Privacy

Privacy policy

Name: Snagito
Author: Snagito

Snagito is designed to keep your saved library on your Android device. This policy explains the current released app and this marketing website.

Last updated: 9 November 2026

Controller

The controller responsible for data processing in the app and on this website is:

Pavel Gross
Stofferkamp 5
22399 Hamburg
Germany
hello@snagito.app

Local app storage

Links, screenshots, files, text, categories and tags that you save in Snagito are stored locally on your Android device.

Data collection by the Android app

The Android app includes no analytics SDK and builds no usage profiles. Data leaves your device only when you trigger it yourself: transferring your library to the browser app, backing up to your Google Drive with Snagito Pro, taking out a subscription, sending feedback or the interest form, and fetching preview data for a saved link. The sections below describe these cases.

View the Google Play data safety information

Transfer to the browser app

When you transfer your library to the browser app, the Android app encrypts the content on your device. A relay at api.snagito.app, running on Cloudflare infrastructure, passes the encrypted package on to your browser. The relay only ever sees encrypted data: the key is derived from the QR code and is never sent to the relay. The package is deleted automatically no later than ten minutes after the QR code was created. A transfer happens only when you scan a QR code.

Google Drive backup (Snagito Pro)

With Snagito Pro you can back up your library to your own Google Drive and restore it from there. To do so, you sign in with your Google account in the app. The app only gets access to files it created itself and to a hidden app folder – not to any of your other files. Your library is encrypted on your device before it is uploaded and is stored only in your Google Drive. We run no server for this and have access neither to the files nor to the key. The key is kept on your device, with a copy in the hidden app folder of your Drive so you can open your backup on a new device. With Snagito Pro, the transfer to the browser app also runs through your Google Drive: the app places an encrypted export there, you sign in with Google in the browser app, and your browser downloads the export directly from your Drive and decrypts it locally with the key that comes with the QR transfer. For this sign-in, the browser app loads Google's sign-in service (accounts.google.com). The app only displays the name and email address of your Google account; they are not sent to us. Google processes the data as the provider of Google Drive under its own privacy policy.

Subscription via Google Play

Snagito Pro is a subscription through Google Play. Purchase, payment, renewal and cancellation are handled by Google Play. We receive no payment details; the app only asks Google Play whether your account has an active subscription.

Feedback from the app

When you send feedback, your text, the number of your entries, categories and tags, and a timestamp are transmitted to Firebase Firestore, a Google service. Device details are included by default: app version, device model and Android version. A diagnostic log is included by default as well: technical messages from the app, such as errors during the Drive sign-in. The app does not write the titles or notes of your entries into it; links, email addresses and file paths are made unreadable before it is stored. You can view the log before sending and switch off both the device details and the log. The content of your library is never included, only how many entries it holds. We use this information solely to answer your feedback and to fix bugs. Nothing is transmitted unless you send the form; the log then stays on your device.

Preview data for saved links

When you save a link, the app fetches the title, description and preview image directly from the linked website. That third-party server learns your IP address in the process, exactly as it would if you opened the page in a browser. The request does not go through our servers, and we receive no data from it.

Pro interest form

Before Snagito Pro went on sale, you could register your interest with a form on the Pro page of the website or in the app. A record that someone was interested, together with the language, was sent to Firebase Firestore. The email address was optional and only stored if you entered one. We use a stored address solely to let you know once that Snagito Pro is available, and delete it afterwards.

Protection against abuse

To keep feedback and the interest form from being abused by automated requests, the app uses Firebase App Check to have Google confirm that a request comes from an unmodified Snagito installation. Your device sends technical characteristics to Google for this; the content of your library is not part of it.

This marketing website

This website uses no third-party analytics, no advertising trackers and sets no cookies of its own. It is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). On every visit, Cloudflare processes technical connection data such as IP address, time, requested address and browser identifier as our processor, in order to deliver the site and protect it against attacks. We do not keep access logs ourselves. Cloudflare deletes this data according to its own retention periods. A data processing agreement under Art. 28 GDPR is in place with Cloudflare. The legal basis is our legitimate interest in delivering the website securely and quickly (Art. 6(1)(f) GDPR).

Feature ideas on this website

On the feature ideas page you can suggest features and vote for them. We store the title and description of an idea you submit and publish it only after review, so please don't include personal data. Before your first vote or a submission, Cloudflare Turnstile checks that you are a person; it is loaded only at that moment and processes technical data such as your IP address and browser properties. Your browser then keeps a random voter ID that lets us count one vote per idea; it is not linked to your name or IP address. To limit abuse, we count requests per day using a hash of your IP address that changes every day and delete these counters the following day. The legal basis is our legitimate interest in a working, abuse-free ideas page (Art. 6(1)(f) GDPR). Cloudflare is based in the USA and certified under the EU-US Data Privacy Framework. You can ask us to delete an idea you submitted at any time. If you choose to give your email address, we store it separately from the idea and use it only to let you know once that the idea has shipped. It is never published. We delete it after that message or as soon as we decline the idea. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by emailing us. Storing the voting ID in your browser is strictly necessary for the voting you ask for (Section 25(2) no. 2 TDDDG).

Legal bases and retention

We process feedback, the diagnostic log and your email address based on your consent (Art. 6(1)(a) GDPR), which you give by sending and can withdraw at any time by email. The Google Drive backup and the subscription serve to perform the contract for Snagito Pro (Art. 6(1)(b) GDPR); abuse protection serves our legitimate interest in a working service (Art. 6(1)(f) GDPR). We keep feedback until it has been dealt with, for no longer than 12 months. Firebase and Google Play are operated by Google; data may be transferred to the USA in the process. Google is certified under the EU-US Data Privacy Framework. Providing data is not required by law or contract; without it you simply cannot use the feature in question. No automated decision-making, including profiling, takes place.

Your rights

You have the right to access the data we hold about you, to have it corrected, deleted or its processing restricted, to data portability and to object. Write to us at the address below. You can also lodge a complaint with a data protection supervisory authority.

Right to object

Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), for example when hosting the website and preventing abuse, you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. An informal email to the address below is enough.

Privacy contact

For privacy questions about Snagito, contact:

hello@snagito.app