What we hold,and what we can’t delete.

1. Who holds it

What is collected here, and why, is decided by Screenshotthis.com, who is reachable at info@Screenshotthis.com.

2. What we hold

• An account identifier. A random identifier in a cookie, created the first time you load the site. It is what your play credits belong to. It is not linked to a person until you choose to sign in.
• An email address, if you give us one. Stored with a scrypt hash of your password. We never store the password itself and cannot read it.
• An email address, if you ask to be told when a post goes. Kept with the post you asked about, so we can send one email if it stops being public. Nothing is sent to it until you confirm from the first email, and every email has a link that stops all of them for good. After you say stop we keep the address only to make sure we never write to it again.
• Your X account, if you sign in with X. Your numeric X user id, your username and your display name. Nothing else. We do not receive your X password, your email from X, your followers or your direct messages, and we never post anything as you.
• What you did here. Coins you minted, trades you made, what you hold, your play balance and fees earned. Trades are shown on a public tape, named only if you have signed in with X and otherwise as “someone”.
• Screenshots you upload. The image itself, its SHA-256 fingerprint, the caption you gave it, and the X account that uploaded it. The image is public: anybody with its address can see it, and it is shown on the coin’s page under your X username.
• A wallet address, if you connect one. Only as part of a transaction you sign. We do not ask for or store a private key, ever, and could not use one if we had it.
• Visit counts. Which pages are opened, from which site you came, your country and the kind of device, and whether a few buttons were pressed (paste, save, pay, share). Counted by Vercel Web Analytics, which sets no cookie and does not identify you or follow you between days or sites.
• Ordinary server logs. Our hosting and database providers keep request logs that include IP addresses, for security and debugging. We do not build profiles from them.

3. Cookies

Two, both strictly necessary, both unreadable by JavaScript in your browser. There is no analytics cookie (visits are counted without one), no advertising cookie and no third-party cookie, which is why this site has no cookie banner.

• callit_account — the account identifier above. One year. Without it your play credits would vanish on every page load.
• callit_x_handshake — set only while you are signing in with X, to prevent a sign-in being forged. Ten minutes, deleted as soon as you come back.

4. Who else sees it

We do not sell anything and we do not share anything for advertising. The site runs on services that necessarily see some of it:

• Vercel — hosting, and therefore request logs, and the visit counts above.
• Supabase — the database that holds everything in section 2.
• Stripe — when you pay by card. Stripe takes the card on its own page; we never see the number.
• Resend — sends the alert emails, and so sees the address and the email.
• X — when you sign in with X, and when the bot reads or posts publicly.
• A Solana RPC provider — to read the chain and send the transactions you sign.
• Public price feeds — to score a call. They are sent an asset and a date, never anything about you.
• GitHub — public commit counts for the asset a call is about. Nothing about you is sent.

We will also hand over data where the law actually requires it, and not on a request that merely asks nicely.

5. The part that cannot be deleted

Minting a coin writes the post’s words and its identity, or an uploaded screenshot’s fingerprint and caption, onto the Solana blockchain. That is the point of the product and it is permanent: the blockchain is public, copied by thousands of machines and outside anybody’s control, ours included. We cannot delete it, edit it or make it private, and neither can anyone else.

We can take a coin off this site — off the board, out of its caller’s record, out of the scoring — and we can delete an uploaded image from our servers, and we will, on request from the person who wrote the post or is in the picture. Understand the difference before you mint anything.

6. Why we are allowed to hold it

Because you asked for the service: an account, its credits and its trades are what make the site work at all. Because we have a legitimate interest in keeping it running and un-abused, which is the logs. And because you chose it, for the optional parts — an email, an X account — which you can withdraw by asking us to delete them.

7. How long

Account data stays until you ask us to delete it. Logs are kept as long as our providers keep them, which is weeks, not years. Blockchain data is forever, as above.

8. What you can ask for

A copy of what we hold about you, a correction, deletion, or that we stop. Depending on where you live you may have these as legal rights and a right to complain to a regulator; where you do not, ask anyway and we will do it. Write to info@Screenshotthis.com.

Two honest limits. We cannot delete anything from the blockchain. And if you delete an account holding play credits, the credits go with it.

9. Children

This site is not for anybody under 18. We do not knowingly hold data about children, and we will delete it if we find we have.

10. Changes

If this policy changes, the date at the top moves. A change that actually affects what we collect will be said plainly rather than buried in a diff.

The terms → The mechanism, with the numbers →