Privacy

Privacy Policy

How Snaffla collects, uses and shares your personal data, and the choices you have. Last updated 29 September 2026.

Who we are

Snaffla is run by [Business or operator name and address to be added]. We are the controller of the personal data described here. For any privacy question or request, email info@snaffla.com.

What personal data do we collect?

  • Account details: your email address and password (which our authentication provider stores in hashed form), a display name, an optional profile photo, and your anonymous-profile setting.
  • Your searches: keywords, category, location and radius, chosen marketplaces, alert speed and price range.
  • Your activity in the app: listings you save, block or flag, offers you draft or mark as sent, and inventory items with what you paid, when, any notes or photo link you add, and what they sold for.
  • Notification tokens: a push token for each device where you turn notifications on.
  • Community posts: if you share a win, its caption, photo, profit and the name and photo shown with it.
  • Basic usage data: which pages are viewed, the referring site, and whether the visitor was signed in. We do not store IP addresses or raw browser details. They are used only to create a one-way identifier that changes every day, so a visitor cannot be followed from one day to the next.
  • Payments: handled by Stripe. We receive confirmation of your plan and payment status, not your full card details.

How do we use it, and on what basis?

  • To run your account and provide the service you signed up for, including finding matching listings, valuing them and sending your alerts. This is necessary to perform our contract with you.
  • To send push notifications, which we only do on devices where you have given your browser's permission (your consent).
  • To keep the service secure and prevent abuse, and to understand in aggregate how it is used and which searches are popular, so we can improve it. This is our legitimate interest.
  • To take payment and keep the records the law requires, and to respond to your questions and requests.

We do not sell your personal data.

Who do we share it with?

We use a small number of service providers to run Snaffla. They process data on our behalf and only as needed to provide their service.

  • Supabase: our database, sign-in and file storage.
  • Vercel: hosting for the website.
  • Google (Firebase Cloud Messaging): delivering push notifications to your devices.
  • Google Places: when you type a location into a search, that text is sent to Google to suggest matching places.
  • Stripe: payments.
  • Bright Data: collects public marketplace listings. Only the search keyword and city are used for this; your account details are not sent.
  • Google Gemini: writes the short listing summary. Only the listing's own title, description and price are sent, never your account details.

Some of these providers may process data outside the UK. We may also disclose information where the law requires it.

What is visible to other users?

Your searches, inventory and saved listings are private to your account. The exception is the Community area: if you choose to share a win, its caption, photo and profit, and the name and photo on your profile, are visible to other signed-in users. If you turn on the anonymous-profile setting in Settings, your shares appear as “Anonymous Reseller” without your photo.

Cookies and similar technologies

We use only what the site needs to work: cookies that keep you signed in, and a setting in your browser's local storage that remembers your light or dark theme choice. We do not use advertising or cross-site tracking cookies.

How long do we keep it?

Listings collected from marketplaces are removed automatically after a few days. Your account data is kept while your account is open. You can delete your account at any time from Settings, which permanently deletes it and the data linked to it. Some records may be kept for as long as the law requires, such as payment records, and anonymised, aggregate usage figures are not personal data.

Your rights

Under UK data protection law you have the right to:

  • Ask for a copy of the personal data we hold about you.
  • Have inaccurate data corrected.
  • Have your data deleted.
  • Ask us to restrict how we use it, or object to certain uses.
  • Receive your data in a portable format, where that applies.
  • Withdraw consent you have given, such as for push notifications, at any time.

To use any of these, email info@snaffla.com. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to put things right first.

Changes to this policy

If we change this policy we will update the date at the top of the page. See also the contact page.