Privacy

Who holds your data

Victorious Eluwade is the data controller, in the United Kingdom, and runs Screenshopped. Questions, or any request below, go to eluwadevictorious@gmail.com.

What we collect

• The email address you sign in with, and the name and account id Google or Apple give us if you use them. We use these to know which wishlists are yours and nothing else.
• The screenshots you upload, and the filename and time they came from your device.
• What we read out of each screenshot: the product name, brand, price, shop and category, plus all text visible in the image.
• The shopping links we find for you, and which one you pick.
• Anything you add yourself: the wishlist name, colour, size, quantity and priority.
• A count of how many screenshots you upload each day, so the daily limit can be enforced.
• If you connect the Chrome extension: which browser and operating system you connected it in (for example “Chrome on macOS”) and when it was last used, so settings can list it for you to disconnect.
• When you send something with the Chrome extension, and only then: the image or its address, the address and title of the page it was on, or the part of the page you snipped. The extension sends nothing from pages you don’t send from. If you switch on its side tab, the tab sits on every page but only looks at a page when you open it, and then only on your computer.
• If you use the iPhone app: when you scan, the app looks through your photo library for screenshots on your phone. Nothing is sent until you keep one; then that screenshot is uploaded like any other. To avoid offering the same screenshot twice, we keep a one-way fingerprint of each one you have kept or skipped, not the picture.
• Photos you take or choose in the iPhone app's Add tab, and things you share to Screenshopped from other apps: the picture, or the link with the product's name, price and picture as the page shows them. Shared from Safari, that is read on your phone first.
• If you allow notifications on your iPhone: a notification token for that phone and the app's version, so we can tell you when what you sent is ready. It is removed when you sign out on that phone.
• If you set up a public profile: your handle, display name, photo, bio and TikTok or Instagram username. These are public.
• Where you came from when you signed up: the referral code in the link you arrived by (for example a creator's handle) and the page you first landed on. Recorded once, when your account is created.
• Counts of views of public profiles and lists, and of clicks on their product links, with the referral code the visit carried. These are kept as totals for the owner of the page. We do not store your IP address with them; a one-way hash of it is used for an hour to stop counts being inflated, then discarded.

There are no third-party analytics, no advertising, no tracking pixels and no profiling. We do not sell anything to anyone.

Screenshots contain more than the product

Worth saying plainly: we read all the text in a screenshot, not just the product. If the image includes a message thread, a name, an order number or anything else personal, that text is stored alongside the item. Crop before uploading if that matters to you, and delete anything you would rather we did not keep.

Who else sees your screenshots

• Google, as our hosting, sign in, database and file storage provider (Firebase).
• Google's Gemini service, which reads each screenshot to work out what the product is. The image is sent to Google for that.
• SearchApi.io and Serper.dev, which run the shopping searches. To search by picture we give them a temporary link to the screenshot, or to the part of it showing the product, which they pass to Google Lens. That link expires after fifteen minutes.
• Google's Gemini service again, to compare the pictures of the shops' products we find with your screenshot, so the closest ones come first.
• Apple and Google's Firebase Cloud Messaging, which deliver notifications to your iPhone if you allow them.

These providers process data outside the UK, including in the United States. We rely on their standard data protection terms for those transfers.

The iPhone app and your photo library

The app only looks at your photo library when you tap Scan, and only at screenshots. iOS asks your permission first, and you can choose to share only some photos. When a screenshot is on a list, the app can delete it from your library for you: iOS asks you to confirm, and it goes to Recently Deleted, where it stays for 30 days.

You can delete your account from the app (You, then Delete account) or from settings on the website. Either deletes your lists, items, screenshots and account together.

Public profiles and lists

Each list is public, unlisted or private. A public list appears on your profile page at /@your-handle if you have claimed a handle, and anyone can see it. An unlisted list is seen only by people with its link. A private list is seen only by you and anyone you invited to it. You can change this for each list at any time.

Your wishlist is public to anyone with the link

A shared wishlist page shows the products you picked, their prices and any notes you added, to anyone who has the link. It does not show your name or your email.

It can show your screenshot. When a shop’s own picture of an item will not load, the page falls back to the screenshot you uploaded for it, so the item stays recognisable. That only happens for items you have chosen a link for and put on the list, and it means the screenshot becomes visible to anyone holding the link. If a screenshot shows something you would not want seen, remove that item.

The link is unguessable but it is not a password, so treat it as public once you have sent it to someone.

How long we keep it

• Screenshots we judge to have nothing buyable in them are deleted straight away.
• Screenshots you swipe left on are deleted when you swipe.
• Everything else stays until you delete it or ask us to close your account.

What you can ask for

Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to send it elsewhere. Write to eluwadevictorious@gmail.com and we will respond within one month. If you think we have got it wrong you can complain to the Information Commissioner’s Office at ico.org.uk.

Why we are allowed to do this

We process your data to provide the service you asked for, which is the contract basis under UK GDPR. The daily upload limit and keeping the service running rest on our legitimate interest in not having it abused.

Children

This is not built for children, and it should not be used by anyone under 13.