Who this covers

This policy explains how StorySnapViewer ("we", "us") handles information when you use the website at storysnapviewer.app and the tools on it. It applies to visitors anywhere in the world. Questions, or a request about your data, can go to hello@storysnapviewer.app.

We have tried to write this in plain language rather than boilerplate, and to describe what the software actually does rather than reserving every right we might one day want.

What we collect

There is no account system, so nothing is collected merely to use the tool. Four things are worth spelling out.

The username or link you submit. This is sent to our edge server, used to fetch the public page it refers to, and discarded once the response is returned. We do not write it to a database and we do not build a history of what you have looked up.
Your theme preference. Whether you chose light or dark mode is saved in your browser's local storage. It never leaves your device and we cannot read it.
Messages you send us. If you use the contact page or email us, we keep your message and address for as long as needed to deal with it, then delete it.
Infrastructure logs. The site runs on Cloudflare, which generates standard request logs for security, abuse prevention and diagnostics. These can include IP address, timestamp, user agent and the path requested. They are short-lived operational records, we do not mine them, and we do not link them to anything else.

What we don't do

These are not aspirations. They are verifiable by viewing the page source:

No cookies. The site sets none at all — not functional, not analytics, not advertising. That is also why you see no cookie banner.
No analytics script. There is no Google Analytics, no tag manager, and no third-party measurement code of any kind.
No advertising and no ad networks.
No fingerprinting or cross-site tracking, and no attempt to identify individual visitors.
No selling or sharing of personal information, for any purpose, ever.
No copies of your files. Media streams through our proxy to your device; we do not retain it.

Why we are allowed to process this

For visitors in the UK and EEA, our lawful basis under the GDPR is legitimate interests (Article 6(1)(f)) for operating and securing the service — that covers resolving the link you submitted and keeping infrastructure logs. Where you email us, we process your message on the basis of your own request. We do not rely on consent for tracking, because there is no tracking to consent to.

How long anything is kept

Submitted links and handles: not retained beyond the request. Infrastructure logs: retained briefly by our hosting provider on their standard schedule, then discarded. Contact messages: kept until the matter is resolved, then deleted. Theme preference: stays in your browser until you clear it.

Who else is involved

We keep third parties to a minimum. Cloudflare, Inc. provides our hosting, CDN and edge compute, and therefore processes requests on our behalf. Email we receive is handled by our email provider. That is the extent of it — there are no advertising partners, data brokers or analytics vendors in the chain.

Because these providers operate globally, data may be processed outside your country, including in the United States, under the safeguards those providers have in place for international transfers.

Content from Snapchat

Media and page data are fetched from Snap Inc.'s public pages and CDN. That content remains governed by Snap Inc.'s own terms and privacy policy, not ours. Links from this site to external services are likewise subject to those services' policies.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, have it deleted, object to or restrict processing, receive a portable copy, and complain to a data protection authority. If you are in California, you also have the right not to have your personal information sold or shared — which we do not do — and not to be discriminated against for exercising your rights.

To exercise any of these, email hello@storysnapviewer.app and we will respond within the period the applicable law requires, normally within one month. In practice, because we hold so little, the honest answer to most access requests is that there is nothing on file beyond any email you sent us.

Security

The site is served over HTTPS only. We store no passwords or Snapchat credentials, because we never ask for them, which removes the most valuable thing an attacker could take. The download proxy is restricted to Snapchat's own hostnames so it cannot be abused as an open relay, and API access is limited to our own origins.

Children's privacy

The service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we will delete it.

Changes to this policy

If this policy changes we will update the date above, and for anything material we will make the change obvious rather than quiet. Continuing to use the site after an update means the revised policy applies.

Contact

For any privacy question or request, email hello@storysnapviewer.app or use the contact page. Our Terms of Service cover acceptable use and copyright reports.