Privacy Policy
Version 2026-06-01 · English-authoritative. How we collect, use, and protect your data.
Your rights (GDPR)
You have the right to access, export, correct, and delete your personal data. Export a machine-readable copy or delete your account anytime from your account settings. Account deletion is reversible for 30 days before permanent erasure.
Cookies & consent
We use a strictly-necessary session cookie and (with your consent) a functional cookie for anonymous-visitor continuity. You choose via the consent banner shown on your first visit; we do not set non-essential cookies until you accept.
Records of processing (GDPR Article 30)
The categories of personal data we process, why, how long we keep them, and who receives them. These mirror the categories returned by your data export.
| Data category | Purpose | Retention | Recipients |
|---|---|---|---|
| Account identity (email, display name, OAuth links) | Authentication, account management | Until account deletion (+30-day reversal window) | OAuth providers (GitHub/Google) at your direction |
| Sessions (device, IP, user-agent) | Keeping you signed in, security | Until session expiry or sign-out | None |
| Billing (subscriptions, Stripe customer id) | Processing payments and entitlements | As required for tax/accounting | Stripe (payment processor) |
| Course entitlements & progress | Delivering your learning content | Until account deletion | None |
| Referrals you originate | Operating the referral program | Until account deletion | None |
| Audit log entries targeting you | Security, compliance, dispute resolution | Per audit-retention policy | None |
International transfers
Snap is hosted in us-east-1 (United States). We do not replicate personal data across regions. See our data-residency stance for details.
Contact
Privacy questions or rights requests: privacy@snap.example (replace with the counsel-approved contact at publication).