Last updated 9 September 2026
Overshoulder reads your screen to do its job, so you deserve a precise account of where those pixels go. This page describes what actually happens, not what is theoretically permitted.
We run no advertising and set no tracking cookies. Visitor counts come from a cookieless measurement that is switched off entirely for visitors in the EU. Browsing the site stores nothing; signing in stores only the token that keeps you signed in. The desktop app sends screenshots to one processor in order to answer your question, and keeps no copy of them. We do not sell or share personal information, and we have never done so.
This policy applies to the Overshoulder website at https://overshoulder.net and to the Overshoulder desktop application. Where the two differ, they are described separately, because they collect very different things.
Browsing the public pages does not set a cookie or write anything to your browser's storage. There is no advertising tag, no session recording, and no fingerprinting script, and we set no tracking cookies. Page views are counted by the cookieless measurement described below, which identifies nobody and is not sent to EU visitors at all. We do not know who you are. Creating an account is a separate, deliberate act, described below.
The site loads typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). To deliver a font file, Google necessarily receives your IP address and the page you requested it from. Google Fonts does not set cookies, but the IP address is personal data under the GDPR and is processed by Google under its own terms.
If you would rather this did not happen, blocking those two hosts will leave the site fully readable in a fallback typeface. We intend to self-host the fonts so this request disappears entirely.
The site is served by Cloudflare, which processes connection data such as IP addresses in order to deliver the page and protect against abuse. That is a normal function of any web host and happens before our code runs.
We use Cloudflare Web Analytics to count page views and see which pages people arrive on. We use it to find out whether anything we write or post actually reaches anyone.
It is deliberately the least invasive option available:
Any browser content-blocker will stop it, and the site works identically without it.
This is where the meaningful processing happens, so it is worth being exact.
Those items are sent to Anthropic, which operates the model that analyses the image and returns the location of the control you need. Anthropic acts as our processor for this purpose and handles the data under its own commercial terms. Nothing is sent anywhere else. There is no third-party analytics, telemetry, or crash reporting in the application.
The application writes two small files to your own application-data folder: your settings, and a running tally of usage used to enforce your own spending limits. Both stay on your computer. Deleting the application removes them.
A screenshot captures whatever is visible, which may include other people's information or your own confidential material. The application instructs the model never to read out passwords, keys, or card numbers, and to treat on-screen text as data rather than as instructions. That is a meaningful safeguard but not a guarantee. Close or minimise anything you would not want analysed before you ask a question. You can also press the hide shortcut to stop the app looking at all.
You can use the public website without an account. Creating one adds the following.
Those two buttons exist so you do not have to email anyone to exercise rights you already have.
You must be 16 or older to create an account, and we ask you to confirm it at signup. If we learn an account belongs to someone younger, we delete it.
We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined by the California Consumer Privacy Act as amended by the CPRA. We have never done either. There is nothing to opt out of, because the practice does not exist here.
We also honour the Global Privacy Control signal. Because we run no advertising or tracking technology, a GPC signal requires no change in our behaviour — there is no sale or sharing for it to stop.
If this ever changes, this page will be updated before the change takes effect, and a working opt-out mechanism will be provided at that time.
Where the GDPR applies, we rely on:
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to obtain a portable copy, to object to or restrict processing, to opt out of sale or sharing, and not to be treated differently for exercising any of these rights.
If you have an account, the download and delete buttons on your account page cover access and erasure immediately, without waiting for us. For anything else, write to support@overshoulder.net and we will respond within the period required by the law that applies to you.
Screenshots and questions are not retained by us. Local settings and usage files remain on your device until you delete them.
Account data is kept for as long as the account exists. When you delete your account it is erased at once. Support tickets are kept while the account exists so the history stays useful to you, and go with it when you delete.
Our processors operate in the United States. Where data is transferred out of the UK or the European Economic Area, it is done under the safeguards those processors have in place, such as Standard Contractual Clauses.
Overshoulder is not directed at children and is not intended for anyone under 16. We do not knowingly collect information from children.
If this policy changes materially, the date at the top will change and the substance of the change will be described here.
Questions or requests: support@overshoulder.net.