privacy

What we keep

Without an account: nothing. Your snippets, tags, history and settings stay on your computer, in an encrypted database. The app's daily check for a new version sends nothing about you.

With an account:

• Your email address and password. Amazon Cognito stores the password hashed; we never see it.
• Your snippets: their text, tags, dates and earlier versions, including deleted ones, so you can restore them.
• How many times each snippet has been copied, and when it was last copied. Never what's on your clipboard or where you paste it.
• Which plan you're on.
• Request counts for rate limits, deleted within a day. API logs with your account id, but never your snippets or IP address, deleted after 14 days.

We use it only to run Snippits: syncing, your account page, plan limits and keeping the service working. We don't read your snippets unless you ask us to while helping you, or the law requires it.

Email

We email you only to verify your address or reset your password. Mail you send to us is forwarded to our inbox, and AWS keeps a copy for 30 days in case forwarding fails.

Who else handles it

• Amazon Web Services hosts everything (servers, sign-in, email) in the United States (us-east-1). Data is encrypted in transit and at rest, and AWS processes it only on our behalf.
• Gravatar (Automattic): when you're signed in, the app fetches your picture by sending gravatar.com a hash of your email address, and Gravatar sees your IP address. Turn it off in the app's settings (C-,).

Nobody else receives your data. This website sets no cookies, runs no analytics, loads nothing from other sites and keeps no visit logs. Signing in on the account page lasts until you close the tab.

Exporting and deleting

Export everything at any time, as JSON or Markdown, from the app (snippits --export) or your account page. Deleting your account there, or in the app, removes your snippets, history, copy counts, plan and sign-in at once. Database backups keep deleted data for up to 35 days. For a few hours we keep only the deleted account's id, so a machine still signed in can't upload it all again.

Your rights

To ask what we hold about you, correct it, or object to how we use it, email privacy@snippits.cc; we'll answer within 30 days. Depending on where you live (for example, under the GDPR or California law), you can also complain to your data protection authority.

Everything else

Snippits isn't meant for children under 16, and we don't knowingly hold their data. If this policy changes, we'll update the date above, and email account holders first if the change matters to how your data is used.