of these five kinds was downloaded. No images, text, filenames, project contents or credentials are transmitted. We do not use cookies, user IDs or fingerprinting for statistics.

If Global Privacy Control or Do Not Track is enabled in your browser, the app does not send a request to the statistics server.

Our statistics database stores only aggregate daily counts per export type and a running total per export type. We do not store individual events, IP addresses or user profiles. Daily counts are removed after 90 UTC calendar days by a daily cleanup job; technical outages may delay deletion until service is restored. The totals have no date and no link to individual downloads or people. They are kept indefinitely and may be displayed as rounded figures on the website.

The statistics server is operated by Vercel Inc. (USA) in its Frankfurt region. As with any internet connection, Vercel receives your IP address and technical connection data. To protect against abusive request volumes we use Vercel Firewall, which uses your IP address as a key for a time-limited request budget. Vercel may also process technical connection and security data in its own logs. Vercel processes this data on our behalf under a data processing agreement (Art. 28 GDPR). A transfer to the USA cannot be ruled out; Vercel is certified under the EU-U.S. Data Privacy Framework, which provides an adequate level of data protection (Art. 45 GDPR).

The legal basis is our legitimate interest in minimal usage statistics and in protecting the service against abuse (Art. 6(1)(f) GDPR). You can object to counting by enabling Global Privacy Control or Do Not Track, or by sending us an email.

The figures count reported download triggers, not confirmed saved files or unique users.

ShotForge does not show ads and does not embed any advertising networks. No data is transmitted to advertising providers.

Data subjects have rights to access, rectification, erasure, restriction of processing, data portability and objection within the limits of the applicable legal requirements.

For questions about the processing of personal data, please email info@shotforge.studio.