Guide
Screenshot privacy checklist before you share
Before sharing, minimize the screenshot, remove private pixels, reopen the exported file and confirm the recipient. Use this copyable checklist for attachments, support tickets and protected share links.
Copy the practical checklist
Use this checklist on the file you will actually send. Mark the steps you completed rather than assuming an editor preview is the final output.
Download the Markdown privacy checklist# Screenshot privacy checklist
- [ ] Use a demo account or example data when possible.
- [ ] Crop out unrelated tabs, notifications, addresses and account menus.
- [ ] Review names, faces, email addresses, IDs, URLs and document titles.
- [ ] Review credentials, tokens, QR codes, terminal output and browser toolbars.
- [ ] Cover sensitive pixels with solid, opaque rectangles with a small margin.
- [ ] Export a new flattened PNG and reopen that exported file.
- [ ] Inspect the entire image at 100% and zoom into every covered region.
- [ ] Check extracted text, OCR output and text pasted into the message separately from the image.
- [ ] Give the file a neutral name without personal data or secrets.
- [ ] Send only the checked export to the intended recipients.
- [ ] If using a hosted link, check its recipient view, password and expiry.
- [ ] Revoke access when the review is complete. Copies already downloaded remain copies.
Minimize the source
Use a demo account or invented data when the real account is not necessary. Crop unrelated cases, sidebars and browser chrome while retaining enough context to explain the task.
Review the audience before capturing. An internal troubleshooting image and a public product image usually need different amounts of information.
Remove information in every artifact
Check the image, filename, copied OCR text, surrounding ticket description and any document that includes the image. Covering a secret in the screenshot does not remove it from those other places.
Export a new flattened file, reopen it and inspect the whole image, including edges and repeated values. Review every PDF page you will send and record what you checked.
Choose and verify the sharing method
Use the ticket or workspace where the recipient already has appropriate access. If you choose a Captorify public share link, set a password and a short expiry when needed, then verify the recipient view.
A link holder can copy visible content. Revocation and expiry stop future link access; they do not erase downloaded copies.
Assign the follow-up
For sensitive reviews, record who checked the export and who will close access. Keep only the context the recipient needs, for only as long as your own retention requirements allow.
This checklist supports a review process. It does not certify regulatory compliance or prove that a screenshot contains no identifying context.