Privacy policy

Information we collect

• Files and text you process: We do not collect them. Processing is local, and the content never leaves your device.
• Account information: SnapshotLab requires no registration, creates no user account, and does not ask you to provide a name or email address. Visit and advertising data processed by third-party services is described below.
• Language preference: If you manually choose Chinese or English, that choice is stored only in this browser and can be removed at any time by clearing site data.
• Campaign attribution and tool events: We may record the page path, first tool interaction, successful processing, download trigger, and a site-registered combination of utm_source, utm_medium, and utm_campaign. The client keeps attribution context only in this tab's sessionStorage; the same labels are also included in the hourly D1 aggregates described below. The system creates no user or session ID.
• Site usage and advertising data: We and our advertising, analytics, or hosting providers may process information such as page visits, referrers, approximate region, browser and device type, IP address, identifiers stored in cookies, and device or other identifiers. The exact data depends on which services load, your consent choices, and your region. Some of this information may be personal or pseudonymous data under applicable law.
• Server access logs: As with almost every website, our hosting provider records standard logs when you visit, such as your IP address, browser type, and access time, for security and traffic measurement. These logs never contain the files you process.

Privacy-friendly product analytics

To understand which campaigns lead to actual tool use, the site sends a small set of events to a same-origin Cloudflare Pages Function and immediately increments hourly aggregate counters in D1. Event payloads contain only the event type, normalized page path, page category, campaign labels, landing path, and schema version. They do not contain file contents, file names, file sizes, input or textarea values, full URL parameters, referrers, cookies, IP addresses, User-Agent strings, device characteristics, or any visitor identifier. The Function logic also does not read or store request IP, User-Agent, referrer, or cookie headers.

Each event type is sent at most once per page lifetime. Closing the tab clears the client-side attribution context from sessionStorage. These product analytics events are not sent when the browser enables Global Privacy Control or Do Not Track. The system creates no raw-event record. Each new aggregate write deletes hourly counters older than 90 days, so if there are no new writes, cleanup is deferred until the next write.

Cookies and third-party advertising

To help keep the tools free, this site may use Adsterra for ordinary in-page display banners when advertising is enabled. The related ad iframe and script are created, and requests to Adsterra advertising domains are made, only after you explicitly choose “Allow ads.” If you reject, have not yet chosen, or enable Global Privacy Control (GPC) or Do Not Track (DNT), Adsterra ad requests remain blocked and the tools continue to work normally.

After you allow ads to load, Adsterra and its advertising partners may use cookies, pixels, or similar technologies and process IP addresses, browser and device information, page visits, and ad interactions for delivery, frequency control, measurement, and fraud prevention. The exact processing depends on the ads and providers involved and is governed by their policies. See the Adsterra Privacy Policy and the Adsterra Cookies Policy. Our integration is limited to designated in-page banner placements; it does not integrate popunders, push notifications, Social Bar, SmartLink, or interstitial formats. Third-party pages opened after an ad click are not controlled by SnapshotLab.

Third-party services

We use Cloudflare for hosting, CDN delivery, security, Cloudflare Web Analytics, and the D1 hourly aggregate counters described above. Web Analytics uses a performance beacon to collect page-view and loading-performance metrics; Cloudflare states that the service does not use cookies to track individual visitors. When advertising is enabled and you allow it, we may use Adsterra for in-page banners. Each provider processes visit data under its own privacy policy. Files you select or text you enter in SnapshotLab tools are not uploaded to these services as analytics or advertising data.

Cloudflare Web Analytics documentation · Cloudflare Privacy Policy

Data security

Local processing means files are not exposed through an upload to SnapshotLab or storage on our servers, reducing one category of risk. The site itself is delivered over HTTPS. You should still keep your device and browser updated and inspect downloaded results before sharing them.

Children's privacy

This site is intended for a general audience and is not directed at children under 13. SnapshotLab does not knowingly ask children for a name, email address, or the contents of files processed in a tool. Third-party advertising and analytics services process data as described above and subject to applicable consent requirements.

Your rights

SnapshotLab does not create user accounts or store files and text processed in the tools. Hosting, analytics, and advertising providers may nevertheless process visit data as described above. You can change your ad choice at any time using the consent control above, clear cookies and local storage, enable GPC/DNT, and exercise applicable rights with the relevant provider. For a privacy request concerning SnapshotLab, use our contact page to get in touch.

Changes to this policy

We may update this privacy policy to reflect changes to our tools, providers, or applicable law. Changes will be published here with a revised date. Where required by law, we will provide additional notice or request consent before a material change takes effect.