Privacy Policy
Last updated:
Welcome to Shark Snip ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.
1. Information We Collect
We may collect information about you in a variety of ways. The information we may collect includes:
- › Personal Data: Personally identifiable information, such as your name and email address, that you voluntarily give to us when you register with the application.
- › Derivative Data: Information our servers automatically collect when you access the application, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the application.
- › Uploaded Data: Datasets and any associated metadata you voluntarily upload to our service. These files are stored securely and are subject to the visibility settings you control.
2. Use of Your Information
Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you to:
- › Create and manage your account.
- › Securely host and serve your uploaded datasets according to your specified permissions.
- › Email you regarding your account or order.
- › Monitor and analyze usage and trends to improve your experience with the application.
- › Notify you of updates to the application.
3. Disclosure of Your Information
We do not sell your personal data. We do not rent it or trade it for money. Service providers process data for us so that the application works. The list below shows each provider and what it receives.
- › Stripe: takes payments. It receives your email address, your account ID, the plan you buy and the campaign values described below.
- › Supabase: runs sign-in and our database. It holds your account, your profile and the datasets you upload.
- › Resend: sends our emails. It receives your email address and the text of each email, such as the daily picks digest.
- › Sentry: collects error reports. We remove email addresses, IP addresses and secret keys from a report before it leaves our server or your browser.
- › Plausible: counts page views and events.
- › Meta and Google: measure our ad campaigns, but only after you allow Marketing. Their own privacy policies apply to the data they receive.
- › jsDelivr: delivers the DuckDB-Wasm and Pyodide files. Your browser requests them from jsDelivr, so jsDelivr sees your IP address.
- › Fly.io: hosts the application, so every request to Shark Snip passes through its servers.
Datasets you mark as 'private' are not visible to other users. Datasets you mark as 'public' or 'shared' are visible to other users through the Data Hub.
When Analytics is on (by default in the United States, otherwise after Accept all or an
Analytics choice), we record how you first reached Shark Snip in a first-party cookie
named ss_ft (kept for 90 days, never overwritten): the campaign tags on your first link (utm_source,
utm_medium, utm_campaign, utm_content, utm_term), an ad click ID if one was present (Google,
Meta, Microsoft or TikTok), the name of the site that referred you, and the kind of page
you landed on (the page template, never its address). A value that contains an email address
is dropped. When you check out, those same values are copied to Stripe, our payment processor,
as metadata on the checkout, subscription or payment, so we can see which campaigns bring
paying members. While Analytics is off, the cookie is never set and nothing is copied.
4. Security of Your Information
Authentication is handled by Supabase, a trusted infrastructure provider. We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
Location & Geo-Data
We resolve the IP address of every request to an approximate country and region (typically US state). We store the most recent country/region on your profile to enforce regional availability. We do not sell this data. We retain a rolling consent log with a salted hash of your IP for audit purposes; raw IPs are not persisted.
Cookies & Consent
We use essential storage and service connections for session management and core features. Supabase provides authentication and application data services. First-party product-event measurements of our own calls to action, sent to Shark Snip endpoints, are classified as essential service operations and are not controlled by the optional categories below.
Google Tag Manager loads for every visitor. Until you grant Analytics it runs with Google consent mode set to denied: it sets no cookie, and Google receives only cookieless pings (page address, browser and approximate location) that it uses to estimate visitor counts.
All other optional cookies and tracking fall into two categories. Analytics: Google Analytics (Google LLC, loaded through Google Tag
Manager), client-side Sentry error and performance monitoring, and our first-party visit
log (page views, signup, checkout start and purchase, stored by Shark Snip with the page
path, the referring site's domain, the screen size and a random ID that changes every
day; no name, email, account ID or IP address), and the first-touch cookie described in
section 3. Marketing: the Meta Pixel (Meta Platforms, Inc.) and the Google tag
(Google LLC: Google Ads and Google Analytics), which measure our ad campaigns and may
set their own cookies (_fbp, _fbc, _gcl_au).
Google Analytics sets _ga cookies.
Where you are decides the default. In the United States, Analytics is on by default and you can turn it off at any time in Cookie settings below, or with Decline or Essential only in the cookie bar. Everywhere else, and when we cannot tell where you are, Analytics is off until you grant it. Marketing is always opt-in, in every country: the Meta Pixel and the Google tag do not run until you grant it. Accept all grants both categories and starts them in the current session.
Server-side Sentry error reporting is classified as essential operational monitoring and is not controlled by the browser telemetry choice. DuckDB-Wasm and Pyodide assets from jsDelivr are functional dependencies loaded only when you use the browser analytics or model-building features that require them; they are not audience-measurement providers.
Change or withdraw your choice here at any time. Withdrawing a category stops it in the
current session: the visit log stops sending, Google Analytics, the Meta Pixel and the
Google tag receive a consent revocation, and the cookies of that category listed above
are deleted. Your choice is stored in this site's sharksnip_consent_v1 localStorage key.
5. Contact Us
If you have questions or comments about this Privacy Policy, please contact us at: privacy@sharksnip.com
