Privacy
Your captures, your sharing choice
Kyazo is a private preview for approved accounts. The staging API accepts validated PNG uploads and enforces private or unlisted access. Unlisted captures have a public share page. The browser can import still PNG and JPEG files by picker, paste, or drop.
Account and sign-in
The preview is limited to approved accounts. Clerk handles Google and email sign-in, identity, and sessions. Kyazo checks the verified primary email against its own allowlist, so signing in alone does not grant workspace access. Kyazo stores a stable Clerk user ID, account state, and personal workspace information in Cloudflare D1.
Captures and metadata
Uploaded originals and thumbnails are kept in private Cloudflare storage. Capture size, time, visibility, and basic technical details support the library. Source app, window title, and URL storage is off by default and requires an explicit setting. Source information is kept out of public share responses.
The database and storage resources have a Western Europe location preference for the initial users. That preference is not a guarantee that every request or copy remains in one region.
Unlisted and private
The current default for a new capture is anyone with the link. Anyone who has an unlisted link can open it, save the image, and pass the link on. Only me will require the owner's account. The owner can change the default and each capture's visibility. Neither option can recall copies someone already downloaded or a preview another service retained.
Retries and local copies
The desktop app is designed to keep a local retry copy until upload is confirmed or deliberately discarded. Browser uploads keep their normalized PNG and retry key only while the tab is open. Closing the tab loses that retry copy.
Deletion and recovery
Ready captures remain until their owner deletes them. Deletion revokes links immediately and schedules private originals and thumbnails for removal; the current target is within 24 hours. Failed upload objects have a 24-hour cleanup grace period. Account deletion first revokes local access, then removes captures and the Clerk user through durable background work. No recovery copies or trash feature are currently offered. Database and provider backups may follow their separate retention policies.
Learn more
Read the retry guide or check release notes for what has shipped.