Cookie Policy
Last updated: March 2026
Snap-It uses a small amount of anonymous analytics to understand how the tool is being used. This page explains exactly what is collected, why, and what choices you have. We have deliberately kept this as simple and honest as possible.
TL;DR
- We collect anonymous usage events — no names, no emails, no IP addresses stored.
- All data lives on our own servers. Nothing is sent to Google, Meta, or any third party.
- You choose what to allow. “Necessary Only” limits tracking to uploads and exports.
- General events are deleted after 3 months. Upload and export events after 12 months.
- We do not use advertising cookies or tracking pixels.
- We do not sell or share your data with anyone.
1. What we collect
When you use Snap-It, we may record the following anonymous data points alongside each action:
| Data point | Example | How obtained |
|---|---|---|
| Event type | image_uploaded, exported | Your action in the editor |
| Country / Region | US / California | IP address lookup — IP is never stored |
| Browser name | Chrome, Firefox | User-Agent header |
| Operating system | macOS, Windows | User-Agent header |
| Device type | desktop, mobile | User-Agent header |
| Anonymous visitor ID | a3f8…c21d (UUID) | Generated in your browser on first consent |
Your IP address is used only to resolve a country and region, then immediately discarded. It is never written to our database.
2. What we never collect
- Your name, email address, or any account information
- Your IP address (used transiently for geo-lookup only, never stored)
- The content of your screenshots or uploaded images
- Payment or billing information
- Precise location (only country and region, never GPS or city)
- Cross-site tracking identifiers
3. Why we collect it
Snap-It is a free tool with no accounts. The only way we can understand whether it is working well — and which features matter — is through anonymous usage data. Specifically we use it to:
- Understand which export formats and aspect ratios are most popular
- Spot drops in upload or export success that might signal a bug
- Make informed decisions about which features to build next
- Share anonymised aggregate milestones publicly (e.g. “10,000 exports this month”)
On aggregate statistics: Totals such as “X exports this month” are numbers only — they cannot identify any individual and are not personal data under the PDPA 2010 (Akta 709), GDPR, or CCPA. We may share these figures publicly.
4. Third parties
None. We do not use Google Analytics, Meta Pixel, Hotjar, Mixpanel, or any third-party analytics or advertising service. Every byte of data we collect goes directly to our own servers and stays there. We do not sell, rent, or share your data with any external party.
5. Your consent choices
When you first visit Snap-It you are shown a cookie banner with two options:
Allow All
All five event types are recorded: image_uploaded exported bg_changed copied shadow_toggled
Necessary Only
Only core product events are recorded: image_uploaded and exported. Style and interaction events are suppressed entirely.
Your choice is stored in your browser's localStorage under the key snap_cookie_consent. No cookie is set. Clearing your browser storage resets your preference and the banner will re-appear.
6. Data retention
| Data type | Retained for |
|---|---|
| General events (bg_changed, copied, shadow_toggled) | 3 months |
| Core events (image_uploaded, exported) | 12 months |
| Consent records (visitor ID + choice) | 12 months |
Deletion runs automatically every 24 hours on our servers. No manual action is required.
7. Your rights
Under Malaysia's Personal Data Protection Act 2010 (Akta 709) and its 2024 amendments, as well as other applicable legislation (GDPR, CCPA), you have the right to:
- Request access to any data associated with your anonymous visitor ID (PDPA s.30)
- Request correction of inaccurate data (PDPA s.34)
- Withdraw consent at any time — clear your browser's localStorage and the banner will re-appear
- Request deletion of your data before the automatic retention period (PDPA Access Principle)
- Object to or restrict processing
- Request data portability in a machine-readable format (PDPA Amending Act, effective June 1, 2025)
To exercise any of these rights, email us at support@rekabytes.com with the subject line Data Request — Snap-It. Include your anonymous visitor ID if you have it (found in browser localStorage under snap_visitor_id). We aim to respond within 30 calendar days.
For the full data protection framework governing Snap-It, see our Privacy Policy.
8. Changes to this policy
If we make material changes to this policy we will update the date at the top of this page. Continued use of Snap-It after changes are posted constitutes acceptance.