Privacy policy
Last updated 8 August 2026
The short version
- You can play without an account. If you do, we store your score and nothing that identifies you.
- We don't store your IP address.It's hashed in memory to stop abuse, then discarded — it never reaches our database.
- Photos you upload are public.That's the game. Location data is stripped before storage.
- We don't sell or share your personal information, and there is no advertising here.Analytics only, and only if you accept.
- You can delete your dogs at any time, and email us to close your account.
1. Who we are
Snoot Snout operates snootsnout.com. Contact us about anything on this page atprivacy@snootsnout.com.
3964 Rivermark Plaza, Unit #2742 Santa Clara, CA 95054
2. What we collect
If you only play
| Data | Why | Stored? |
|---|---|---|
| Your guess and its score | To show your result and the crowd average | Yes — with no user identifier attached |
| The day and dog you played | Same | Yes |
| A hashed, salted form of your IP | Rate limiting, to stop automated abuse | No — held briefly in a cache, then expires |
Anonymous guesses are stored with no account, no IP, no device identifier and no cookie linking them to you. The record is the dog, the score and the time.
If you create an account
- Email address — for sign-in, confirmation and password reset.
- Password — stored only as a salted hash by our authentication provider. We never see it.
- Username, and optionally a display name and avatar — shown publicly.
- If you sign in with Google or Apple, we receive your email address and basic profile information. We never receive your password.
If you add a dog
- The photo. Every image is re-encoded on upload, which removes EXIF metadata — including GPS coordinates and camera identifiers — before it is stored.
- A caption, if you write one.
- Your dog's DNA results — breed names, percentages, and which company tested them.
- A DNA proof document. Attaching DNA results requires a screenshot or PDF of the report they came from. These go in a private bucket that is not publicly readable, visible only to moderators reviewing your submission.
DNA results here are your dog'sgenetic information, not yours. They are not human genetic data and are not “sensitive personal information” under GDPR or the CPRA. A proof document may show your name, which is why proofs are private and photos are not.
3. What we don't collect
- We don't store your IP address in our database.
- We don't fingerprint your device.
- We don't buy personal data about you from anyone.
- We don't ask for your real name, address, phone number or date of birth.
4. Cookies and your choice
A banner asks before any non-essential cookie is set. Decline and only the sign-in cookie is used — the game works exactly the same.
| Cookie | Purpose | Needs consent? |
|---|---|---|
| Authentication session | Keeps you signed in | No — strictly necessary |
| Cloudflare Turnstile | Tells humans from bots on forms | No — strictly necessary |
| Time zone | Stores which time zone your browser reports, so the daily dog changes at your midnight rather than ours | No — strictly necessary |
| Google Analytics | Which pages and features get used | Yes |
One thing deliberately isn't in that table: we also count visits with Vercel Web Analytics, which sets no cookie and stores nothing on your device. It works out a rough visitor count from a hash that is thrown away and regenerated daily, so there is no identifier that outlives the day and nothing that follows you to another site. Because it stores nothing, it needs no consent — but you should still know it is running, so we are telling you here rather than leaving it out.
You can change your mind at any time:
You haven't made a choice yet.
5. What is public
Please read this part carefully — it's the thing people most often misjudge. When your dog is approved, the following become visible to anyone on the internet, including people without accounts:
- the photo and caption
- the breed mix and percentages from the DNA results
- your username, and the date your dog appeared in the game
- your dog's name, if you give one
- the shelter or rescue you name, and any link you add to it
Naming a specific branch — “Santa Clara Humane Society” rather than “the Humane Society” — narrows you to a city, which is why the field is optional and either answer is fine. Nothing about your location is collected any other way.
Never public: your email address, your password, DNA proof documents, and which dogs you personally guessed. You can delete a dog at any time, approved or not.
6. Advertising and analytics
There is no advertising on Snoot Snout. No ad network runs here, no ad cookies are set, and nothing about you is shared with advertisers.
There are two kinds of measurement, and they are not the same thing. Vercel Web Analytics counts visits and page views. It is cookieless, stores nothing on your device, and always runs — it is how we know whether anyone is here at all. Google Analytics is the detailed one: which features get used, where people give up. It loads only if you accept the banner, and it tells us which pages people use, not who you are.
We may introduce advertising later to cover what it costs to run the site. We would rather say that now than surprise you. If we do, ad providers commonly use cookies to select and measure ads, and personalised advertising can count as sharing personal information under the California Consumer Privacy Act. So we will ask again before any of it happens: the consent you give today covers analytics only, and advertising would require a fresh choice, not a reinterpretation of this one.
We may also earn a commission if you follow a link to a dog DNA testing company and buy something. It never costs you more, and it never influences the game — the answer key is whatever the owner's test actually said.
7. Reporting a problem
The “Report a problem” link at the foot of every page files what you write into our issue tracker on GitHub. That tracker is private — what you send is read by the people who maintain the site, and is not published. Along with your message we record the page you were on, your browser's user-agent string, and, if you happen to be signed in, your account ID so we can reply. No account is needed to report anything.
8. Who we share data with
Only service providers processing it on our behalf, plus the analytics provider you consent to.
| Provider | What it handles |
|---|---|
| Supabase | Database, authentication, file storage |
| Vercel | Hosting, server logs, and cookieless visit counts |
| Cloudflare | Bot protection (Turnstile) |
| Upstash | Rate-limiting counters (hashed values only) |
| Google Analytics | Usage measurement — only with consent |
| Google (Gemini) | Reads a DNA screenshot only if you choose that option |
| GitHub | Problem reports you choose to send — private tracker, not public |
Note on the last row: if you ask us to read a DNA screenshot automatically, that image is sent to Google. If the screenshot shows your name, it goes with it. You can always type the results in instead.
We don't store your IP address, but providers above necessarily receive it in order to serve or protect the site, and handle it under their own policies.
9. International transfers
Our providers operate globally, so your information may be processed outside your country, including in the United States. Where data leaves the UK, EU or EEA we rely on Standard Contractual Clauses, the UK Addendum, or an adequacy decision, through our agreements with those providers.
10. How long we keep things
| Data | Retention |
|---|---|
| Account and profile | Until you ask us to close it |
| Dogs, photos and DNA proofs | Until you delete them, or ask us to close your account |
| Rejected submissions | Kept while the decision can be appealed, then removed on request |
| Guesses and scores | Kept as part of the game's history; anonymous guesses hold no identifier |
| Rate-limiting records | Minutes — they expire automatically |
| Server logs | Per the hosting provider's standard retention |
11. Your rights
You can access, correct or delete your dogs from within the site at any time. To close your account and remove everything on it, email privacy@snootsnout.com and we will do it within one month.
UK, EU and EEA. You have the right to access your data, have it corrected or erased, restrict or object to processing, receive a portable copy, and withdraw consent. Emailprivacy@snootsnout.comand we'll respond within one month. You can also complain to your local data protection authority — in the UK, the Information Commissioner's Office.
California.You have the right to know what we collect, to delete it, to correct it, to opt out of sale or sharing, and to limit use of sensitive personal information. We don't sell personal information, don't share it for cross-context behavioural advertising, and don't collect sensitive personal information. We won't discriminate against you for exercising these rights, and you may use an authorised agent.
Other US states.Residents of states with comparable laws — including Colorado, Connecticut, Virginia, Texas, Utah and Oregon — have similar rights. Contact us and we'll honour them.
12. Children
Snoot Snout isn't intended for children under 13, and under-13s may not create an account. In the UK, EU and EEA you must be at least 16, or have a parent or guardian's consent. If you believe a child has given us personal information, emailprivacy@snootsnout.comand we'll delete it.
13. Security
Passwords are hashed and never stored in plain text. Photos are re-encoded to strip location metadata. DNA proofs live in a private bucket. Traffic is encrypted in transit. No service can promise perfect security, and we don't.
14. Changes
If this policy changes we'll update the date at the top, and for changes that materially affect your rights we'll give notice on the site first.
Questions or requests:privacy@snootsnout.com ·Back to Snoot Snout