Privacy Policy

Snout.nu ("we", "us", or "our") operates the blogging and image hosting services available at snout.nu. We act as the data controller for the personal data processed in connection with these services. This Privacy Policy describes how we collect, use, and protect your personal data.

What Data We Process and Why

When you create an account and use our services, we process the following personal data for the specified purposes and legal bases:

1. Account Data: Your chosen display name. We process this data to create and manage your user account and to provide customer support. This processing is necessary for the performance of our contract with you.
2. User Content: The text posts you author and the images you upload to your blog. We process this data to provide the core blogging and image hosting functionalities of our service. By uploading content, you grant us the temporary and revocable license necessary to store and publicly display that content as part of the service until you delete it or terminate your account. This processing is necessary for the performance of our contract with you.
3. Correspondence Data: Your email address and the contents of any messages you send to us. We process this data to respond to your inquiries and provide support. This processing is based on our legitimate interest in communicating with our users.
4. Payment Information: Payment Transaction Data: The sole purpose of processing payment information is for financial reconciliation and fraud prevention. We maintain a minimal transaction record for this purpose. Each record includes the transaction amount, the payment method (e.g., gift_card, debit_card, crypto, cash), the merchant or processor used (e.g., "Stripe"), and the date of the transaction.
   For payment methods that support chargebacks or payment reversal (such as major credit/debit cards), we also temporarily store a transaction identifier and associate it with your account number for 120 days. For gift card payments, this association is retained for 28 days. After these periods expire, the associated account number and the expiresAt field are permanently purged from the record. The transaction date and amount are retained for our financial records, but the purged record can no longer be linked to a user account. Payments made via cash or cryptocurrency are never associated with your account at any stage.
   Our payment processors (e.g., Stripe) act as independent data controllers for your full payment details. They are required by financial regulations (such as Ga. Comp. R. & Regs. R. 80-10-1-.01) to retain complete transaction records for longer periods, typically up to 7 years. Once we purge the account number association, the data retained by Snout.nu is no longer linked to your account.

Cookies

We use a single, strictly necessary cookie to provide our core service. The cookie named "authToken" is essential for maintaining your authenticated session, allowing you to remain logged in while using the service. This cookie is a session cookie, which means it is typically removed when you close your browser.

The use of this cookie is exempt from the consent requirements under the ePrivacy Directive and GDPR, as it is strictly necessary for the service you have explicitly requested (an authenticated user account). Therefore, we do not display a cookie consent banner. We do not use any non-essential cookies for tracking, analytics, or marketing purposes.

Data Sharing and International Transfers

We engage third-party service providers (Data Sub-processors) to host our infrastructure and deliver the service. A current list of these sub-processors is available at: https://help.snout.nu/posts/data-sub-processors.

These sub-processors process personal data on our behalf under contractual obligations. Some are located outside the European Economic Area (EEA). We ensure all such international transfers are governed by appropriate safeguards, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

We do not sell your personal data. We will only disclose your data to third parties, such as law enforcement, if we are legally obligated to do so under a valid subpoena, court order, or other compulsory legal process.

Data Retention

We retain your account and associated content data until you request deletion of your account. Upon receiving a verified deletion request, we will proceed to delete your personal data from our production systems. Data may persist in encrypted backups for a limited period before being permanently deleted as part of our backup rotation cycle.

Security and Abuse Prevention

To protect the security and integrity of our service, we do not log or store the IP addresses of users accessing the service for general browsing or content delivery. We may process limited technical data, such as IP addresses, solely in the context of investigating and mitigating specific, credible security incidents or abuse attempts. This processing is based on our legitimate interest in protecting our service and users.

Your Data Subject Rights

Under the General Data Protection Regulation (GDPR), you have rights regarding your personal data, including the right to access, rectify, erase, restrict processing, and data portability. To exercise these rights, please contact us using the details below.

What We Do Not Do

We do not use your personal data for automated decision-making or profiling. We do not monitor your activity on the service beyond what is strictly necessary for security and operational integrity. We do not use your data for marketing or advertising purposes.

Policy Updates

We will notify you via the email address associated with your account prior to implementing any significant change to this Privacy Policy that materially affects how we process your personal data or your rights.

Interpretation

This Privacy Policy shall be interpreted conservatively. Any ambiguity in its terms shall be resolved in favor of the data subject's privacy and the narrowest permissible use of data strictly necessary to provide the core blogging and image hosting services.

Contact Information

For any questions regarding this Privacy Policy or to exercise your data protection rights, you may contact us at privacy at snout dot nu.

Last Updated: December 16th, 2025