Privacy Policy

What SnapURL collects and why. This page is a placeholder while the maintainer writes the policy; the facts below are the ones the project already documents.

Placeholder — not yet in force

This page is a placeholder. The legal text has not been written or reviewed yet and nothing on it is a binding commitment. Sections marked TODO(maintainer) are waiting for the project maintainer.

Click analytics (already documented)

The following describes how the product is built today. See how analytics work.

  • Click analytics are cookieless. Nothing is stored on the visitor's device.
  • Unique visitors are counted with a hash that rotates daily and resets at 00:00 UTC, so a returning visitor on a new day counts again.
  • No IP address is stored.
  • City comes from a CDN edge header as a name only, never a latitude or longitude. A city with fewer than five clicks in the window is folded into “Other cities”.
  • The product does not add third-party tracking pixels to redirects.

Retention (already documented)

  • Raw click rows are kept for the workspace's “Click data retention” setting (1 year, 3 years or forever), capped by the install's own maximum (3 years by default). Rows can survive up to a day past the setting because they expire a whole day at a time.
  • The aggregated rollups behind the dashboards are kept regardless of that setting.

TODO(maintainer) Confirm these retention statements and add retention for account data and deleted links.

Self-hosting (already documented)

If you run SnapURL yourself, your database and backups are yours and the operator of that install decides retention within the limits above.

TODO(maintainer) Say how this policy relates to self-hosted installs run by someone else.

Account data

TODO(maintainer) What is collected when you register (name, email, password hash, optional two-factor and sign-in provider data), the purpose, and the legal basis.

Link scanning and other processors

TODO(maintainer) List any third parties that receive data (for example optional destination scanning with Google Safe Browsing, mail delivery, hosting) and what they receive.

Your rights, export and deletion

TODO(maintainer) How to export or delete your data, and how to make a privacy request.

Changes and contact

TODO(maintainer) How policy changes are announced, and a privacy contact address.