Skip to content

Privacy Policy

Last updated:

Welcome to Shark Snip ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect includes:

  • › Personal Data: Personally identifiable information, such as your name and email address, that you voluntarily give to us when you register with the application.
  • › Derivative Data: Information our servers automatically collect when you access the application, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the application.
  • › Uploaded Data: Datasets and any associated metadata you voluntarily upload to our service. These files are stored securely and are subject to the visibility settings you control.

2. Use of Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you to:

  • › Create and manage your account.
  • › Securely host and serve your uploaded datasets according to your specified permissions.
  • › Email you regarding your account or order.
  • › Monitor and analyze usage and trends to improve your experience with the application.
  • › Notify you of updates to the application.

3. Disclosure of Your Information

We do not sell your personal data. We do not rent it or trade it for money. Service providers process data for us so that the application works. The list below shows each provider and what it receives.

  • › Stripe: takes payments. It receives your email address, your account ID, the plan you buy and the campaign values described below.
  • › Supabase: runs sign-in and our database. It holds your account, your profile and the datasets you upload.
  • › Resend: sends our emails. It receives your email address and the text of each email, such as the daily picks digest.
  • › Sentry: collects error reports. We remove email addresses, IP addresses and secret keys from a report before it leaves our server or your browser.
  • › Plausible: counts page views and events.
  • › Meta and Google: measure our ad campaigns, but only after you allow Marketing. Their own privacy policies apply to the data they receive.
  • › jsDelivr: delivers the DuckDB-Wasm and Pyodide files. Your browser requests them from jsDelivr, so jsDelivr sees your IP address.
  • › Fly.io: hosts the application, so every request to Shark Snip passes through its servers.

Datasets you mark as 'private' are not visible to other users. Datasets you mark as 'public' or 'shared' are visible to other users through the Data Hub.

When Analytics is on (by default in the United States, otherwise after Accept all or an Analytics choice), we record how you first reached Shark Snip in a first-party cookie named ss_ft (kept for 90 days, never overwritten): the campaign tags on your first link (utm_source, utm_medium, utm_campaign, utm_content, utm_term), an ad click ID if one was present (Google, Meta, Microsoft or TikTok), the name of the site that referred you, and the kind of page you landed on (the page template, never its address). A value that contains an email address is dropped. When you check out, those same values are copied to Stripe, our payment processor, as metadata on the checkout, subscription or payment, so we can see which campaigns bring paying members. While Analytics is off, the cookie is never set and nothing is copied.

4. Security of Your Information

Authentication is handled by Supabase, a trusted infrastructure provider. We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

Location & Geo-Data

We resolve the IP address of every request to an approximate country and region (typically US state). We store the most recent country/region on your profile to enforce regional availability. We do not sell this data. We retain a rolling consent log with a salted hash of your IP for audit purposes; raw IPs are not persisted.

Cookies & Consent

We use essential storage and service connections for session management and core features. Supabase provides authentication and application data services. First-party product-event measurements of our own calls to action, sent to Shark Snip endpoints, are classified as essential service operations and are not controlled by the optional categories below.

Google Tag Manager loads for every visitor. Until you grant Analytics it runs with Google consent mode set to denied: it sets no cookie, and Google receives only cookieless pings (page address, browser and approximate location) that it uses to estimate visitor counts.

All other optional cookies and tracking fall into two categories. Analytics: Google Analytics (Google LLC, loaded through Google Tag Manager), client-side Sentry error and performance monitoring, and our first-party visit log (page views, signup, checkout start and purchase, stored by Shark Snip with the page path, the referring site's domain, the screen size and a random ID that changes every day; no name, email, account ID or IP address), and the first-touch cookie described in section 3. Marketing: the Meta Pixel (Meta Platforms, Inc.) and the Google tag (Google LLC: Google Ads and Google Analytics), which measure our ad campaigns and may set their own cookies (_fbp, _fbc, _gcl_au). Google Analytics sets _ga cookies.

Where you are decides the default. In the United States, Analytics is on by default and you can turn it off at any time in Cookie settings below, or with Decline or Essential only in the cookie bar. Everywhere else, and when we cannot tell where you are, Analytics is off until you grant it. Marketing is always opt-in, in every country: the Meta Pixel and the Google tag do not run until you grant it. Accept all grants both categories and starts them in the current session.

Server-side Sentry error reporting is classified as essential operational monitoring and is not controlled by the browser telemetry choice. DuckDB-Wasm and Pyodide assets from jsDelivr are functional dependencies loaded only when you use the browser analytics or model-building features that require them; they are not audience-measurement providers.

Change or withdraw your choice here at any time. Withdrawing a category stops it in the current session: the visit log stops sending, Google Analytics, the Meta Pixel and the Google tag receive a consent revocation, and the cookies of that category listed above are deleted. Your choice is stored in this site's sharksnip_consent_v1 localStorage key.

5. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: privacy@sharksnip.com