Your data, on your terms.

SnapHost ehf. runs SnapHost and is the data controller for the personal data this policy describes. Where your own pages collect data from the people who open them, you are the controller for that data and we process it for you.

We collect the account details you provide when you sign up, such as your name and email, and the content you choose to publish. For each site we store its title, visibility, allowlist, and the access log. We also keep basic technical records needed to operate the service securely.

We use your data to run your account, render your sites to verified viewers, maintain the access log, and keep the service secure. We use it to respond when you contact us. We do not sell your data, and we do not use the contents of your sites for advertising.

Site bundles live in private storage and are encrypted at rest. Traffic is encrypted in transit. Private sites render only after a viewer is verified, and the browser is never handed a direct or presigned storage link. Each site runs in an isolated sandbox.

When someone opens a private site, we verify their email and record the access so the site owner can see who viewed it and when. We use this only to enforce access and to power the owner's access log.

To understand which parts of SnapHost are used and where they fall short, we record how visitors use this website and how account holders use the dashboard: the pages opened, the controls clicked (which button or link, never the text on it or in a form), where the pointer moves on this website's pages, and the actions taken, such as publishing a site or connecting an AI tool. On the dashboard, which only signed-in account holders see, we may also make a session recording of the screen with every form field and every list of other people's names, addresses or records masked out. We do this on the basis of our legitimate interest in improving the service; it is on by default and you can turn dashboard analytics off for your account at any time from the account page.

The records are processed by PostHog in the European Union under a data processing agreement. To tell one visit from the next, we set a first-party cookie on snaphost.ai and its subdomains, so the visit that led to a sign-up is recognised as the same person once the account exists; it is ours, not an advertiser's, and we use it for nothing else. We do not store your IP address, and no location is derived for account holders. Signed-in account holders are recognised by an account identifier, their username and the email address they signed up with. In your browser we honour the Do Not Track and Global Privacy Control signals, and when either is set the cookie is never placed.

Shared sites carry no analytics script and set no analytics cookie: nothing about a reader leaves their browser. To tell site owners whether what they share is opened, our server records, against the owner, that a page was shared, that a reader verified an email at its gate, and that the page was then served, together with a one-way hash of the reader's email made with a secret only our server holds. The address itself never enters the analytics, and the hash cannot be turned back into it.

You can delete a site and its access history at any time from your dashboard. When you delete a site, we remove its bundle from storage. If you close your account, we delete the data associated with it, except where we must keep records to meet a legal obligation.

You can access, correct, export, or delete your personal data. To make a request, or if you have any question about this policy, email privacy@snaphost.ai.

If we make material changes, we will update the date above and, where appropriate, let you know directly. Continued use of SnapHost after a change means you accept the updated policy.