Privacy

Your captures and your library.

Snipkit saves your screenshots, recordings, captured text, links, colors, annotations, and library data on your Mac. With each capture, it can also keep context such as recognized text, the source app, the window title, the webpage URL, and on-screen elements, so you can find things later.

When you export, copy, or open a saved link, that information goes to the app or place you choose. If your files are in iCloud Drive, another sync service, or a backup, that service’s settings apply too.

To see the library folder, choose Library > More library actions (…) > Show library folder. Items moved to Trash stay there until you empty it. Exports and backups stay wherever you saved them.

A link, only when you create one.

Creating a share link uploads the finished screenshot, including any edits, or the text capture you choose, to Snipkit’s hosting on Cloudflare. This is optional and needs no signup. Capturing or editing does not upload anything. Screenshot links contain only the finished image; they do not include your edit history, the original image behind your edits, or separately recognized text. Text links contain the saved text you choose to share. Neither kind includes source app details, window titles, source webpage URLs, or the rest of your library as additional metadata.

A free share link is available for 24 hours. Anyone with the link can view and download the screenshot or text; there is no sign-in or password check. The random link is not a substitute for keeping sensitive information private. Share pages have no tracking scripts and ask search engines not to index them. Our server counts successful share-page views and downloads under a generic page name. These counts do not include your screenshot or text, the share identifier or actual link, query strings, campaign tags, or referrers. We honor Global Privacy Control and Do Not Track.

Snipkit stores the shared image or text, its type and size, image dimensions when applicable, a random share identifier, creation and expiration times, and information needed to revoke the link. A separate secret stays in your app so you can revoke your own link without an account. Keep the app’s local data if you want to revoke a link before it expires. After expiration or revocation, the service blocks access. Expired content is removed automatically during cleanup, which can happen after the link stops working. Revoking or expiring a link cannot remove copies someone already downloaded.

Upload size and rate limits help keep free sharing available. We use IP-based abuse controls, so people sharing a network may share a limit. Our sharing database keeps a daily-changing keyed identifier derived from your IP address, rather than your raw IP address. These identifiers and rate-limit records are eligible for cleanup 48 hours after creation, including when a link is revoked earlier. Cleanup can be delayed if a storage operation needs to be retried. Cloudflare processes request information, including IP addresses and URLs, to deliver and protect the service. See Cloudflare’s privacy policy.

Reporting shared content

The Report abuse link on an active share opens a form with a reason and optional short description. No account, email address, or attachment is required. We store the share identifier, selected reason, description, submission time, review status, and a daily-changing network identifier in a private queue available to authorized Snipkit operators. A report does not automatically remove content, and we do not send report details by email.

Reporter network identifiers are eligible for removal after 48 hours. Reviewed reports are eligible for deletion seven days after review, and all reports after 30 days from submission, during scheduled cleanup. Minimal administrative action records, such as a removal reason, share identifier, and timestamp, are eligible for deletion after 90 days. These action records do not contain uploaded files or report descriptions. Report pages and submissions are excluded from analytics. Please leave contact details and other unnecessary personal information out of your description.

Speech and text stay on your Mac.

Text recognition (OCR) uses macOS and runs on your Mac. Voice commands are transcribed on your Mac with the speech model you download. Your microphone audio is never sent to a speech service.

Screen recording and microphone permissions make capture and voice work. Recordings can include your microphone, system or app audio, and an optional webcam bubble; camera access is used for the webcam preview and recording. Recordings and previews stay on your Mac and are never uploaded.

So that your shortcuts work in any app, Snipkit detects the keys you’ve assigned, using either Accessibility or Input Monitoring. Accessibility can also provide on-screen elements and source context.

You can review all of this in System Settings > Privacy & Security. macOS may also ask you to confirm a screen capture, or ask for Desktop access the first time you save there.

Two thinking models, both on your Mac.

The thinking model turns requests like “highlight the total” or “add an arrow” into edits. Choose Gemma or Apple Intelligence in Settings > Models. Both run locally. Your captures, audio, instructions, recognized text, and editing context are not sent to an AI service.

Gemma, our recommendation, runs once its model is downloaded. Apple Intelligence uses Apple’s built-in model on supported Apple silicon Macs with macOS 26 or later, when it’s turned on and ready. Snipkit shows whether it’s available.

AI edits are optional. Capturing and annotating by hand don’t need a thinking model.

Model downloads and app updates.

Downloading a model

Speech and Gemma models download from Hugging Face and its file delivery network, which can see your IP address and which file you requested. Downloading a model never uploads your captures or audio, and once set up, the models work offline. Apple manages its Apple Intelligence model through macOS. See Hugging Face’s privacy policy.

Checking for updates

Snipkit uses Sparkle to check for and download updates from getsnipkit.com, served through Cloudflare. These requests can reveal your IP address, your app and updater versions, and which files were requested. They never include your library. Our server counts each update download separately from downloads on this website, with the version you had and the version downloaded; your IP address and browser headers are not sent.

You can check manually or change automatic updates in Settings > Updates. Downloading Snipkit from this website also makes ordinary web requests to our hosting provider.

Activity stays on your Mac until you share it.

Snipkit keeps a local activity history to show progress and explain errors. It can include instructions, transcripts, recognized text, processing details, and model usage counts. Clear history in the Activity panel erases it.

Copy debug report, in Settings > Privacy & About, puts a report on your clipboard. It can include app and system details, permissions, settings, file paths, instructions, and recent activity. Some known secrets are removed, but the report isn’t anonymous, so read it over before you share it.

Snipkit never sends this report on its own. The app has no advertising or usage-tracking analytics.

No account. A key when you buy.

The 14-day trial needs no username, password, or payment details. Your Mac’s Keychain stores the trial dates and a random installation ID, and later your license key.

Stripe handles checkout and payment. Snipkit’s licensing service, which runs on Cloudflare, stores your purchase email, Stripe order IDs, your license, and the IDs and names of the Macs you activate. License keys are encrypted when stored. Activating sends your key and installation ID to that service, and key recovery emails you a private link through Cloudflare Email Service. None of this includes your captures, audio, or library, and no Snipkit account is needed. See Stripe’s privacy policy and Cloudflare’s privacy policy.

Visiting the site or getting in touch.

This website and our downloads are hosted on Cloudflare, which processes request information such as IP addresses, URLs, and browser headers to deliver and protect the site. There are no advertising trackers or cookies on these pages, and no code from anyone else runs on them. See Cloudflare’s privacy policy.

To learn which pages are useful, our server records public website page views, installer downloads, and aggregate shared-page views and downloads with PostHog. For ordinary website pages, each record includes the page address (without its query string), the referring site, and any campaign tags in the link. For screenshot and text shares, views and downloads use only generic page names: the actual share address, identifier, content, referrer, and campaign or query values are excluded. Sharing API requests, abuse-report pages and submissions, inline image loads, unavailable shares, and metadata-only requests are not counted. Both kinds of analytics include your country and your browser, operating system, and device type. Your IP address and browser headers are not sent. Visits on the same day are grouped by an identifier that changes daily, so visits can’t be linked across days. Page views less than 30 minutes apart also share a random visit ID, which our server forgets after 30 minutes without activity. On ordinary website pages, a small script of our own reports how long the page was open, how far you scrolled, and how quickly it loaded when you leave, and on the home page, whether you played the walkthrough video. This script does not run on share pages. It stores nothing in your browser, and it doesn’t run if your browser sends Global Privacy Control or Do Not Track. Browsers that send Global Privacy Control or Do Not Track are not counted. See PostHog’s privacy policy.

If you sign up to hear when Windows, Linux, or new features are ready, we store your email address, the updates you chose, and when you signed up, in a database on our Cloudflare account. We use it only to send those updates, and never share or sell it. To be removed, email support@getsnipkit.com.

If you email us, we receive your address, your message, and any attachments. Our email providers process it so we can reply. Send only what you want us to see; a description of the problem is usually enough.

Snipkit is made by Bald Cactus LLC. For privacy questions, or requests about information you’ve sent us, email support@getsnipkit.com. For help with the app, visit support.