Privacy & safety
Short version: your photos never leave your phone unless you save or share them yourself. Shootsy has no accounts, no ads, no analytics and no tracking.
What the app does
- Shootsy is a web page that runs entirely in your browser. There is no Shootsy server that receives your pictures.
- Every film look (grain, colour, glow, texture) is worked out on your own device.
- A normal roll, its prints, handwriting and collage live only in the page's memory. Closing or reloading the page clears them.
- If you turn on photo challenges, that roll is saved on this phone so you can come back to it (see below).
Camera
- The camera is only used after you tap Live camera or the shutter, and your browser asks your permission first.
- Live view frames are processed on your device and are never recorded or uploaded. Stopping live view turns the camera off.
- You can take back camera access at any time in your browser or phone settings.
Saving and sharing
- Nothing is saved until you tap Save. Saved prints and collages go only where you choose, such as Photos or Files.
- Saved images are redrawn from scratch, so they carry no location or camera details from your original photo.
What is stored on your device
- A few small settings: whether to skip the welcome screen, your camera body colour, your roll size, a display preference, and whether photo challenges are on and which challenge deck you picked.
- A photo challenge roll in progress: its prompts, deck and roll size, the developed prints and your handwriting. It is kept in this browser's own storage on this phone and is never uploaded. It is deleted when you start a new roll, when you tap Delete roll, or automatically 30 days after you started it. Original camera photos are not kept.
- The installed app keeps a copy of its own files so it opens offline. Clearing this site's data in your browser removes everything.
Network
- The only things downloaded are the app's own files and fonts. The app never sends your photos or anything you do to anyone.
- Like any website, the host that serves the app (Cloudflare) may keep standard request logs, such as IP address and time.
How you're protected
- The app is served over HTTPS only.
- A strict security policy only lets the page run its own code and load its own files, and stops other sites from embedding it.
- Camera access is limited to this site, and microphone and location are switched off entirely.
- Photos you open are size-checked and decoded by your browser; the app never runs anything from them.
Last updated 9 October 2026.