Privacy policy

Last updated: October 19, 2026

In short: Vandal and its browser extension are local tools. They don't collect, store or send any information about you. The only time Vandal connects to the internet is to check for updates, and you can turn that off. There's no account, no telemetry, no analytics and no ads.

Who we are

Vandal and its browser extension are made by Flowcat Software, a division of Meteoric Leadership Consulting Ltd. In this policy, "we", "us" and "our" mean Flowcat Software.

The Vandal app

• Everything stays on your PC. Your screenshots, markup and settings are saved only on your computer: images where you choose to save them, settings in your Windows user profile (%APPDATA%\com.vandal.desktop). Uninstalling Vandal doesn't delete your saved images.
• Update checks, and nothing else. From version 0.3.0-beta.7, Vandal checks for a new version when it starts and once a day by downloading a small file from GitHub (raw.githubusercontent.com). The request contains nothing about you, only what any download includes (your IP address and the updater's name and version), and GitHub handles it under the GitHub Privacy Statement. Updates you install are downloaded from GitHub Releases. You can turn automatic checks off in Settings › Updates; Vandal then only checks when you press Check now. Vandal doesn't send usage statistics, crash reports or anything else. Links in the app (such as Settings › About) open in your browser only when you click them.
• The clipboard is used only to copy and paste the images you work with, when you ask it to or as your settings say.
• Screen capture happens only when you start one (a shortcut, the tray menu or the editor). Captures go nowhere you don't send them.

The browser extension

Vandal Screen Capture, for Chrome, Edge and Brave, takes screenshots of web pages. It collects nothing and sends nothing anywhere.

• It only reads the tab you capture, and only when you ask: by clicking its toolbar button or pressing one of its shortcuts. It can't read your other tabs or your browsing history.
• Your settings (such as what happens after a capture and your file name pattern) are kept in your browser's storage, and synced by your browser if you use browser sync.
• Recent captures are kept in your browser's local storage for one day, so the result tab can show them again, then deleted.
• Captures go only where you send them: your clipboard, a file you save, or the Vandal app on your own computer when you choose Open in Vandal. Nothing is uploaded.
• The Chrome Web Store (or your browser's add-on store) handles installing and updating the extension, under Google's or your browser maker's own privacy policy.

Windows components

Vandal shows its windows with Microsoft Edge WebView2, which is part of Windows. Vandal doesn't load web content from the internet in it. If WebView2 is missing, the installer downloads it from Microsoft. When you run a downloaded installer, Windows may check it with Microsoft Defender SmartScreen. These are Microsoft components and follow your Windows privacy settings and the Microsoft Privacy Statement.

Downloads

The installer is hosted on GitHub Releases. When you download it, GitHub handles the request under the GitHub Privacy Statement. We see only GitHub's total download counts, nothing about who downloaded.

This website

• No cookies, no analytics, no tracking, and no third-party scripts, fonts or ads. Everything on the page is served from this site.
• Like most web servers, ours keeps standard access logs (IP address, date and time, the page requested, and your browser's user agent). They're used only to keep the site secure and working, are kept only as long as needed for that, and are never sold or shared.

Changes

If a future version of Vandal or its browser extension adds anything else that connects to the internet, this page will be updated to say exactly what's sent and why before that version is released. The date at the top shows when it last changed.

Contact

Questions about privacy? Email hello@flowcat.studio, or open an issue on GitHub (issues are public, so use email for anything personal).