Your captures.
Your conversation.

Effective date: November 3, 2026

ShotDropper by Zypa, an InferaLabs product, captures the visible part of a browser tab and brings the screenshot to the existing ChatGPT or Claude conversation you select. This notice covers the extension. Our website privacy notice separately explains beta signup, email, and optional website analytics.

Never sends your message automatically. Offering an image to ChatGPT or Claude can start that provider’s upload or processing before you press Send. Review your screen before capturing; reviewing a message before sending does not prevent earlier attachment processing.

What ShotDropper handles

Screenshots you choose to capture

After privacy agreement and destination selection, a capture starts when you click the ShotDropper icon near Chrome’s address bar or invoke the shortcut. It includes the visible browser viewport, which may contain personal information, messages, or other private content. There is no selected-region or scrolling full-page capture in this version. Only capture content you intend to share with the selected AI service.

Your remembered conversation

To return to the right thread, ShotDropper saves the selected AI provider, conversation URL and ID, tab and window IDs, and the latest engagement timestamp in local extension storage (Chrome’s storage.local). Options displays the remembered conversation URL. A content script on ChatGPT and Claude observes trusted clicks or edits in a visible, enabled message box, including on tabs present at install, update, or browser startup. It passes the conversation page URL, without draft text, to the extension’s service worker. A destination is saved only when that URL matches the current main-frame tab’s canonical conversation URL. Making a tab active alone does not save a destination. This is targeted conversation routing, not a complete browsing-history collection or raw input-event or keystroke recording.

Draft-preservation checks and diagnostics

ShotDropper checks the page locally to support attachment and preserve your draft. Its ChatGPT diagnostic code reads draft text locally and computes a bounded fingerprint to compare the draft before and after delivery. The check reads up to 4,000 characters of visible message-box text, excluding attachment chips and buttons. It compares a short checksum before and after the offer, then discards both the text and checksum. Only whether the draft was compared and preserved is stored. Claude does not read draft text for this check. Existing ChatGPT attachment names are compared locally in a similar way; only the preservation result is stored.

Two local diagnostic records describe the most recent delivery offer and, on ChatGPT, attachment observations: timestamps, counts, booleans, page-element identifiers, bounded error names, and reason codes. They do not contain the screenshot, conversation URL, raw draft text, or draft checksum. A stored short mark identifies a file input’s DOM ID, not your draft. These records do not establish that a provider upload has finished. Options’ “Clear delivery and observation records” removes both records. Claude attachment provenance and ChatGPT bridge objects stay only in the page session and are dropped on page reload.

Recovery images and the clipboard

ShotDropper keeps a recovery image in Chrome’s session extension storage (storage.session). The next successfully saved capture replaces the previous recovery record. Oversized recovery images may be reduced to fit storage. Use Clear in Capture Recovery to clear that saved recovery image. If session storage rejects the image, that record is removed and the service worker temporarily holds the image in memory. Opening or reading Recovery does not consume this temporary image. It is cleared when a later capture is stored in session storage, you use Clear capture, agreement is withdrawn, or the worker stops. The clipboard helper keeps an in-memory image payload only during its write, then clears it.

The extension writes the captured PNG to the system clipboard as part of delivery or fallback and when you copy from Recovery. It does not request clipboardRead permission. Clipboard contents can outlast the extension’s recovery copy; replace or clear them separately using your system’s clipboard controls. Clipboard history tools may keep their own copies.

Where your screenshot goes

The captured PNG is offered to the selected conversation at OpenAI’s ChatGPT or Anthropic’s Claude. Their websites may upload or process the attachment before you send a message. ShotDropper never automatically sends your message. Your AI account settings and the provider’s own privacy and retention practices govern the attachment once offered to that service.

The inspected storage and transfer baseline has no Zypa-owned server receiving screenshots, conversations, or drafts; no extension analytics or telemetry endpoint; no licensing endpoint; and no remotely loaded executable code. Its image fetches convert local PNG data URLs into blobs for clipboard and attachment delivery. Resizing is performed locally. Website PostHog analytics are separate from the extension; they are described in the website notice. This beta does not require a separate Zypa account, activation service, purchase, or subscription.

Keeping and deleting information

• Recovery: Clear removes the saved Recovery image and temporary recovery fallback. A newly saved capture replaces the record; if a session-storage write fails the stored record is removed. Chrome clears session storage when the browser quits or the extension is reloaded or updated. Successful attachment does not immediately delete the recovery copy. No timed expiry is used.
• Diagnostics: the most recent delivery and observation records persist across browser restarts. A later capture replaces the delivery record. A later ChatGPT observation replaces the ChatGPT observation record; a Claude capture does not replace an older ChatGPT observation. Options’ “Clear delivery and observation records” removes both records.
• Remembered destination: a later qualifying interaction in a message box overwrites the destination. It persists across browser restarts until replaced or removed. Options shows the URL but has no separate destination-clear control. Agreeing deletes a destination saved before agreement; withdrawal includes the destination in its cleanup. Options reports whether withdrawal and cleanup were saved and completed. Removing the extension removes its stored destination.
• Other copies: clearing Recovery does not clear the system clipboard or remove attachments already offered to an AI service. Manage those copies separately in your clipboard tools and AI account. Provider retention and deletion rules may continue to apply.

The audited build uses no Chrome sync storage, IndexedDB, localStorage, or cookies. The agreement record is described below. For questions about local information or a privacy request, email admin@zypa.ai. We cannot remotely clear information stored only in your browser or delete copies held by your selected AI provider.

Agreement and local consent storage

Installing ShotDropper opens no welcome page and does not grant privacy agreement. Click the ShotDropper icon to review the disclosure. Until you agree, a capture request opens the disclosure without taking a screenshot. Dismissing it leaves agreement off; agreeing enables handling but does not itself capture.

The local extension record privacyConsent stores disclosure version 1 and the agreement time. This disclosure version is separate from the extension release version. An upgrade without an agreement record is treated as not agreed. Agreement deletes a destination remembered before agreement.

After agreeing, open the conversation you want and click inside its message box to set your destination. Opening the conversation alone is insufficient. Choosing a destination does not grant privacy agreement. Message-box engagement is gated by agreement in both the content script and service worker.

Withdrawing agreement and re-enabling

Use the withdrawal control in Options. Withdrawal attempts to turn handling off and clear the agreement record, remembered destination, session recovery image, delivery and observation records, and the worker’s unsaved image and clipboard payload.

Options reports a complete result, a partial result, or an unsaved result. A partial result means you must not assume all requested cleanup completed; an unsaved result means you must not assume the agreement change was saved. Read the displayed result and resolve any incomplete or unsaved action before relying on withdrawal or deletion. If withdrawal cannot be saved, disable or remove ShotDropper in Chrome. Restarting Chrome could restore the stored agreement. Contact support if you need help.

Once withdrawal is saved, capture requires agreement again. To re-enable, click the ShotDropper icon, review the disclosure, and agree; then set your destination again by clicking the intended conversation’s message box.

Withdrawal does not erase the operating-system clipboard or attachments already given to ChatGPT or Claude. Manage those copies separately in your clipboard tools and AI account.

Limited Use commitment

ShotDropper’s use of user data, including information received through Chrome APIs, adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. This commitment does not imply Google approval.

We limit use to the disclosed capture, conversation-routing, recovery, draft-preservation, and related reliability features. We do not sell extension user data, use it for unrelated profiling or personalized advertising, share it with advertisers or data brokers, or use it to determine creditworthiness or for lending.

Transfers are limited to those necessary for the disclosed purpose, legal obligations, protection against fraud or abuse, or a merger, acquisition, or asset sale with explicit prior user consent. Human access is restricted to the Limited Use exceptions: explicit consent to read specific data, qualifying aggregated and anonymized internal operations, security investigations, or legal requirements. These limits also apply to derived data. They do not authorize unrelated data collection.

If you contact support, send only information you want us to review. Remove sensitive content from screenshots and diagnostics before sharing them.

Questions and changes

Privacy and deletion requests: admin@zypa.ai. Product help: ShotDropper support. Changes to extension data practices will be disclosed with an updated notice and appropriate in-product disclosure and consent before the changed handling begins.