Snippist

Privacy Policy

Updated 13 October 2026 · Cookies notice 2026-10-05-ga4-v1

NIAR LTDA is responsible for the processing described here: CNPJ 68.872.808/0001-00; Avenida Campeche, 555, Campeche, Florianópolis — SC, 88063-301, Brazil. Contact vibe@snipp.ist for privacy and rights requests. This contact is the company’s privacy channel. App release preparation and current pilot settings are identified below.

1. Information and purposes

Account data includes sign-in identifiers, optional name and email, verification records and sessions. Purchase data includes Apple transaction IDs, products, dates, subscription state, Takes and movements. Apple handles payment instruments; NIAR receives purchase information.

For a studio edit, the service receives your selected track, 1080p render copies and 540p analysis copies of selected videos, masks of people and objects, mouth-motion curves and original-media descriptions. Originals remain in Photos. Our processing service renders your finished MP4 and stores it with your account so you can download it again. Model inputs can include audio, reduced previews, frames and reference images containing people, faces and voices. Editing wishes, optional song lyrics you paste, Adjust notes and written feedback support your edit. Order status, errors, costs and technical statistics support delivery and reliability.

Support receives your email, message, attachments you choose and, for an app-composed report, clip identifier, app/iOS version and device model. With waitlist signups and /free applications, we also save the referral source (campaign tags) to understand which campaigns bring submissions. The waitlist receives your email, the signup form used, consent time and Privacy Policy version. With your consent we add you to the list immediately and send a welcome email, followed by launch news. You can unsubscribe through the link in either email. Cloudflare Turnstile checks browser and network signals to protect the signup form. Our site stores consent records, delivery status and a retry queue; the password-protected owner panel shows recent signups. Raw email addresses, codes and tokens are excluded from application logs. Confirmation is required for the separate /free campaign. The website uses Cloudflare Web Analytics to count page views and understand which pages and links people use. It does not set cookies or use local storage, does not build profiles and does not track you across sites; Cloudflare processes the request data, including the IP address, to produce aggregated statistics. Pages whose links carry personal tokens (email confirmation, unsubscribe, personal clip pages) do not load it. With your optional analytics consent, Google Analytics also measures visits, campaign sources and successful sign-ups; see Cookies and privacy choices. The website uses no advertising trackers; hosting/network services receive request metadata including IP addresses. We do not sell personal data or share it for cross-context behavioural advertising.

Pasted song lyrics help align your words to the selected audio and guide the director. They stay with your project materials and follow the same deletion period, including account deletion. We keep the original lyrics out of application logs, analytics and reports. Words selected as captions remain in your finished clip and its editing plan.

2. Grounds and external AI permission

Under Brazil’s LGPD and applicable GDPR, necessary account and requested editing operations rely on contract; specified financial records on legal obligations; proportionate security, fraud prevention and reliability on legitimate interests where available. Waitlist marketing uses separate consent with an unsubscribe route. Contract or legitimate interests do not automatically authorise special-category data processing. Face masks and mouth curves support editing; the inspected app does not use them to identify a person. Any new identification or sensitive-data purpose needs its own assessment and basis.

The release app separately asks for permission before the first transfer of material for external AI processing, showing purpose, data, recipients and retention information. Declining leaves local viewing and account functions available. Account → External AI withdraws permission for future transfers; a request already transmitted may finish with the provider. Version, choice, recipient categories and time are stored on your account. Material changes to the disclosure require new permission. Terms acceptance and Photos access do not supply this permission. This flow is implemented in the release branch; existing pilot deployments require the corresponding service and app update.

3. Recipients

The table covers studio edits, supported earlier orders and the separate free snippet campaign. The app shows each configured AI recipient, its purpose and the data it receives before your first material transfer. Studio direction and execution use Anthropic directly. Google Gemini and OpenAI image generation use OpenRouter. Groq transcribes the track during early preparation; ElevenLabs can help align lyrics when configured. TypeSafe assesses written feedback. The catalogue and Luna routes remain available for earlier orders and /free. Actual contracting entities, downstream endpoints, processing countries and provider retention/training controls require account verification.

Recipient / routePurpose and informationRetention and deletion
OpenRouter, Inc. (AI gateway)Gateway for studio perception, image generation and feedback, plus earlier-order analysis and direction: audio, compact videos, frames, reference images, descriptions, song-word candidates, editing instructions and feedback, according to the operation.Gateway logging and downstream retention depend on the account and endpoint. Our account-specific duration and deletion controls are unverified. See OpenRouter’s provider policies; our project periods are in section 4.
Google (Gemini via OpenRouter)Audio, compact video and frame analysis, including a second hearing of uncertain song words and review of visible material. Inputs can include people, faces and voices.Endpoint-specific input/output retention, training controls and deletion duration require verification through our OpenRouter route. Our stored analysis follows section 4.
OpenAI (via OpenRouter)Editing and review; Luna compares recognised song-word candidates and track context. Image generation receives prompts and, when used, reference images or frames that can contain people. The text-only word comparison receives candidate words and context.Endpoint-specific input/output retention, training controls and deletion duration require verification through our OpenRouter route. Our plans and generated files follow section 4.
Anthropic (Claude SDK; OpenRouter for earlier orders)Studio Sonnet direction and Haiku execution receive editing wishes, Adjust notes, lyrics, descriptions, selected frames/contact sheets, scene code and tool results. Earlier orders can use optional Haiku helpers; those helpers are disabled by default.Prompt caching and other endpoint retention depend on the configured route; the actual provider duration and deletion controls remain unverified. Our plans follow section 4.
TypeSafe (Jev via OpenRouter Decisions)Structured editing context and technique choices, the technique matrix and assessment of dislike feedback. These steps receive the relevant summary or feedback text.The contracting entity, provider retention duration, training and deletion controls remain under review. Our feedback and operational records follow section 4.
Groq, Inc. (Whisper transcription)Early transcription and word timing receive a compressed copy of the selected track, including voices. Earlier orders can also send short audio windows.Groq’s published inference policy provides for no routine input/output storage, with reliability or abuse logs kept up to 30 days and possible legal exceptions. Our account’s controls require verification; zero retention is not promised.
ElevenLabs (Scribe transcription, when configured)The selected track’s vocal stem or track mix is sent for lyrics transcription and word timing; it can include voices. Depending on the hearing step, both stem and mix may be processed.The API enables logging by default. ElevenLabs’ enterprise zero-retention option requires a separate setting; our current request does not request it. The exact account-specific audio/transcript retention and training controls remain unverified. Our transcript cache is described below.
AudD (when recognition is configured)Short audio excerpts for music recognition when configured; catalogue routes are enabled by the owner’s decision of 2 October 2026 and can be disabled in service settings.Provider retention and deletion duration, contracting entity and processing countries remain under review.
LRCLIB (catalogue lyrics)LRCLIB supplies catalogue lyrics; Genius is a fallback source. Searches process the title and artist of your selected track and may use recognised fragments. Lyrics are displayed only as subtitles in your own clip.Provider retention duration and lyric-processing, caching and subtitle-export rights remain under review. Our verified catalogue cache has its own lifecycle requiring verification.
Genius (fallback catalogue lyrics)Fallback searches by track title and artist and, where used, recognised fragments, for captions in the requested clip.Provider retention and deletion duration, contracting entity and rights remain under review. Retrieved lyric text is held in the current run; our saved captions and plans follow section 4.
Hetzner Online GmbH; Google CloudService/API hosting in Finland. Google Cloud Run executes the studio pilot in europe-north1 (Finland); private Cloud Storage holds project checkpoints, media and results when that route is used. Uploaded copies, lyrics, masks, scenes, account/order identifiers and operational records support processing and delivery. Confirm the bucket location and actual release configuration before a storage-residency claim.Our project periods are in section 4. Worker temporary files are removed after the job; actual infrastructure backup, object and log expiry require deployment verification.
AppleSign in with Apple, purchases, subscriptions, refund requests, token revocation and APNs notifications. Push delivery sends the device token, order ID and status message; the contracting entity depends on the territory.Apple’s records follow its applicable terms. Our authentication, purchase evidence and revocation periods are in section 4.
Brevo (Sendinblue)Sign-in and account-deletion codes, waitlist and campaign confirmation/delivery messages, email addresses, message contents, delivery records and mailing consent.Our waitlist, consent and campaign periods are in section 4 and the campaign section. Provider mail-log, suppression and deletion durations require account verification.
Resend (email for nick@snipp.ist)Delivery of messages using nick@snipp.ist: recipient and sender addresses, message contents, attachments when included and delivery metadata. This route is separate from Brevo’s campaign messages.Resend publishes 30-day email/log retention for Free, Pro and Scale plans and deletion of remaining customer data within 90 days after account termination. The mailbox and our actual plan/settings require confirmation; our support copies follow section 4.
Google (Google Analytics)Optional website analytics after consent: page views, campaign tags and successful waitlist or /free submissions, browser/device information and pseudonymous cookie identifiers. Google signals and advertising personalisation are disabled.Event retention is 14 months; cookies and consent records follow the Cookies and privacy choices section.
Cloudflare, Inc. (Web Analytics)Aggregated website statistics: page views, referrers, browser and device type and approximate location derived from request data; no cookies or cross-site tracking.Cloudflare’s own request-data retention requires provider verification; our aggregate reporting contains no account or media contents.
Cloudflare, Inc. (R2)Private /free source uploads and finished files in a Standard bucket in Eastern North America (ENAM).Source and result deletion periods are specified in the campaign section; Cloudflare’s internal logs and backup expiry require provider verification.
Cloudflare, Inc. (Turnstile)Browser and network signals, including IP address, to protect waitlist and /free forms from abuse. Media files are sent through the separate upload route.Provider security-log retention duration requires verification. Our campaign rate-limit hashes last at most 24 hours; the integration has no pre-clearance cookie.
Cloudflare, Inc. and the support mailbox hostDNS/network services where enabled and forwarding/delivery of support emails.Our support copies are kept 180 days after closure. The destination mailbox provider and its backup/log retention schedule require confirmation.

We keep a private Scribe transcript cache for a track and its compatible transcription settings, so later edits can reuse it without sending the same track again. A changed track or hearing configuration, a failed preparation or an unavailable cache can require another transcription. Project copies follow section 4; shared transcription and vocal-stem caches require a separately verified expiry and deletion lifecycle. Clearing a Snippist project establishes no deletion of provider copies.

NIAR uses selected materials to provide the requested features and does not train its own general-purpose models on them. Provider retention, training settings, DPA, subprocessors and international-transfer mechanisms require route-specific evidence. Zero retention and universal provider non-training are not promised. Catalogue lyric sources are used under the owner’s decision recorded above; their contractual and rights questions remain under review. Unresolved essential routes remain release conditions. You can request the current recipient and safeguards information at vibe@snipp.ist.

4. Retention and deletion lifecycles

DataKept for
Input uploads: selected track, 1080p/540p copies, masks and mouth-motion data72 hours after the last project activity. The studio's private working copies follow the project period below.
Studio project: working media, scene, generated assets, previews, versions, conversations, pasted song lyrics and their private alignment caches30 days after the last edit. Later adjustments may require you to upload available source material again. Implementation of this expiry is a release condition being verified before this policy is published.
Finished MP4s and their metadataIndefinitely with your account until you delete them or delete your account. They remain available for download after the studio project expires. Copies saved to Photos follow your choices.
Earlier RenderPackage ordersPilot input materials: 72 hours after activity; versions/plans: 14 days. The separate /free campaign follows its section below.
Profile and external AI permissionWhile the account exists; removed on account deletion after active work stops. Permission evidence records the current version, recipients and choice. APNs tokens and queued notifications are removed on account deletion.
Operational purchase/Takes records and statisticsSeparated from the deleted profile for 180 days after deletion, then cleared on the service cleanup schedule. Technical statistics and costs lose account/project linkage. Apple transaction IDs remain in the limited purchase records and remain potentially identifiable.
Financial evidence and outstanding purchasesSeparated minimum purchase facts and unresolved purchase rights have their own legal retention schedule. The operational 180-day cleanup does not destroy them. The release implementation sets a review after 180 days; final statutory retention dates depend on the actual tax/claims records and remain to be configured before live sales.
Deletion evidence and Apple revocation queueHashed retry evidence expires after 24 hours. An encrypted Apple token is removed after successful revocation, with retries for at most 30 days. Unresolved expiry triggers operational review.
AuthenticationCodes and challenges expire after 5 minutes; sessions default to 90 days and are revoked earlier on sign-out/deletion. Stored expired verification/session records are swept after one further day. Hashed rate-limit records expire with the relevant window, up to an hour.
Support email180 days after case closure; media attachments are removed earlier when no longer needed. Necessary claim or legal records have a documented exception and review date. Actual mailbox cleanup must be verified.
WaitlistUntil withdrawal or 180 days after the final launch email, whichever comes first. A delayed launch requires review, deletion or renewed consent within 180 days of signup. Confirmation links last 7 days. Minimal suppression and consent evidence is separate, used to respect unsubscribe choices and reviewed annually; actual Brevo cleanup must be verified.
Access logs, backups and provider copiesWhere Marco Civil applies, application access logs follow six calendar months from the event. Actual infrastructure backup overwrite cycles, provider retention and log schedules remain unverified release facts. Legal holds isolate affected records with a reason, review date and release event.

Deletion of profile data, uploaded content and source-matched caches is implemented separately from the retained archive. Shared analysis and lyrics caches, ratings, diagnostics, backups and provider copies require checks for their own lifecycle. Restoring a backup must reapply deletion instructions. The release owner must verify actual infrastructure/provider expiry before live sales; a project cleanup result alone establishes no provider deletion.

5. Delete account, cancel renewal and refunds

Use Account → Delete account and confirm with Apple or a fresh email code. Access closes on all devices, work is cancelled and all associated studio projects, input uploads, generated assets, finished MP4s and profile records are removed after uploads and workers stop. The app warns that access to the Takes balance is lost. Limited purchase evidence supports outstanding claims. Clips saved to Photos remain under your control. Cancellation of renewal and refund requests remain independent; deleting the account does not stop Apple billing. Use Apple subscription management and Apple’s refund route, or contact NIAR for purchase problems and statutory remedies.

6. Rights and complaints

You may request access, correction, deletion, restriction, portability and other applicable rights, withdraw consent or object to processing. Under LGPD, simplified confirmation/access is immediate where applicable; a complete declaration is provided within 15 days. Under GDPR, responses normally arrive within one month (one calendar month); a permitted extension of up to two additional months is explained within the first month. Other requests follow their applicable deadline.

Write to vibe@snipp.ist. We use proportionate identity checks through your account or verified email, explain lawful exceptions and provide human review of significant automated decisions when applicable. People shown in someone else’s material may also contact us. You can complain to Brazil’s ANPD or the competent data-protection authority, including where GDPR applies. Applicable CCPA/CPRA rights include access, correction, deletion and non-discrimination; applicability depends on factual thresholds. Our internal targets are acknowledgement within two business days and resolution within 15 days where compatible with the applicable deadline.

7. International transfers and markets

NIAR operates in Brazil. Pilot hosting is in Finland; model, cloud and email services may process in the EEA, United States or other documented locations. EU–Brazil adequacy decisions can support covered transfers; onward transfers require their own applicable mechanism. Brazilian ANPD requirements and UK requirements are assessed separately. Exact recipient contracts, countries and safeguards, and any required EU/UK representative, remain release conditions for the planned worldwide launch. Request information on current safeguards at vibe@snipp.ist.

8. Age and security

Snippist is for people aged 16 or older. If you believe a younger person has supplied data, contact us so we can investigate and remove inappropriate collection. The App Store age rating is completed separately against actual functions and content. Connections use HTTPS; server credentials remain outside the app. Access to retained legal records is restricted to the responsible operator.

9. Changes and contact

We update the date when this policy changes and explain material changes before they apply where appropriate. Contact vibe@snipp.ist for questions, rights requests or current provider information.

Free snippet campaign

Campaign version free-2026-10-03, dated 3 October 2026. The pre-launch campaign at /free is open to people aged 16 and over. We receive your email, social network and handle, whether the track is yours, your artist name and link where applicable, your sharing preference, creative note and How wild choice, source track and videos, and records of your rights confirmations and consents. The result form can hold a rating, sharing intention, willingness to pay and currency, your review and your separate choice about quoting it.

NIAR LTDA uses these data to review and prioritise submissions, create and deliver the requested snippet, record Founding artist eligibility and offer-code delivery status and improve the campaign. The requested service relies on the campaign agreement; optional quotation and publication permissions are recorded separately, and security checks serve fraud and abuse prevention. Own-track musicians grant the non-exclusive publication permission described in the campaign terms. Accepted own-track submissions with a delivered snippet enter the private Founding artist register: submission ID, confirmed email, artist name and link, social handle, delivery date and code-delivery status. The coordinator can export this register to fulfil the package described in the campaign terms: a 20% subscription discount for 12 months, price protection during an uninterrupted subscription, an artist profile and queue priority. Brevo will send the personal one-time App Store code at launch; Apple processes redemption and the subscription transaction. A future verified purchase can link redemption to your app account. We coordinate the public artist profile with you and credit the artist when publishing a selected marked snippet. Publication is not guaranteed. You can request removal of our post or withdraw quotation permission at vibe@snipp.ist.

Cloudflare R2 stores the source uploads and finished files in a private Standard bucket in the Eastern North America region (ENAM). Cloudflare Turnstile checks browser and network signals to protect the submission form. The campaign API keeps submission records on our site host; the coordinator’s Mac downloads originals and runs our service. The same external AI engine routes listed above create the free clip: ElevenLabs Scribe receives the vocal stem or mix when configured; Groq Whisper receives audio windows; Google Gemini via OpenRouter receives audio, previews and frames; OpenAI’s Luna via OpenRouter compares recognised word candidates and context. OpenRouter also carries direction/editing context to Anthropic and OpenAI, technique summaries or feedback to TypeSafe Jev, and prompts/reference images to the image-generation route. Optional Haiku helpers receive limited text context when enabled. Each step can include information about people shown or heard in the material. Catalogue services receive track searches or recognition excerpts as described above. Brevo receives the email address, confirmation/delivery message and private result link; Resend handles messages using nick@snipp.ist when that email route is used. Campaign emails are transactional; joining the launch mailing list requires its separate signup.

We delete incomplete uploads after 24 hours and unconfirmed materials after 7 days. Source files leave R2 immediately after verified download to the Mac and expiry of upload links. Rejected materials are cleared on the next hourly cleanup; other stalled materials expire after 30 days. The coordinator manually deletes source files, derived preparation files, the service project and local results on the Mac within 30 days after delivery; unfinished local runs are cleared within 30 days after the pipeline starts. The Mac has no daily cleanup service. Finished files in R2 and private result access expire after 30 days; ready results awaiting email expire within 30 days of becoming ready. Submission, consent and feedback records, including the Founding artist register and coordinator exports, are deleted 180 days after delivery or rejection; stalled records expire 180 days after submission. The site’s automatic hourly cleanup implements the site periods. Provider copies and shared engine caches follow their separate arrangements described above; operator backups must respect the campaign periods.

Signed object links grant short-lived access. Keep the private result link confidential. We retain campaign IP rate-limit counters as keyed hashes for at most 24 hours. We store operational IDs, status, sizes, timestamps and costs; application logs exclude email addresses, signed links, credentials and media contents. International transfers and your access, correction, deletion, withdrawal and complaint rights are described above. Contact vibe@snipp.ist with a campaign request.

Snippist Radar

Radar at /radar lists announced music releases and links to official campaigns. NIAR LTDA operates the catalogue and the posters made from selected cards. Records can include public stage names, release titles and dates, official profile and campaign links, public audience figures and biographies, image URLs, source provenance and date changes. We use these data to show and verify announcements, correct information and maintain the service. Collection follows the source permissions approved by the owner on 8 October 2026, robots rules and shared request limits. Contractual permissions, regional legal bases and artist-notification obligations remain subject to review.

For visitors, we process the submitted campaign link, selected release IDs and the composition of a saved poster. Poster links can be opened by anyone who has the link. Selection and theme preferences stay in sessionStorage for the tab session. Request limits use short-lived keyed hashes of the connection IP address, removed after 60 seconds of inactivity by periodic maintenance. These hashes are pseudonymous. Application diagnostics contain event times, status codes and counts. Separate host and proxy access logs have their own controls and require verification; where Marco Civil applies, minimum application access logs follow six calendar months from the event.

Recipient / routePurpose and dataLocation and provider retention
Hetzner Online GmbHRadar hosting on our niar42 server: catalogue, submitted links, poster records and operational data.Finland under the current hosting record. Our periods are below; the actual account agreement, infrastructure backups and host-log expiry require verification.
Cloudflare, Inc. (DNS, Email Routing and Web Analytics)Domain DNS, forwarding messages sent to vibe@snipp.ist and page visits/views through the website’s Cloudflare Web Analytics without cookies. The current site DNS uses direct hosting; a Cloudflare HTTP proxy is not enabled for Radar.Provider processing countries, logs, Web Analytics and forwarding retention, and the destination mailbox host and its backup schedule require verification.
Exa (search API)Public artist/release search queries and request metadata sent by the collector to discover campaign URLs.Exact contracting entity, processing countries, DPA, downstream recipients and provider retention require account verification.
Serper (search API)Public artist/release search queries and request metadata sent by the collector to discover campaign URLs.Exact contracting entity, processing countries, DPA, downstream recipients and provider retention require account verification.
OpenRouter and the providers serving the selected modelsLimited excerpts from public music announcements, artist/release metadata and observed source links help identify campaigns and extract facts. Requests originate on our server.Selected models include TypeSafe Jev and Qwen. Routing providers, processing countries, contractual safeguards and provider retention require account verification.
Campaign, profile and image hostsApproved metadata sources receive collector requests. In the current owner preview, covers and artist images load directly from their source URLs: the image host receives your IP address and browser request details when the image loads.The particular host is identified by the source/image URL. Its countries and retention follow its own arrangements; our source permissions do not establish its data-retention schedule.
Spotify (official player, after your choice)IP address, browser request details and cookies when you choose Load player. An official external link is also available.Spotify controls its received data under its Privacy Policy; actual processing locations and retention follow its arrangements.

The preview image setting allows display from the original URL. Exporting or cropping an image requires a separate recorded permission; other images use a placeholder. Permitted local thumbnails are served by NIAR. Spotify loads after its disclosure and your separate choice. Closing the player removes the iframe and stops further player loads until another choice; Spotify controls copies it already received. Bandcamp embeds remain disabled pending commercial permission review. Radar stores no audio and requests no autoplay.

Radar uses the website’s Cloudflare Web Analytics without cookies to count page visits and views. Radar also stores aggregated daily counts of official-source openings, poster creation and visits to Snippist for 30 calendar days, including the current UTC day, without cookies, IP addresses, release IDs or visitor identifiers. The browser sends only the action name; our counters store only the UTC day, action name and total. These counts operate independently of your optional Analytics choice and Global Privacy Control, with no separate switch. Cloudflare’s processing and retention are described in the Cookies and privacy choices section and the recipient table; the 30-day period applies to Radar’s own counters.

Owner decision dated 8 October 2026 sets the following Radar defaults. Freshness checks do not extend these periods; a confirmed removal, permission expiry or revocation can act sooner.

Radar dataKept for
Cards, public profiles and observation history90 days after the release date; observation history is also cleared by its recorded age.
Raw source artifacts7 days after collection; HTML and source text are minimized immediately.
Normalized source and profile cache7 days after observation.
Search cache1 day after observation.
Permitted local media and thumbnails7 days or the shorter permission period; revocation acts sooner. A directly linked preview image stays with its source host.
Poster composition and PNG/ZIP exports30 days after creation; linked removals or changed image rights can invalidate them sooner. Downloaded local files remain with their recipients.
Application diagnostics and event records30 days after each event. Host/proxy log schedules require separate verification as described above.
Aggregated action counters30 calendar days, including the current UTC day. Only the day, action name and total are stored.
Rights requests, decisions and proportionate evidence180 days after closure; necessary legal holds are separated with restricted access, a reason and a review deadline.
Managed Radar catalogue backups30 days after creation. Raw sources, source/search cache, media and generated exports are excluded. Rotation runs when backup or the scheduler runs; activation on the deployed server and other infrastructure copies require coordinator verification.
Recollection suppressionMinimal hashes of identifiers stay blocked while the source participates in collection, with annual human review. A review deadline does not reopen material. Backup restore must apply the current independent suppression ledger and retention cleanup before public access.

Artists, depicted people, rightsholders and representatives can request access, correction, deletion, objection or human review at vibe@snipp.ist. Please include the card ID or link, the requested action and proportionate evidence of authority. Privacy and copyright/DMCA requests have separate review requirements. Urgent requests can lead to temporary hiding. Removal closes linked aliases, cached copies and affected posters and blocks recollection. Appeals and counter-notices receive human review. The applicable rights, complaint routes and international-transfer qualifications above also apply to Radar. Actual mailbox delivery and reply verification belong to the operator; a contact link alone does not establish delivery. Provider agreements, exact onward-transfer safeguards and destination mailbox retention remain verification items.

We count the steps of the /free application process to understand where people stop: page views, opening an application and finishing file uploads. Your browser sends only the step name, with no cookies, visitor identifiers, form contents or personal link tokens. Our site keeps daily totals for up to 180 days. Submission, email confirmation, acceptance and delivery totals come from the campaign records described above. Network addresses are used only for a temporary rate limit in memory for up to ten minutes and are excluded from these stored counters. These aggregated counts operate independently of your optional Analytics choice.

Cookies and privacy choices

Snippist (NIAR LTDA) asks for the same optional analytics choice worldwide. Google Analytics loads only after you accept analytics and we save the consent receipt. Accept all and Reject all are equally available. You can use the site and submit forms with analytics off. Open to review or withdraw your choice at any time.

Technology / providerPurpose and duration
_ga, _ga_HYBGPEFXV5 — Google AnalyticsOptional identifiers for visits and sessions, campaign sources, and successful waitlist and /free submissions. Up to two years from creation, with automatic extension disabled; available cookies are deleted when analytics is withdrawn. We send no email, form contents or personal link tokens to Analytics. Event retention in the property is 14 months.
snippist.consent.v1 — Snippist local storageRemembers your analytics choice, a random receipt ID, notice/purpose versions and choice time for six calendar months. Visits do not extend it. If storage is unavailable, the choice lasts for the current page.
Consent receipts — Snippist APIThe choice, random receipt ID, versions, action, language and server time are kept separately for the choice period plus 180 days. No IP address, User-Agent, email, page address or account link is stored in this journal. Withdrawals apply immediately, including while the receipt service is unavailable.
Cloudflare Web AnalyticsAggregated website statistics without cookies or local storage. Its existing operation is independent of the optional Analytics choice.
Cloudflare TurnstileNecessary browser and network checks protecting requested forms. Turnstile is separate from Analytics; its pre-clearance cookie feature is not enabled by this site integration.

Withdrawing consent stops future Analytics collection. To ask about deletion of information already sent, contact vibe@snipp.ist. Google’s Privacy Policy explains its processing. Marketing pixels from Meta and TikTok are not installed.