Data Retention Policy
Effective 3 November 2026
This policy covers the StoreShot API at api.storeshot.art, the developer console and the storeshot.art website. It complements the Privacy Policy and the API terms. The StoreShot mobile apps are covered by the Privacy Policy.
Automatic deletion runs once a day at 03:15 UTC. "30 days after" means at the first daily run after the 30 days have passed, so data can stay up to one day longer.
How long we keep your data
| Data | Kept | Notes |
|---|---|---|
| Uploads that were never completed | 24 hours after the upload was started | Pending or failed uploads. A presigned upload URL is valid for 15 minutes. |
| Uploaded images | The file is deleted 30 days after the upload was created | The upload record (size, checksum, and the origin and path of an imported URL) is kept, marked as deleted. |
| Uploads you delete | The file is deleted immediately | With DELETE /uploads/{id}; the record is kept, marked as deleted. |
| Images generated with a test key | Image and thumbnail are deleted 30 days after the generation finished | The generation record is kept. |
| Images generated with a live key | Until you delete the generation | With DELETE /generations/{id} the files are deleted; the record is kept with its deletion date. |
| Screenshot sets | Until you delete the set | Its images follow the two rows above. ZIP archives are built when you download them and are never stored. |
| Webhook delivery logs | 30 days after the delivery finished | Each attempt stores at most the first 256 characters of your endpoint’s response. Events are deleted 30 days after they were created once no delivery refers to them. |
| Account activity log | 400 days | |
| Background job records | 30 days after the job finished | |
| Credit ledger, usage and attribution records | Kept for accounting and reporting; not deleted automatically | Personal data is removed from them when the account is closed. |
| Payment provider events | 90 days | Checkout and order records are kept as billing records. |
| Developer console sessions | Expire after 7 days without use, and at most 30 days after sign-in | Expired sessions are kept as revoked records. |
| API keys | Until you revoke them | Only a SHA-256 hash of each key is stored; revoked keys are kept as records. |
| Project logos | Until you replace the logo or delete the project | |
| Brand kits | Until you delete the brand kit | Its name, colours, background and caption choices, and its copy of your logo. Deleting the brand kit deletes its logo copy at once. |
| Brand kit logos used by generations | Deleted 30 days after the last generation or screenshot set that used it was created | Generations and screenshot sets made with a brand kit keep their own copy of its logo, so a retry gives the same images, also after you change or delete the brand kit. The brand kit choices they used stay with their records. |
| Database backups | 30 days | |
| Backups of images | None | Uploaded and generated images are not backed up. |
| Request logs | At most 30 days | Each deployment deletes the log of the server it replaces, and the server is redeployed automatically before its log is 30 days old; older lines are deleted earlier once a server’s log reaches 30 MB. A line records the method, path, status, duration, request ID and your account and key IDs; never request or response bodies, API keys or IP addresses. |
| Error reports | 30 days | Reports of unexpected server and console errors, sent without user details, request headers, bodies or IP addresses. |
| Website analytics (storeshot.art) | Aggregated by Cloudflare under its own retention | When site analytics is on, storeshot.art uses Cloudflare Web Analytics: no cookies and no personal profiles. We see only aggregated page views and page-load timings by page, referrer, country, browser and device type. |
| Closing your account | Personal data is deleted or anonymised immediately; your content within 30 days | Delete your account in the developer console (Account, then Delete account) after cancelling an active monthly plan; an overdue plan payment must be settled or the plan cancelled first. Your profile, API keys, webhooks and console sessions are removed at once and remaining credits are forfeited; uploads, generations, screenshot sets, projects and brand kits with their images are deleted within 30 days. Billing, credit ledger, usage and trial-claim records are kept without personal data for accounting and reporting. Our payment provider keeps its own customer record; contact us to have it removed. |
Deleting data earlier
You can delete uploads, generations and screenshot sets at any time through the API or the console; their files are deleted at once. Records that are kept after a deletion do not contain the images themselves.
Questions
Contact storeshot@draggable.io.