Privacy

This site is a free reference that sells posters elsewhere. It has no accounts, no logins and no advertising. The short version: we count pages and clicks on our own server, without cookies and without ever identifying you, and the only time you hand over personal data is when you type an email address into a form yourself.

Why there is no cookie banner

Because nothing here requires one. A consent banner exists to cover storing or reading information on your device for tracking. This site sets no cookies at all, and the analytics script writes nothing to your browser — its only storage operation is reading localStorage["umami.disabled"], the flag you set yourself if you want to opt out. Reading your own opt-out is not tracking.

We still owe you this page: measuring an audience is still processing data, even when it is anonymous. Information and a way to object are exactly what that requires, so here they are.

Audience measurement

We use Umami, self-hosted on the same server that sends you this page. The script is served from /u/script.js and reports to /u — both on this domain. No analytics data leaves this site. There is no third-party analytics company involved, nothing to sell, and nothing to cross-reference against another website.

What is recorded for a visit:

• the page you viewed, and the page that referred you;
• coarse device information — browser, operating system, screen size, and a country derived from your IP address;
• a few named events so we know which pages are useful: opening the poster maker, downloading a free PNG, requesting the PDF, and clicking through to a store. Each carries only the app or game slug and the poster variant — never anything about you.

Your IP address is used to work out a country and to build a daily-rotating, one-way hash that lets us tell two page views apart within a day. It is not stored, the hash cannot be reversed, and it changes every day, so there is no identifier that follows you from one day to the next. We keep the aggregate figures for about 13 months, so one year can be compared with the last.

Opting out

Run this once in your browser's developer console and this browser stops being counted, permanently and without a cookie:

localStorage.setItem("umami.disabled", 1)

Any tracker blocker or "do not track" extension also works — the script is listed in the standard blocklists and we have made no attempt to disguise it.

When you type an email address

Formspree — Delivers the three forms on this site — feedback, the free-PDF request, and the request-an-app form — to our inbox. The email address you type, plus anything you write in the form. It is processed in United States ( their privacy policy ). Nothing is sent unless you submit the form yourself.

We use those addresses to answer you or to send the file you asked for, and for nothing else. There is no newsletter, no marketing list, and we do not sell or share them. Ask us to delete yours and we will.

The mobile app

The ShortcutPosters app for iOS has no account and no advertising. The shortcuts catalogue ships inside the app and works offline.

• What stays on your phone. Stars, collections, saved posters, game boards and their pages, game notes and notes on bindings, quiz scores and streaks, review decks, personal key binds (keyboard, mouse and controller) and settings live in the app's local storage and never leave the device. Deleting the app, or "Erase all data" in the Profile tab, removes them for good — we keep no copy.
• Usage statistics. The app — not this website — counts how it is used with PostHog, hosted in the EU: app opens, onboarding steps, which screens and features are used, subscription screen views, and — when the app crashes — the technical error report (error type, message and code location, never your content). Events are tied to a random identifier the app generates on install, never to your name, email or advertising ID, and they carry no shortcut, collection or other content you create. There is no cross-app tracking and no session recording. You can switch this off at any time in Profile → Privacy.
• Subscription. Pro is billed by the App Store or Google Play; we never see your payment details. To check that your subscription is active, the app uses RevenueCat, which processes your purchase history against an anonymous app-generated identifier.
• Camera. The AR keyboard and poster previews use the camera feed on the device only. Nothing is recorded, stored or uploaded.
• Photos. The app only adds the posters and wallpapers you choose to save; it never reads your library.
• Notifications. The daily reminder is an optional local notification scheduled on the device. No push token is sent anywhere.
• Steam (optional). If you link a Steam profile in the Profile tab, the app keeps its public Steam ID and display name on your phone, and — while the Play tab or the Home screen is open, or when you tap "Import my games" — sends that Steam ID to our small relay, which asks Steam which game is running (or which games you own) and returns game numbers. The relay stores nothing and keeps no logs; only what your Steam profile already makes public is used. "Unlink" removes the ID from your phone.
• Catalogue updates. The app downloads updated shortcut data from shortcutposters.com/api — public files, fetched like any web page, with no identifier attached.

Buying a poster

We do not take payments. A buy button sends you to a storefront — Gumroad or Etsy — and from that point their privacy policy applies, not ours. The link carries a campaign tag so the store can tell it came from here; that tag identifies the page, never the person.

What this site does not do

• No advertising or retargeting pixels. No Meta pixel, no Google Ads tag, no TikTok, nothing of the kind.
• No profiling and no automated decisions.
• No account, no login, no password — there is nothing to breach.
• No data sold, rented or shared with anyone beyond what is named above.

Your rights

You can ask for access, correction or deletion of anything we hold, and object to its processing. In practice that only concerns an email address you have sent us, since the analytics hold nothing that can be traced back to you. Write to business@shortcutposters.com and we will reply within a month. If you are in the EU and think we have got it wrong, you can complain to your national data protection authority — in France, the CNIL.

Changes

If we add anything that collects data, this page changes in the same commit — the build fails otherwise. A test walks the source for third-party endpoints and refuses to pass while one is reachable but undeclared here.

Last updated: 12 October 2026.