KomaShot

Privacy policy

Last updated:

KomaShot is a browser extension for Chrome and Microsoft Edge that takes screenshots and records your screen. It is built to work on your computer: it has no account, no analytics and no telemetry, and it does not send your screenshots or recordings anywhere unless you tell it to.

What KomaShot stores on your device

  • Screenshots and recordings you make, with their history entries: the address and title of the page, the date and the size. A screenshot also keeps a snapshot of the captured page’s text, element positions and CSS colours, which powers the measuring, colour and text-from-the-page tools. All of it is kept in your browser’s IndexedDB on this device until you delete it.
  • Settings, such as file name templates and annotation styles, kept in the browser’s local extension storage on this device. If browser sync is on, a copy also goes to your browser’s synced extension storage so your other computers get the same settings. The microphone, camera and default upload destination you pick stay on this device.
  • Your license, if you bought Pro: the license key you entered, this device’s activation, the email address you bought with (as reported by the license service), and when the key was last checked. The activation and email are kept in IndexedDB on this device. If browser sync is on, the license key itself is also kept in your browser’s synced extension storage, so KomaShot can activate Pro on your other computers signed in to the same browser profile (each one uses one of the key’s device activations).
  • Upload destinations you add in Pro, including the credentials you enter for them. They are kept in a local vault in IndexedDB, never in synced browser storage, and are encrypted when you set a vault passphrase.

None of this is synced to us. We have no server that receives it.

What leaves your device

KomaShot connects to at most two kinds of destination. If you only use the free features, it connects to neither.

  1. The license service. KomaShot sells Pro through Lemon Squeezy, which runs the checkout and issues license keys. You pay on Lemon Squeezy’s checkout page, not in KomaShot, and KomaShot never sees your payment details. Only after you enter a license key does the extension contact api.lemonsqueezy.com: to activate the key on this device (sending the key and a device label such as “KomaShot (Chrome, mac)”), to check it about once a day and when you use a Pro feature, and to free this device’s activation when you click “Remove from this device”. The service answers whether the key is valid and with the email address you bought with.
  2. Upload destinations you set up yourself (for example your own S3 or R2 bucket, a GitHub repository, Imgur, WebDAV or a webhook). A file is sent only when you press Upload, only to the destination you chose, using the credentials you entered. “Test connection” in Settings sends a tiny test image to that destination and opens the link it returns.

Nothing else is sent: no usage statistics, no crash reports, no screenshots, no page content.

What KomaShot does not collect

  • No telemetry or analytics of any kind.
  • No account. KomaShot never asks for your name or email; the only email it keeps is the one you bought Pro with, reported by the license service.
  • No browsing history. A recording keeps only the address of the tab it was made in.
  • No advertising, and no selling or sharing of data with anyone.

Screen recording (Pro)

  • Tab recordings include the tab’s own audio when it is recorded directly; through the share picker, audio is included if you choose to share it. Window or screen recordings go through the browser’s share picker every time, and include system audio only if you choose to share it there.
  • Microphone and webcam are used only when you turn them on for a recording. The browser asks for permission the first time.
  • Auto-zoom timeline. While you record a tab, KomaShot notes, on that tab’s own website only: pointer position, clicks, scroll amounts, and the viewport size and zoom level. It uses them to place zooms. It never records keystrokes or the values you type, ignores frames from other websites, and stops taking notes when the tab leaves the website you started on.
  • Recordings are processed and exported (MP4, WebM, GIF) on your device. The video engine runs with network access removed.

Browser permissions

Permission Why KomaShot needs it When you are asked
activeTab Capture the tab you act on, and, while recording it, add the click timeline to that tab. Never: your click or shortcut grants it for that tab.
scripting Show the capture overlay and run the recording timeline in the active tab. Never.
offscreen Copy images, run offline text recognition (OCR) and record tab video in a hidden extension page. Never.
storage, unlimitedStorage Keep settings, screenshots and recordings on your device without the browser deleting large recordings. Never.
downloads Save screenshots and exported videos to your computer. Never.
clipboardWrite Copy screenshots and upload links to your clipboard. Never.
tabCapture (optional) Record the current tab directly, without the share picker. Only when you turn it on, with “Enable one-click recording” in the KomaShot menu or “Direct tab recording” in Settings › Recording. The browser then shows its own warning. Without it, tab recording still works through the share picker.
Website access (optional) Send files to an upload destination you configured. Asked for that destination’s addresses only. When you save an upload destination. You can revoke it in Settings › Permissions.
Microphone, camera Add your voice or webcam to a recording. When you first turn them on.
Screen sharing Record a window or the whole screen. Every time, through the browser’s share picker.

Deleting your data

  • Delete single items from the history, or use “Delete all recordings” in Settings › Recording.
  • Remove an upload destination in Settings; revoke its website access in Settings › Permissions.
  • Remove your license key from this device with “Remove from this device” in Settings › License. This also removes the key from synced storage, so new computers no longer activate it; computers where it is already active keep it until you remove it there. Your purchase record stays with Lemon Squeezy, which handles the payment; see its own privacy policy.
  • Uninstalling KomaShot removes everything it stored on this device.

This website

This site has no cookies, no analytics and no tracking. Pages, fonts and videos are served from this site only; it loads nothing from other websites. It is hosted on Cloudflare, which, like any web host, processes the technical data needed to deliver a page, such as your IP address. We do not receive visitor statistics from it.

Changes

If KomaShot starts handling data differently, this page is updated before that version is released, and the date at the top changes.

Contact

Questions about this policy or your data? Write tonhiembv@gmail.com.