Privacy Policy

Effective July 3, 2026 · Written by humans, in plain English.

The short version: Snailsy accounts are pseudonymous (your username is your only public identity), the extension never reads the content of the pages you visit, never captures payment details, never sells data, and can delete everything you've contributed with one click.

What Snailsy is

Snailsy is a social network built on Snail Trails — short thoughts members anchor to websites. Members follow each other, see their network's trails in a feed, comment on them, and give ❤️ loves. The extension never reads, scans, or modifies the pages you visit — it only ever looks at the domain name of the tab you're on (e.g. ticketmaster.com), so it can show that site's trails and let you know when a site has some.

The "heads-up" feature

So you don't have to click the snail on every site, the extension can badge its toolbar icon and show a notification when a site you're on has Snail Trails. To do that it checks the domain name only of your current tab against the trail map — never the full page URL, never the page contents, and nothing tied to your identity. You can turn the badge and the notifications off independently in the extension's Settings, which disables the check entirely.

What we collect (and why)

Your account. An email address (login + password resets only — never shown to other members, never used for marketing) and your chosen username, which is your only public identity.
Trails you choose to leave. The text you write, its tag, and the site it's about. Trails are public by design and appear under your username. Emails, card numbers, and long ID numbers are scrubbed from trail text automatically — on your device and again on the server.
Comments you write. Public, under your username, on the trail they reply to — with the same automatic PII scrubbing as trails.
Loves, follows, and reports. Which trails and comments you ❤️, which members you follow, and anything you report — all tied to your account so you can undo them or delete everything at once. Loves you give and your follow lists are publicly visible; reports are not.
An anti-spam stamp. Leaving a trail includes a proof-of-work stamp — a small math puzzle your browser solves invisibly. It contains no personal data; it's compute, not identity. Submissions are also rate-limited per device and per network (network addresses are checked as one-way hashes and never stored raw).
Waitlist email (only if you sign up on this website). Used solely to email you about Snailsy launches. The list is write-only from the web — no client can read it back.

What we never collect

No page content, ever — the extension has no access to the pages you browse.
No browsing history. Only the domain of your current tab is ever read — to fetch that site's trails and (if you leave the heads-up on) to check whether it has any. Full URLs and page contents are never seen.
No real names or addresses — membership is a username, an email, and a password.
No payment data of any kind.
No ad identifiers, no fingerprinting, no third-party trackers — including on this website.

Trails, comments, loves, and follows are public

Anything you write in a trail or comment is visible to everyone — in the extension and on this website — under your username, as are the loves you give and the members you follow. Don't put personal information in trails or comments; our scrubbers try to catch it, but the best protection is not writing it.

We never sell data

Not raw, not "anonymized," not aggregated for marketers. We also take no money from the websites trails describe — no affiliate fees, no ads — because that conflict of interest would defeat the point of Snailsy.

Deleting your data

Extension Settings → "Delete all my data" removes every trail, comment, love, follow, and report you've made from the map. To delete the account itself (email + username), write to hello@snailsy.app — we process deletions within 30 days.

Where data lives

Trails, comments, loves, follows, and the waitlist are stored with Supabase (Postgres, US region). Clients can only reach the data through narrow, rate-limited functions — the underlying tables are not readable or writable directly by any client.

Changes

If this policy changes materially, we'll say so prominently on this page and in the extension before the change takes effect.

Contact

Questions, concerns, deletions: hello@snailsy.app. The full source code is on GitHub.