Privacy Policy

What the extension handles

When a user clicks the extension icon, Fully McFullface handles the rendered content of the current webpage to create, preview and copy the screenshot they requested. A screenshot may include personal, confidential or sensitive information visible on that page.

The extension does not intentionally access passwords, authentication cookies, browsing history or content from other tabs. It does not run continuous browsing surveillance.

Local storage and retention

Screenshot sections are combined and stored temporarily in local extension storage on the user’s device. Temporary screenshots expire after no more than ten minutes and are normally deleted sooner after a successful copy, when the preview closes, after capture failure or during abandoned-session cleanup.

Small local session records contain a random capture identifier and Chrome tab identifiers. They prevent duplicate captures and help clean up interrupted sessions, then are deleted with the associated capture. Local extension storage is not described as encrypted.

Annotation commands remain in the open preview’s memory and are flattened into the PNG during an explicit copy. They are not stored as a separate editable project.

The solid charcoal Cover hides selected pixels in the copied PNG. The original uncensored capture remains temporarily inside the editor until it is copied, closed or removed by cleanup. The current version cannot be enabled in Incognito mode.

Extension transmissions and third parties

Fully McFullface does not automatically transmit screenshots, webpage content, browsing activity, analytics or personal information to us or any third party. The extension uses no account, advertising, analytics, remote API or cloud screenshot service.

If a user pastes the copied PNG into another application or website, that transfer is initiated and controlled by the user and is governed by the destination’s policies.

The extension does not sell, rent or share screenshot content, and does not use website content for advertising, creditworthiness or any purpose unrelated to creating the requested screenshot. Information received through Chrome is handled in accordance with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Because screenshot content stays on the user’s device and is not accessible to us, we do not receive or use that content for our own purposes. The Chrome Web Store nevertheless treats local screenshot processing as handling website content, so it is disclosed here and in the Store privacy declarations.

Website, analytics and technical data

The website is hosted by Vercel. Vercel may process technical request information such as an IP address, browser or device information, requested URL, timestamp and security or error information to deliver and protect the site. Our lawful basis is our legitimate interest in providing, maintaining and securing the website. We do not build a browsing profile from hosting logs or maintain a separate long-term log archive.

The website uses Google Analytics only after a visitor clicks “Accept analytics.” Before consent, the Google Analytics tag does not load and no Google Analytics cookies are created.

After consent, Google Analytics may process pages visited, referral information, approximate location, browser and device information, session information and a cookie-based identifier. We use this information to understand how people find and use the website and improve Fully McFullface. We do not use it for advertising or significant automated decisions. Advertising storage, ad personalisation and Google Signals are disabled.

The website stores the analytics choice in local browser storage for six months. If analytics is accepted, Google Analytics may create _ga and _ga_<container-id> cookies for up to 12 months from first consent without extending that expiry on later visits. User- and event-level Analytics data is retained according to the shortest practical setting available for the property and reviewed when the configuration changes.

Consent is the lawful basis for optional website analytics. Visitors can reopen “Analytics choices” in the footer and select “Reject analytics” at any time. This prevents future Analytics loading and removes the site’s first-party Analytics cookies. The Cookie Policy contains the full storage list.

Support messages

If someone emails us, we receive their email address, message and anything they choose to attach. We use this information to answer the request, operate and improve the product, protect our rights and meet legal obligations.

Our lawful basis is our legitimate interest in providing support, maintaining and securing the product and keeping proportionate business records. If a message concerns a contract or purchase, processing may also be necessary to take steps at the person’s request or perform the contract. We do not use support messages for unrelated advertising.

Support correspondence is normally deleted or anonymised within 12 months after the request is resolved, unless it is reasonably required for an ongoing issue, dispute, security investigation or legal obligation.

Sources, recipients and service providers

We obtain information directly from people who contact us and, for the website only, automatically from the visitor’s browser and our service providers.

• Vercel provides website hosting, delivery, security and technical logs.
• Google Analytics provides consented website measurement.
• Namecheap provides the domain and support-email forwarding.
• Google provides receipt and management of support email.

We may also disclose information when legally required, to establish or defend legal claims, to protect people or the service, or as part of a business sale or restructuring subject to appropriate safeguards.

We do not sell personal information. We do not share it for cross-context behavioural advertising, use it for targeted advertising or use sensitive personal information to infer characteristics. We have not done so in the preceding 12 months.

International transfers

Some providers may process personal information in the United States or other countries outside the United Kingdom or European Economic Area. Where data-protection law requires a transfer safeguard, we use an applicable adequacy regulation, the UK International Data Transfer Agreement or Addendum, European Commission Standard Contractual Clauses or another lawful safeguard. Contact support@fullymcfullface.com for information about safeguards relevant to a particular transfer.

Security

We use proportionate technical and organisational measures intended to protect personal information. The website is delivered over HTTPS and the extension’s screenshot workflow remains local to the user’s device. No internet service or local browser storage can be guaranteed completely secure, so users should avoid sending unnecessary sensitive information in support messages and should check screenshots before sharing them.

Rights and choices worldwide

Depending on where a person lives and subject to legal exceptions, they may have rights to know and access personal information, correct it, request deletion or restriction, object to processing, receive portable information, withdraw consent, opt out of sale, sharing or targeted advertising, and appeal a refused request.

We do not discriminate against anyone for exercising a privacy right. An authorised agent may make a request where applicable, and we may request information reasonably needed to verify identity or authority. These rights are not absolute and vary by jurisdiction.

The right to object: a person may object to processing based on legitimate interests. We will stop that processing unless we have compelling legitimate grounds to continue or need the information for legal claims.

To exercise a right, email support@fullymcfullface.com. People may also complain to the UK Information Commissioner’s Office or their local data-protection authority. EU and EEA authorities are listed by the European Data Protection Board.

There is no automated decision-making or profiling that produces legal or similarly significant effects.

Children

Fully McFullface is not directed to children, and we do not knowingly collect personal information from children through the extension. A parent or guardian who believes a child has sent us personal information can contact support@fullymcfullface.com to request its deletion.

Changes

We will update this policy when the extension, website, service providers or legal requirements change. If a change materially affects how the extension handles user data, the Chrome Web Store disclosures and any required in-product notice will be updated before the changed practice begins.

Legal details

Fully McFullface is a product of Vibrancy Ventures Ltd, registered in England and Wales under company number 15831590. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Vibrancy Ventures Ltd is the legal service provider and data controller, registered with the Information Commissioner’s Office under registration number ZB726250. Contact: support@fullymcfullface.com.