Privacy policy

Last updated 8 August 2026

The short version

  • You can play without an account. If you do, we store your score and nothing that identifies you.
  • We don't store your IP address.It's hashed in memory to stop abuse, then discarded — it never reaches our database.
  • Photos you upload are public.That's the game. Location data is stripped before storage.
  • We don't sell or share your personal information, and there is no advertising here.Analytics only, and only if you accept.
  • You can delete your dogs at any time, and email us to close your account.

1. Who we are

Snoot Snout operates snootsnout.com. Contact us about anything on this page atprivacy@snootsnout.com.

3964 Rivermark Plaza, Unit #2742 Santa Clara, CA 95054

2. What we collect

If you only play

DataWhyStored?
Your guess and its scoreTo show your result and the crowd averageYes — with no user identifier attached
The day and dog you playedSameYes
A hashed, salted form of your IPRate limiting, to stop automated abuseNo — held briefly in a cache, then expires

Anonymous guesses are stored with no account, no IP, no device identifier and no cookie linking them to you. The record is the dog, the score and the time.

If you create an account

If you add a dog

DNA results here are your dog'sgenetic information, not yours. They are not human genetic data and are not “sensitive personal information” under GDPR or the CPRA. A proof document may show your name, which is why proofs are private and photos are not.

3. What we don't collect

4. Cookies and your choice

A banner asks before any non-essential cookie is set. Decline and only the sign-in cookie is used — the game works exactly the same.

CookiePurposeNeeds consent?
Authentication sessionKeeps you signed inNo — strictly necessary
Cloudflare TurnstileTells humans from bots on formsNo — strictly necessary
Time zoneStores which time zone your browser reports, so the daily dog changes at your midnight rather than oursNo — strictly necessary
Google AnalyticsWhich pages and features get usedYes

One thing deliberately isn't in that table: we also count visits with Vercel Web Analytics, which sets no cookie and stores nothing on your device. It works out a rough visitor count from a hash that is thrown away and regenerated daily, so there is no identifier that outlives the day and nothing that follows you to another site. Because it stores nothing, it needs no consent — but you should still know it is running, so we are telling you here rather than leaving it out.

You can change your mind at any time:

You haven't made a choice yet.

5. What is public

Please read this part carefully — it's the thing people most often misjudge. When your dog is approved, the following become visible to anyone on the internet, including people without accounts:

Naming a specific branch — “Santa Clara Humane Society” rather than “the Humane Society” — narrows you to a city, which is why the field is optional and either answer is fine. Nothing about your location is collected any other way.

Never public: your email address, your password, DNA proof documents, and which dogs you personally guessed. You can delete a dog at any time, approved or not.

6. Advertising and analytics

There is no advertising on Snoot Snout. No ad network runs here, no ad cookies are set, and nothing about you is shared with advertisers.

There are two kinds of measurement, and they are not the same thing. Vercel Web Analytics counts visits and page views. It is cookieless, stores nothing on your device, and always runs — it is how we know whether anyone is here at all. Google Analytics is the detailed one: which features get used, where people give up. It loads only if you accept the banner, and it tells us which pages people use, not who you are.

We may introduce advertising later to cover what it costs to run the site. We would rather say that now than surprise you. If we do, ad providers commonly use cookies to select and measure ads, and personalised advertising can count as sharing personal information under the California Consumer Privacy Act. So we will ask again before any of it happens: the consent you give today covers analytics only, and advertising would require a fresh choice, not a reinterpretation of this one.

We may also earn a commission if you follow a link to a dog DNA testing company and buy something. It never costs you more, and it never influences the game — the answer key is whatever the owner's test actually said.

7. Reporting a problem

The “Report a problem” link at the foot of every page files what you write into our issue tracker on GitHub. That tracker is private — what you send is read by the people who maintain the site, and is not published. Along with your message we record the page you were on, your browser's user-agent string, and, if you happen to be signed in, your account ID so we can reply. No account is needed to report anything.

8. Who we share data with

Only service providers processing it on our behalf, plus the analytics provider you consent to.

ProviderWhat it handles
SupabaseDatabase, authentication, file storage
VercelHosting, server logs, and cookieless visit counts
CloudflareBot protection (Turnstile)
UpstashRate-limiting counters (hashed values only)
Google AnalyticsUsage measurement — only with consent
Google (Gemini)Reads a DNA screenshot only if you choose that option
GitHubProblem reports you choose to send — private tracker, not public

Note on the last row: if you ask us to read a DNA screenshot automatically, that image is sent to Google. If the screenshot shows your name, it goes with it. You can always type the results in instead.

We don't store your IP address, but providers above necessarily receive it in order to serve or protect the site, and handle it under their own policies.

9. International transfers

Our providers operate globally, so your information may be processed outside your country, including in the United States. Where data leaves the UK, EU or EEA we rely on Standard Contractual Clauses, the UK Addendum, or an adequacy decision, through our agreements with those providers.

10. How long we keep things

DataRetention
Account and profileUntil you ask us to close it
Dogs, photos and DNA proofsUntil you delete them, or ask us to close your account
Rejected submissionsKept while the decision can be appealed, then removed on request
Guesses and scoresKept as part of the game's history; anonymous guesses hold no identifier
Rate-limiting recordsMinutes — they expire automatically
Server logsPer the hosting provider's standard retention

11. Your rights

You can access, correct or delete your dogs from within the site at any time. To close your account and remove everything on it, email privacy@snootsnout.com and we will do it within one month.

UK, EU and EEA. You have the right to access your data, have it corrected or erased, restrict or object to processing, receive a portable copy, and withdraw consent. Emailprivacy@snootsnout.comand we'll respond within one month. You can also complain to your local data protection authority — in the UK, the Information Commissioner's Office.

California.You have the right to know what we collect, to delete it, to correct it, to opt out of sale or sharing, and to limit use of sensitive personal information. We don't sell personal information, don't share it for cross-context behavioural advertising, and don't collect sensitive personal information. We won't discriminate against you for exercising these rights, and you may use an authorised agent.

Other US states.Residents of states with comparable laws — including Colorado, Connecticut, Virginia, Texas, Utah and Oregon — have similar rights. Contact us and we'll honour them.

12. Children

Snoot Snout isn't intended for children under 13, and under-13s may not create an account. In the UK, EU and EEA you must be at least 16, or have a parent or guardian's consent. If you believe a child has given us personal information, emailprivacy@snootsnout.comand we'll delete it.

13. Security

Passwords are hashed and never stored in plain text. Photos are re-encoded to strip location metadata. DNA proofs live in a private bucket. Traffic is encrypted in transit. No service can promise perfect security, and we don't.

14. Changes

If this policy changes we'll update the date at the top, and for changes that materially affect your rights we'll give notice on the site first.

Questions or requests:privacy@snootsnout.com ·Back to Snoot Snout