Privacy Policy

Updated 4 October 2026

This policy covers the Signshot Android app. Signshot has no app accounts, ads, analytics SDKs or automatic crash reporting. We do not sell personal data.

On your phone

Photos, edits, drafts, preferences, blocked publishers and your terms agreement are stored on your phone. Wallet connection details and a separate upload-signing key are also stored locally. Taking or editing a photo does not upload it.

Permissions

Camera access is used for photos and QR scanning; revoke it in Android settings. Signshot also uses the internet and vibration. It does not request microphone, contacts or location access.

Tapping Paste reads your clipboard to open a collection link or address.

What you make public

Publishing is optional. It sends a smaller photo, title and text to Arweave through Turbo and records the edition on Solana. Full-size capture files stay on your phone unless you export or share them.

Public records include wallet addresses, edition details, prices, royalties, ownership and transactions. Available proofs add capture time, image dimensions and fingerprints, device model, hardware certificates, app and device security details, and your Seeker Genesis Token address to verify the publication and eligibility.

Published photos and records are public and permanent. Collecting, buying and sending also create public records. Anyone can copy them and link wallet activity; a Genesis Token can link different wallets. Signshot cannot erase these records.

Sharing sends your selected photo, print card or publication bundle to the app you choose. The optional .skr stamp adds your Seeker ID name to shared images.

Services the app uses

• Your wallet receives connection and transaction requests and returns your public address and approval results. Signshot never receives its private key or recovery phrase.
• Solana RPC providers process address lookups and signed transactions for balances, holdings, names, editions and eligibility.
• Turbo receives public photos, metadata, upload signatures and storage payment details. Arweave gateways serve requested photos and metadata.
• Google serves the certificate revocation list used to check proofs locally. Android may also contact its key-provisioning service when creating a hardware proof.
• Cloudflare serves erashot.app and the app's moderation list. It also runs the Seeker co-signer at cosign.erashot.app, which receives your wallet address, a sign-in signature and the claim transaction when you collect a Seeker-holders-only edition, and records which Seeker Genesis Token claimed it.

Network services receive your IP address and request details. Their policies govern their handling and retention. Loading content or checking proofs can contact them even if you never publish.

Security

Remote connections use HTTPS or encrypted WebSockets. Photos use Android app storage. Wallet authorization and upload keys are encrypted through Android Keystore. Published records are publicly readable.

Retention and deletion

Local data stays until removed in the app, cleared in Android settings or deleted by uninstalling. Disconnecting a wallet can leave its upload key while unfinished uploads or paid storage credit need it. Clearing app storage deletes the key and can prevent unfinished uploads from completing.

Delete exported photos and files separately. Other apps control copies you share with them. Blocking or hiding a publication does not erase it from Solana or Arweave.

Reports and contact

Report opens your email app with the edition address and link. Sending it gives support your email address, message and any attachments to review the report. Moderation may publish an edition or publisher address on the moderation list, but not your email.

For privacy questions or requests to access, correct or delete information you have sent us: support@erashot.app.

Children

Signshot is not intended for children under 13. Contact us if a child has sent us personal information.

Changes

Changes to this policy will appear here with an updated date.