Privacy policy
What stays local.
What does not.
This policy explains how Kaptr.me handles account data, saved snapshots, browser-local sessions, sharing and optional AI processing.
1. Responsible controller
ControllerActivMedia Diffusion
Address129 Avenue de Genève, Centre Idem 74, 74000 Annecy, France
SIRET914 630 785 00014
Privacy contactcontact@kaptr.me
DPONo dedicated DPO is currently designated; privacy requests use the contact above.
2. Information we collect
2.1 Information you provide
Depending on the features you use, Kaptr.me can process account information such as your email address, username, account preferences, dashboard configuration, subscription or entitlement information, and communications you send to support.
Payment-card details are handled by the payment provider used in the checkout flow rather than being intentionally stored as raw card data by the Kaptr.me marketing site.
2.2 Saved snapshots and dashboard content
When you choose to save content, Kaptr.me processes the screenshot or snapshot and the metadata needed to operate it, which can include the source URL, timestamps, crop or refresh information, dashboard assignment, history and sharing settings. Because you choose what to capture, a snapshot can contain third-party, personal, confidential or otherwise sensitive information.
2.3 Communications
Support messages, privacy requests, billing questions, feedback and feature requests can be retained with the contact information and context needed to answer them.
2.4 Technical and usage information
Kaptr.me and its infrastructure can process technical information needed to deliver, secure and troubleshoot the service, such as IP address, browser and device characteristics, operating system, request or security logs, errors, performance information and feature interactions. The exact information depends on the part of the service being used.
3. Local browser-session boundary
LOCAL SESSION
Your source-site login session stays with the browser performing local capture or refresh.
For extension-based local capture and local refresh, Kaptr.me relies on the session already open in that browser. The service does not need to upload a source-site password or authentication cookie in order to recreate that login on another computer.
If Computer A is signed in to a protected source and Computer B is not, a local refresh from Computer B cannot reproduce Computer A's authenticated session. The browser performing the refresh must itself be able to access the source.
The saved screenshot is different. When you choose to save a capture, the resulting image and operational metadata are sent to Kaptr.me so the snapshot can appear in your dashboard and provide the requested cloud functionality.
4. Why we process information and legal bases
Kaptr.me processes information for purposes that include account creation and authentication, delivering dashboards and saved snapshots, refresh/history functions, sharing, billing, support, fraud and security prevention, service reliability, legal compliance, and product improvement.
ContractAccount, requested product features, saved snapshots, dashboard access, subscriptions and support needed to provide the service.
Legitimate interestsSecurity, fraud prevention, abuse prevention, debugging and service reliability where those interests are not overridden by your rights.
Legal obligationRecords or disclosures that applicable law requires us to keep or provide.
ConsentNon-essential cookies or other processing where consent is legally required.
Remote AI processing needed to return a result you request is distinct from any further use of AI-submitted personal data for training, evaluation or improvement. Where data-protection law requires a separate choice or consent for that further use, Kaptr.me will provide it separately.
5. Captured content and your responsibilities
You are responsible for ensuring that content you capture, store or share can lawfully be used in that way. This includes considering copyright, trademarks, confidentiality, privacy, source-site terms and any permission needed to disclose third-party information.
Kaptr.me does not become the owner of third-party material contained in a snapshot and may remove or restrict content when reasonably necessary to address a valid legal, privacy or rights-holder request.
6. Dashboard visibility and sharing
Private · defaultNew dashboards are private by default.
Shared · invite onlyAccess is limited to invited Kaptr.me accounts. A person not signed in with an invited account cannot view the shared dashboard.
Public · link accessA dashboard can be public. Search-engine indexing is a separate setting, so a public dashboard can remain non-indexed.
When you change visibility, you are responsible for ensuring the people who gain access are permitted to see the information displayed in the dashboard.
7. Service providers, AI processing and international transfers
Kaptr.me uses service providers by function. Google Firebase provides core cloud infrastructure used for account and saved dashboard data; the primary Firebase data layer is configured in Europe. Stripe can process subscription payments. Charla is loaded on the Documentation page to provide the help center.
AI PROCESSING
AI features are not local-only processing.
When you deliberately use an AI feature, content supplied to that feature — including material an AI workflow finds and captures before inserting it into your dashboard — may be sent to external AI processing systems. Authorized human reviewers may have access to submitted content, and the content may be used to train, evaluate or improve AI systems.
Optional AI processing or reviewer access can involve processing outside the European Economic Area. Where personal data is transferred internationally, the transfer must use the mechanism and safeguards required for the provider and destination concerned.
Kaptr.me does not sell personal data. Information may be shared with processors only for the service functions described here, or disclosed where law requires it.
CONSENT-BASED SERVICES
Analytics and advertising providers remain disclosed where a Kaptr.me surface enables them.
The currently published Kaptr.me production policy identifies Google Analytics for audience measurement and Google Ads and Meta Pixel for advertising or remarketing, subject to the consent rules that apply to those non-essential technologies. The static marketing template does not intentionally load those trackers, but any Kaptr.me surface that enables them must keep them disabled until the required consent is obtained.
8. Data security
Kaptr.me uses technical and organizational measures appropriate to the service. Saved Firebase data is protected by HTTPS in transit and provider-managed encryption at rest, together with authentication and access-control mechanisms. Dashboards are private by default and sharing requires an explicit visibility choice.
No online service can guarantee absolute security. If you believe an account, dashboard or public link has been compromised, contact contact@kaptr.me.
9. Data retention
Information is retained only for as long as it is needed for the purpose for which it is processed, to operate the account, handle disputes or security incidents, and satisfy applicable legal obligations. Retention can differ by data type.
Account dataFor the life of the account, plus 3 years after deletion where needed for service, legal or contractual purposes.
Saved snapshotsFor the life of the account, followed by up to 30 days after account deletion for the deletion and recovery cycle.
Billing records10 years from the transaction date where required for French accounting and tax records.
Analytics dataUp to 14 months where consent-based Google Analytics is enabled.
Advertising cookiesUp to 13 months where consent-based Google Ads or Meta Pixel technologies are enabled.
Technical/security logsUp to 6 months for security, troubleshooting and performance monitoring.
Support communicationsUp to 2 years after the last interaction where needed for customer service or legal follow-up.
If a more specific retention period is presented for a feature or required by law, that period applies.
10. Your data-protection rights
Where the GDPR applies, you can have rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw consent where processing relies on consent. You can also lodge a complaint with the competent supervisory authority; in France, this is the CNIL.
Send requests to contact@kaptr.me. We may ask for information reasonably necessary to verify identity when there is genuine doubt. Requests are handled without undue delay and, in principle, within one month; that period can be extended by up to two additional months for complex or numerous requests when the person is informed within the first month.
11. Children and age restrictions
The Kaptr.me Chrome extension is intended for users aged 15 or older unless the required parent or legal guardian authorization has been obtained. If we learn that personal data was collected in circumstances that do not satisfy applicable child-data requirements, we may restrict the account and take appropriate steps regarding the data.
12. Third-party websites and services
Kaptr.me can display or capture information originating from third-party websites, and its pages can link to third-party services. Those third parties operate under their own terms and privacy notices. Kaptr.me is not responsible for their independent processing practices.
13. Legal disclosures, business changes and no sale of data
Information may be disclosed when required by a valid legal or regulatory request, or when reasonably necessary to protect rights, safety, security or the integrity of the service. If the business or service is reorganized, merged, acquired or transferred, relevant information may form part of that transaction subject to applicable law and notice requirements.
Kaptr.me does not sell personal data to third parties.
14. Changes to this policy
This Privacy Policy can be updated to reflect product, provider, legal or security changes. The current revision date is displayed on the page. Material changes will be communicated through the website, account or email where required by law, and a new consent choice will be requested where the law requires one.
15. Contact
ActivMedia Diffusion
129 Avenue de Genève, Centre Idem 74
74000 Annecy, France
SIRET 914 630 785 00014
contact@kaptr.me