Who is responsible
ShotDock is made by Exdoo TI S. de R.L. de C.V. (“Exdoo”, “we”), a company based in Mexico, which is responsible for the personal data described here under Mexican data protection law. For anything about your data, write to hola@exdoo.mx.
What stays on your Mac
- Your screenshots, recordings and edits. They are saved where you choose and never reach us unless you upload them to the ShotDock cloud.
- Camera and microphone. Used only while you are recording, and only if you turn them on. The result is saved to your Mac.
- Text recognition (OCR). Done on your Mac with Apple’s Vision framework. The image and the text are not sent anywhere.
- Your settings and your own bucket’s keys. Settings live in the app’s preferences; S3 keys live in your Mac’s keychain and never leave it.
What the app sends to us
- Licence and trial. To activate and check your licence, and to stop the 14-day trial from restarting, the app sends: your licence key (if you have one), an anonymous identifier for the Mac, the Mac’s name (so you can recognise it in your list of activated Macs), the app version and, as with any connection, your IP address. The identifier is a one-way SHA-256 hash of the hardware ID: it tells your Macs apart, but we cannot work back to the hardware ID from it.
- Update checks. The app regularly downloads
shotdock.app/appcast.xmlto see if there is a new version. That request carries your IP address and the app version, like any web request. We do not collect a system profile. - Nothing else: no analytics, crash reporting or advertising SDKs inside the app.
ShotDock cloud (only if you use it)
- When you upload, the file goes from your Mac directly to Backblaze B2 (data centre in the eastern United States). Our server only issues a one-off permit for that file. We record the file name, size, type, date and expiry date, tied to your licence (or, during the trial, to the anonymous Mac identifier), to apply quotas.
- Anyone who has the link can open the file. Links contain a random part so they cannot be guessed, but share them with care.
- Everything expires on its own: 14 days during the trial, 30 days with the licence, and the period you choose (7, 30, 90 or 365 days) on the yearly plan. You can delete one file, older files or everything at any time from Settings › Upload.
- We do not look at, analyse or use your files for anything other than serving the link, except when we have to act on a legal request or a report of abuse.
Your own bucket
If you upload to your own S3, R2, B2 or MinIO bucket, the app talks straight to your provider. We never see the file, the link or your keys. That provider’s own privacy policy applies.
Purchases
Payments are processed by Stripe. We never see or store your card number. Stripe sends us your name, email address, the amount and an order reference, which we keep with your licence to email you the key, help you recover it, issue refunds and meet our accounting duties. When a sale or a cloud subscription comes in, our team gets an internal notification with the name, email and key through a private Telegram channel.
This website
- shotdock.app uses Google Analytics 4, which sets cookies, to measure visits: pages viewed, approximate location, device and browser, how you arrived and, on the thank-you page, the purchase (order reference and amount). You can block it with any content blocker or with Google’s opt-out add-on, and the site keeps working.
- The site is hosted by Hostinger, whose servers keep standard access logs (IP address, page, date).
Security records
To protect licences from abuse we keep a log of licence actions (activation, release, refund) with the IP address, and we temporarily record the IP addresses that fail activation repeatedly.
How long we keep it
- Licence and purchase data: while the licence exists, plus whatever tax law requires afterwards.
- Cloud files: until they expire or you delete them; the record of the upload is used for quotas.
- Security records: as long as they are useful to prevent abuse. You can ask us to delete them.
Who we share it with
Only with the providers that make the service work: Stripe (payments), Backblaze (cloud files), Hostinger (website, licence server and email), Google (website analytics) and Telegram (internal sale notifications). Some of them are outside Mexico, mainly in the United States. We do not sell or rent personal data, we do not show ads, and we do not use your data or your files to train AI models. We disclose data to authorities only when the law requires it.
Your rights
You can ask to access, correct or delete your data, or object to its use, by writing to hola@exdoo.mx from the email you bought with (or with your licence key). We answer within 20 business days. Deleting your licence data means we can no longer recover your key or move your licence to another Mac.
Children
ShotDock is not aimed at children under 13 and we do not knowingly collect their data.
Changes
If this policy changes, we will update this page and its date. If a change matters, we will also say so in the app’s release notes.