App Listing Screenshots

Privacy Policy

Last updated October 20, 2026

This policy explains how App Listing Screenshots handles information when you visit the website, use the studio, create an account, purchase export credits, or use the ChatGPT plugin. The service operator and controller of account information is Ben Baler. Contact us at benbaler@gmail.com for privacy questions or requests.

1. Information we process

2. Why we use information

We use account and export information to sign you in, render downloads, deliver purchased credits, recognize previously unlocked images, and answer support requests. Technical records help prevent fraud, enforce rate limits, investigate faults, and protect the service. Transaction records support payment reconciliation, refunds, and legal obligations.

Where data-protection law requires a legal basis, these purposes may rely on performing our contract with you, complying with legal obligations, and legitimate interests in securing and maintaining the service. Optional tracking requires consent where applicable; agreeing to the Terms is not consent to optional tracking.

3. Cookies, local storage, and analytics

Necessary session cookies keep you signed in. Sessions are configured for 30 days and can be renewed during use. Signing out ends the current session. Browser storage records pending payment confirmation so you can check a payment without buying again; that record includes an account-email key and is removed after confirmation.

The production website loads Google Analytics to measure page visits, traffic sources, and engagement. Google may process cookie identifiers, browser and device information, and connection information. Our tag removes query strings and fragments from page URLs and referrers and disables Google signals and advertising personalization. We do not deliberately send account emails, screenshot content, or design text to Analytics.

The current site does not provide an analytics consent selector. Browser settings and blocking tools can restrict cookies and Analytics; clearing necessary cookies signs you out. The website analytics script skips collection when Do Not Track or Global Privacy Control is enabled. We also keep daily, fixed-label counts of installation-link clicks, copied example prompts and demonstration play events in our Cloudflare database, without website visitor identifiers, cookies, account fields or prompt text. These action counts follow the same 90-day usage-data cleanup described below. See Google’s Privacy Policy.

4. Service providers and disclosures

Cloudflare hosts the website, account database, and export rendering. RevenueCat and the checkout payment provider process purchases; they receive an account identifier, email, transaction information, and the payment details needed for checkout. We do not store full card numbers. Google serves fonts, receiving connection information when those fonts load, and provides Analytics on the production site. AI features are currently disabled.

Information may also be disclosed when legally required, to investigate fraud or protect rights and safety, or in connection with a business transfer subject to applicable privacy protections. We do not sell your screenshots or use them to advertise your work.

5. Retention and security

Account records are retained to provide your account. Credit ledgers and image fingerprints persist to recognize purchased credits and previous exports. They are not automatically removed when you sign out. Retention also depends on tax, accounting, fraud-prevention, and dispute requirements. Contact us to request deletion; some records may need to be retained where legally permitted or required.

Passwords are hashed, and account operations require authentication. No storage or transmission method is completely secure. Keep your own copies of original images and exported designs: the studio is not a project-backup service.

6. International processing

Our providers may process information in countries other than yours, where privacy laws may differ. Any transfer subject to legal restrictions requires an applicable transfer mechanism. Contact us for information about the safeguards relevant to your data.

7. Your choices and rights

Depending on your location and applicable law, you may request access, correction, deletion, portability, restriction, or objection to processing, and withdraw consent where processing relies on it. You may also complain to your local data-protection authority. Email benbaler@gmail.com with your request. We may need to verify your identity and will respond within applicable legal deadlines. Self-service account deletion and password recovery are not currently available.

8. Children

The service is intended for adults creating app listings and is not directed to children under 13. If you believe a child has provided personal information, contact us so we can investigate and address it.

9. Policy changes

Updates will appear here with a revised date. Material changes will receive additional notice where required. This policy does not authorize new uses of previously collected information where further consent or another legal basis is required.

10. ChatGPT plugin data

When you use the App Listing Screenshots ChatGPT plugin, the ChatGPT host sends the selected tool request and any file references needed for rendering to our Cloudflare-hosted MCP server. The server downloads the image you selected and stores source image bytes, image media types, project design settings, and series records in Cloudflare R2 so you can render and export the series. The plugin does not retain the original uploaded file name, send these images to an image-generation model, or process purchases.

Plugin projects and source images are stored under a random identifier for that anonymous connection. It is not a verified ChatGPT account ID, name, or email. Refreshing an OAuth token keeps the same workspace; disconnecting and authorizing again creates a new anonymous workspace. The server does not request your ChatGPT password or a manually entered API key.

To measure reliability and improve the plugin, we keep daily counts of tool operations, success and error categories, operation durations, file response sizes, and preview and download-button events. A keyed hash of the existing anonymous connection identifier lets us count active and returning connections; it does not identify a person or their OpenAI account. These usage records do not include screenshot content, prompt or design text, names, emails, raw connection identifiers, or signed download links. Usage records are removed by daily cleanup after a 90-day window. Preview event requests use the existing export link only to validate permission; the link is not stored in the analytics tables.

Plugin source images, projects, and series records have no automatic expiration. New series PNGs and ZIP files are retained until a deletion request, and their signed download links have no automatic expiry. Older exports retain their 24-hour deletion schedule and one-hour links; re-export a saved series to obtain new links. The plugin has no self-service delete control. To request deletion, email benbaler@gmail.com and include the series ID from the result when available. We will use it to locate the associated plugin project data and confirm when the request is handled, subject to records we must retain by law.

Cloudflare processes these plugin files to host, store, secure, and render the service. OpenAI separately operates ChatGPT and handles your chat according to its own terms and privacy practices. The website studio's optional account and export-credit features are separate from the ChatGPT plugin.