Privacy

Privacy Policy

Last updated: 10 October 2026

This policy explains how the ShotLama website at devmil.de/shotlama and the ShotLama app for macOS, Windows and Linux handle personal data.

1. Controller

Email: info [at] devmil [dot] de

2. Overview

This website and ShotLama are built to collect as little as possible. Devmil Solutions does not run analytics, advertising or tracking. The website sets no cookies and loads nothing from third-party servers: its fonts, images and scripts are served with the site itself. ShotLama has no account and no cloud service, and it does not send your captures, recognised text, History or settings to Devmil Solutions.

3. Hosting

The website is hosted by GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When the site is visited, GitHub processes technical access data to deliver it and keep it secure: IP address, date and time, requested page, referrer, browser and operating system. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and reliable website).

GitHub may process data in the USA. GitHub, Inc. is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR). Details: GitHub privacy statement. Devmil Solutions has no access to these logs.

4. Downloads and release data

The download list on the home page and the release notes are read from a file on this website. There is no public release yet. Once releases are published, the download links point to GitHub Releases, and the files are delivered by GitHub from github.com and its download servers. When you download a file, GitHub processes the same technical access data as described under Hosting, on the same legal basis and under the same privacy statement.

To suggest the right package, the page checks your browser’s operating system in the browser itself. This information is not sent anywhere.

5. Local storage in your browser

When you choose a language, the website stores that choice (preferred-language, value en or de) in your browser’s local storage. It stores nothing else. The setting is shared with other Devmil Solutions websites on devmil.de, so they open in the same language. This data stays on your device, is never transmitted, and can be deleted in your browser at any time. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in showing the website in the language you chose). Storing the choice on your device does not require consent under § 25(2) no. 2 TDDDG, because it is strictly necessary for a service you requested.

6. The app

ShotLama is in development and has not been released yet. This section describes the current builds. It will be updated before the first release and whenever the app’s behaviour changes.

Network

The current version of ShotLama makes no connections to the internet. It contains no analytics, telemetry, crash reporting or advertising. It uses only local interfaces of your computer, for example to make sure a single instance runs and, on Linux, to talk to your desktop.

An update check is planned. It will run only when you start it or turn on a weekly schedule. Before it is enabled, this section will name the server it contacts and the data it sends.

Captures, History and settings

Captures, annotations, History and settings stay on your computer. Saved captures go to the folder you choose; by default this is the Desktop on macOS and Pictures/ShotLama on Windows and Linux. History, settings and a small clipboard cache are kept in ShotLama’s data folder in your user account. History keeps captures for 30 days by default, and you can change this or clear it.

A capture leaves your computer only when you send it: by copying it to the clipboard, dragging it into another app, saving it to a folder or, on macOS, choosing a service in the system’s share menu. The app or service you hand it to processes it under its own terms.

Saved and copied images carry no identifying metadata: no location, no device name and no timestamps. Concealment is flattened into every output, so concealed pixels cannot be restored from the file.

Text recognition

Capture Text recognises text on your computer with the engine your system provides: Vision on macOS, the built-in text recognition on Windows, and Tesseract on Linux if it is installed. No image or text is sent to a server for this.

Permissions

• Screen recording (macOS): ShotLama asks for screen access to take the captures you request.
• Linux desktop portals: on Wayland, your desktop’s screenshot and screen-sharing portals take part in captures, and the global shortcuts portal may ask you to confirm ShotLama’s shortcuts.
• Files (macOS): ShotLama runs in the macOS App Sandbox. Outside its own data folder, it can only write to folders you have chosen.
• Camera, microphone and accessibility: the current version does not use them. It may check whether these permissions have been granted, without asking for them or opening any device. Screen recording with audio, a camera overlay and scrolling capture are planned; they will ask for permission when you first use them, and this policy will be updated before they are released.
• Notifications: ShotLama does not use system notifications.

Credentials and logs

ShotLama has no account and stores no passwords or tokens. It writes no log file. Its diagnostic output never contains capture pixels, recognised text, file paths, window titles or device names.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR). You also have the right to lodge a complaint with a supervisory authority, for example the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.

To exercise your rights, contact info [at] devmil [dot] de.

8. Changes

This policy is updated when the website or the app changes. The current version is always available on this page.