2026-10-04
Privacy
Last updated 2026-10-04. Controller: the DuoShot operator (France / CNIL). This is a product notice, not legal advice.
Data we process
Account data (email, auth identifiers), consent logs, workspace membership, export metadata, and the screenshot files you upload. If you agree, Umami records pseudonymous product events, pages visited and visible time, without screenshots or email addresses. Confirmed live payments separately contribute to revenue measurement (amount, currency, plan and audience), without payment, account or workspace identifiers.
Legal bases
Contract (GDPR Art. 6.1.b) for the tool and ZIP. Legal obligation + contract for Stripe invoices. Contract for magic-link email and receipts. Consent for optional Umami product analytics; you can change this choice at any time via Analytics preferences in the footer. Legitimate interest for revenue measurement without customer identifiers.
Transfers
Captures and profile data are stored primarily in Falkenstein, Germany, on Hetzner infrastructure with self-hosted Supabase. Stripe, Resend and Google OAuth may process data in the US under the Data Privacy Framework / SCCs. List: sub-processors.
Retention
Sources and ZIP files expire after 24 hours; review media after 7 days or revocation. Physical deletion from active storage is scheduled every 15 minutes and retried after failures. Encrypted recovery backups retain the seven most recent successful copies; deleted data can remain in those isolated backups until rotation. Local browser drafts remain on your device until you remove them. Account rows remain until you delete the account. Umami audience-measurement data is not linked to any account or identified person; it is kept for 25 months, then deleted automatically. Mixpanel no longer receives any data; pseudonymous events it received earlier stay in its EU project only until erased, and deleting your account queues their erasure. Stripe keeps billing records as required by law.
Your rights
Access, portability (JSON export), erasure (account delete, target 30 days), objection — from the account page. UK GDPR: same rights. CCPA/CPRA: we do not sell or share personal information for cross-context advertising — Do Not Sell. LGPD: access, correction and deletion if you are in Brazil. Breach: CNIL notified within 72 hours when required. No DPO appointed in v1 (Art. 37 to be reassessed).