Privacy policy

Last updated: October 2026. SwiftSnapp is run by the operator of SwiftSnapp (“we”). Questions: the contact address shown on the site.

The short version

We convert the files you give us and delete them as soon as the result has been sent. We keep only what is needed to run your account, enforce fair-use limits, take payment and keep the service secure. We do not sell your data.

What we collect and why

• Your files. Processed in a temporary folder on our server, deleted immediately after the conversion finishes (or fails). We do not read them, keep copies, or use them to train anything. They are not included in backups.
• Account data. Your email address, a salted hash of your password (we cannot read your password), your plan, and if you turn it on, your two-factor secret (stored encrypted). Needed to provide the account you asked for.
• Usage and history. Conversion counters (daily for guests and free accounts, monthly for paid plans), and for signed-in users a list of recent conversions (file name, target format, size, result, time) so you can see your history. No file contents. Delete it any time by deleting your account.
• Technical data. A keyed hash of your device cookie and of your network address, used only to enforce usage limits and to slow down abuse. Raw IP addresses are not stored in our database. Short-lived server logs may contain IP addresses for security troubleshooting and are rotated automatically.
• Payments. Handled by Stripe. We never see or store your card number. We store the Stripe customer and subscription IDs, the plan, amounts and dates. Payment records are kept for as long as tax and accounting law requires, without your name or email after you delete your account.
• Email. We email you only what the service needs: sign-up and email-change links, password resets, security notices, receipts and billing problems. No marketing email.

Cookies and similar storage

• Sign-in session (__Host-vizly or vizly_session): keeps you signed in; expires after 14 days; essential.
• Device cookie (mph_dev): counts conversions for visitors without an account; up to 13 months; essential for fair-use limits.
• Browser storage on your device: your theme choice and whether you dismissed the cookie notice. Never sent to us.
• Advertising cookies from Google: only on the free plan, only on public pages, and only after you accept them in the consent bar. Choose “Decline” and no Google ad code is loaded. Paid plans never see ads.

Advertising

When ads are switched on, Google AdSense may set cookies to show and measure ads. Their use of data is described in Google’s own policies. Ads never appear on account, billing or admin pages.

Who receives data

Only the service providers needed to run SwiftSnapp: our hosting provider, Stripe (payments), our email delivery provider, and Google (ads, only with your consent). We may disclose data if the law requires it.

How long we keep it

• Files: deleted right after conversion.
• Daily counters: 3 days; monthly counters: until the month ends plus a few days.
• Sign-in sessions: up to 14 days.
• Account, history and notifications: until you delete your account.
• Database backups: rotated automatically, kept for about 14 days, so deleted data can remain in an older backup for that long.
• Payment records: as long as tax law requires, anonymised after account deletion.

Your rights

Depending on where you live (for example under the GDPR or UK GDPR) you can access, correct, export, restrict or delete your data and object to processing. In your account you can download everything we hold about you, change your email and password, and delete your account. For anything else, or to complain, contact us at the contact address shown on the site. You may also complain to your local data-protection authority.

Security

Passwords are hashed with scrypt; sign-in tokens are stored as keyed hashes; connections use HTTPS; forms are protected against cross-site requests; uploads are checked, size-limited and processed in a restricted process; admin access can require two-factor authentication. No system is perfectly secure; if we learn of a breach affecting you we will tell you as the law requires.

Children

SwiftSnapp is not intended for children under 16 and we do not knowingly collect their data.

Changes

If we change this policy in a meaningful way we will update the date above and, for significant changes, tell signed-in users by email.