The short version
Snufkins stores what you put in it — your places, trips, stories, photos and comments — plus your email and a hashed password, so that you can sign in and share things with the people you choose. Your data is yours. It is never sold, never used to pick ads for you, and you can download all of it or delete all of it whenever you like. You don't have to give your real name. Visits are counted only if you say yes.
What we store
- Account: a name (made up is fine), handle, email address, a bcrypt hash of your password, an optional profile photo and bio.
- Content: posts, trips and their stops, lists, stories, photos and videos, comments and likes — each with the audience you chose (everyone, followers, friends, family, only me).
- Connections: who you follow, who follows you, friend requests and friendships.
- Reports and decisions: reports you send, and any moderation decision about your content, with its reasons and your appeal.
- Technical: a session cookie so you stay signed in, and standard server logs (IP address, browser, page requested) kept for 30 days for security and debugging.
Photos, videos and location
Cameras write where a picture or video was taken (GPS), when, and on which phone into the file itself. We take all of that out: every photo is rewritten without it (turned the right way up first), every video is copied without it, and until that's done the original file can't be downloaded by anyone. The only location on a post is the place you searched for or pinned yourself.
Who can see what
Every post, story and list is for everyone, your followers, your friends, your family or only you — chosen when you post it and changeable later. Each includes the closer circles: something for followers reaches your friends and family too. Family is friends you mark yourself; only you see who's on it. Your page at /u/handle can be switched off in Settings; when it's off, strangers can't find or follow you and your public posts leave the public feeds. Friends-only and private posts are never public regardless.
Ads
There are none today. If there ever are, they will be chosen by the page they appear on — a place, a list — never by who you are, where you've been, or anything else we know about you. They'll be marked as ads, and no advertiser gets any of your data.
Third parties
The maps are drawn from tiles served by OpenFreeMap, Esri and OpenTopoMap, and place search uses Photon (komoot). Your browser requests those directly, so they see your IP address and the map area or search text — the same as opening any map website. Fonts load from Google Fonts. Email is sent through Resend. None of them gets anything else from us.
Analytics
If you say yes, we use Google Analytics to count visits and to see which parts of Snufkins get used — how many people post, publish a story, play a route — so we know what to work on. It's set up the plain way: IP addresses anonymised, Google Signals and every advertising or personalisation feature off, and we never send it your name, handle, email, what you searched for, or anything you wrote. Events carry only what kind of thing happened ("a post with two photos and a place"). If you say no — or your browser sends Global Privacy Control or Do Not Track — the analytics script isn't loaded at all.
Cookies
The session cookie that keeps you signed in; a cookie remembering your answer about counting visits; and, only if you said yes, Google Analytics' _ga cookies (a random visitor number, nothing about you). Your basemap preference is stored in your own browser and never sent to us.
Why we may
We keep your account and content to run the service you signed up for; server logs and reports to keep it safe; and analytics only with your consent, which you can take back above at any time.
Your rights
You can edit or delete any post at any time; download everything you've put here (Settings → Your data); and delete your whole account from Settings — that removes everything immediately and permanently, reports you sent and decisions about you included. You can also ask us to correct or delete anything else, or to stop using it — write to the address below. If you think we've got something wrong, you can complain to a data protection authority; in Poland that's the President of the Personal Data Protection Office (UODO).
Contact
support@snufkins.com — see also Legal & safety.