SnipperYour screenshots stay on your Mac.
This describes Snipper, including optional website analytics and the reporting service in the next app update, updated on 5 November 2026.
Capture and editing
Snipper processes screenshots locally. It does not upload screenshots, clipboard images or annotations. macOS asks you to allow screen recording before capture can work.
Downloads and updates
The website and release files are hosted by Vercel. Visiting this site, downloading Snipper or checking for updates sends ordinary web requests, including your IP address, to our hosting provider. Sparkle handles app updates. System-profile reporting is disabled, and update requests do not include your screenshots.
Optional website analytics
Website analytics are off until you choose Allow analytics in Analytics preferences. If you allow it, page visits and download-link clicks are sent to PostHog in the EU using a random browser identifier, with a separate session identifier. We collect a fixed page identifier, a broad referral category, known public referring domains, and the release version associated with a download click. Unknown referring domains are grouped as external. Full referring URLs, URL queries and fragments, arbitrary campaign values, form text and screenshot contents are excluded. Session replay, interaction and clipboard autocapture, heatmaps, surveys and automatic exception collection are disabled.
Your choice is stored locally in this browser. After consent, PostHog stores analytics identifiers in local storage; no analytics cookies are used. Browser Do Not Track and Global Privacy Control signals disable collection. The browser identity is separate from the app installation identity. A download-link click does not prove download completion or installation.
You can decline later through Analytics preferences. This stops collection, clears the SDK identity and local analytics persistence, and applies to other open tabs when they receive the storage change. A request already in flight may finish, and previously sent events are not deleted. The network provider receives your IP address; PostHog discards stored client IP data, and our events disable GeoIP enrichment. If local storage is blocked, your choice can apply only to the current page.
Local data
Settings, saved images and diagnostic timing logs remain on your Mac. The current editor image is held in memory and is not restored after the app quits. There is no Snipper account or cloud screenshot library.
Optional usage analytics
From version 0.5.3, Snipper asks whether you want to share usage and reliability analytics. Nothing is collected by the analytics SDK until you agree. You can change the choice in Settings → Privacy. Consented events are sent to PostHog in the EU and include feature usage, capture and export timings, image dimensions and annotation counts, app/macOS version, display count, and safe error categories. A random identifier represents this installation, with separate identifiers for operations, documents and reports. These do not contain your images or notes.
Screenshot contents, annotation text, clipboard contents, filenames, paths, window titles, machine names and credentials are excluded. Session replay and automatic interface recording are disabled. Location enrichment is disabled; requests still expose an IP address to the network provider, and the PostHog project anonymises stored IPs. Events may queue locally while offline. Turning analytics off stops collection and clears its local queue and identifier; a request already in flight may finish. It does not delete data already sent to PostHog, which is retained according to PostHog’s retention settings (the free plan currently lists one-year event retention). No personal profile or cross-device account is created.
Problem reports
Report a Problem keeps separate local reports containing your notes, app/system details and recent diagnostic events. It does not collect images, clipboard contents, window titles or personal file paths. Notes you type are included verbatim. Logs rotate within approximately 1.5 MB, and new reports include at most seven days of recent events. Saved reports retain their frozen diagnostics until you remove their local files. Copy Summary and Export Report send nothing automatically.
The next app update uses Send report to send notes and sanitized diagnostics over HTTPS through Cloudflare to the Snipper team’s Linear workspace. No Linear account or connection setup is needed. Cloudflare receives the report and network IP address; the service uses the IP transiently for rate limiting and does not retain report bodies, request logs or traces. It accepts bounded text-only reports, fixes the receiving Snipper team and provides no image upload or issue-reading endpoint. Linear holds delivered reports under the workspace’s access and retention settings. The dedicated credential is held only as a server secret.
Pending reports retry at launch and every five minutes while Snipper is running; unsent drafts are never queued automatically. A report is marked Sent only after a validated issue receipt is saved locally. Service outages and rate limits leave it pending for retry, copy or export. No images or attachments are added. The currently published 0.5.6 app and older pending direct-Linear reports use the existing per-Mac Keychain connection. Older pending reports keep their original destination and are never redirected into the shared service. Disconnecting that legacy connection removes its local credential and pauses those attempts; an in-flight request may complete.