Privacy

Privacy Policy

This policy explains how Screencial handles personal data under the GDPR and Maltese data protection law.

Last updated May 24, 2026
Framework GDPR / Malta
Contact support@screencial.art

1. Controller and Scope

Screencial is operated by Lauro Guedes ("Screencial", "we", "us"). For privacy requests, contact support@screencial.art.

This policy applies when you visit the landing page, create an account, start a trial, use the editor, contact support, or purchase access to Screencial.

2. Personal Data We Process

  • Account data: name, email address, password hash, verification state, and account settings.
  • Connected account data: Google account identifier and avatar URL when Google sign-in is used.
  • Billing data: trial status, plan choice, Stripe customer, subscription, purchase, invoice, and webhook identifiers.
  • Product data: template choices, editor settings, generated screenshot state, custom uploads, and temporary signed download URLs.
  • Technical data: IP address, user agent, session identifiers, security logs, and device/browser information needed to operate the service.
  • Support and waitlist data: messages, email addresses, attachments, and related correspondence when you contact us or join a list.

3. Purposes and Legal Bases

  • Contract: to create accounts, provide the trial, run the editor, deliver screenshots, manage subscriptions, and provide support.
  • Legitimate interests: to secure the service, prevent abuse, debug errors, improve reliability, and keep basic business records.
  • Legal obligation: to keep accounting, tax, billing, and compliance records where required.
  • Consent: to use optional analytics, advertising, or non-essential tracking if those tools are added in the future.

Screencial does not currently implement optional analytics tracking on the landing page. If optional tracking is added later, it must respect the cookie choice stored by the consent component.

4. Cookies and Local Storage

Essential cookies and similar technologies are used for sign-in, CSRF protection, session security, and core product behavior. These are necessary to provide the service.

Non-essential analytics or tracking will remain disabled unless you choose "Accept all" in the cookie banner. If you choose "Essential only", Screencial stores that decision in localStorage and optional tracking must remain off.

5. Processors and Third Parties

We use trusted service providers only where needed to operate Screencial:

  • Stripe for checkout, subscriptions, invoices, tax/payment metadata, and payment security.
  • Google when you choose Google sign-in or connect a Google account.
  • Hosting, database, cache, queue, storage, and email providers for infrastructure and support.
  • Security, logging, and error-monitoring tools where needed to protect and maintain the service.

We do not sell personal data. Processors may handle data in the EU/EEA, the United States, or other jurisdictions. Where personal data leaves the EEA, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or equivalent contractual and technical protections.

6. Retention

  • Account data is kept while your account is active, then deleted or anonymized where possible after account deletion.
  • Generated screenshot files and related cache entries are temporary and are designed to expire or be pruned after about 24 hours.
  • Custom screenshot uploads may be stored temporarily to render and download the requested output.
  • Billing, payment, accounting, tax, and fraud-prevention records are kept as long as legally or operationally required.
  • Support messages and security logs are kept only for as long as needed for support, security, dispute handling, or legal compliance.

7. Your GDPR Rights

Subject to legal limits, you may request access, rectification, erasure, restriction, portability, objection to processing, and withdrawal of consent. Withdrawal does not affect processing that happened before withdrawal.

You may also lodge a complaint with the Maltese Information and Data Protection Commissioner (IDPC), or with another EU supervisory authority where applicable.

8. Security

We use technical and organizational measures intended to protect personal data, including access controls, encrypted transport, signed temporary URLs for generated assets, and limited operational access. No online service can guarantee absolute security.

9. Children

Screencial is not intended for children. If you believe a child provided personal data, contact us so we can review and delete it where required.

10. Changes and Contact

We may update this policy as the service changes. Material changes will be reflected by updating the date above or providing additional notice where appropriate.

Privacy questions and rights requests can be sent to support@screencial.art.