Shotglot
Privacy
What data the Shotglot plugin handles, where it goes and why.
Last updated: · Applies from:
Who is responsible for your data
Adrian Sobiechowski, Łochowo, Poland
Email: hello@sobiworks.com
The plugin
- No internet access. Figma doesn’t let the plugin connect to any website or server, so it can’t send your designs, your sheet or anything else anywhere. Shotglot has no server.
- In your Figma file. On the copies it makes, the plugin saves short notes: which template and language a copy is for, the text it wrote and the size it gave a text that shrinks to fit, so it can spot your own edits, and which part of a panorama each cut exports. On its output section it notes that the section is Shotglot’s and, on Free, the language Free uses. In the file itself it keeps the sheet you last generated from, so it’s there next time; Forget sheet in the plugin removes it. The notes and the sheet stay in the file and go wherever the file goes, so anyone with the file or a copy of it can read them.
- On your computer. The plugin keeps nothing in Figma’s plugin storage. Exported screenshots go into a zip that you save yourself, through your computer’s Save dialog.
- Pro. The plugin asks Figma, inside Figma, whether your account has Pro, and Get Pro opens Figma’s checkout.
Buying Pro
Pro is sold in Figma Community. Figma, and the payment provider it uses, process your payment and billing details as their own controllers, under Figma’s privacy policy. Shotglot doesn’t receive your card or billing details; it sees only the sales figures Figma shows creators. The plugin doesn’t read your Figma name or ID. If you write about a purchase, Shotglot uses what you send to help.
When you write, Cloudflare forwards your message to a Gmail mailbox run by Google Ireland, where your address and message stay as long as needed to handle your matter.
Legal bases
Answering your email, including about a purchase: legitimate interest (GDPR art. 6(1)(f)).
Who else processes data
Cloudflare (email forwarding) and Google (the mailbox). Figma handles your Pro purchase as its own controller. Cloudflare is in the United States, and Google Ireland may transfer data to Google in the United States; data goes there under the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
Your rights
You can ask for access to your data, a copy, correction, deletion, restriction or transfer to another service. Write to the address above. You can also complain to a data protection authority, in particular in the country where you live or work, or to the Polish one (Prezes UODO, uodo.gov.pl).
You can object at any time to processing based on legitimate interest.
Writing is up to you: without your email address you can’t get a reply. Data isn’t sold, used for ads or used for automated decisions about you. The sobiworks.com website itself is covered on the Legal page.