This policy explains the browser storage used by the Snap It website operated by Orviq Technologies.
Landing page and waitlist
Joining or verifying the waitlist does not require cookies or persistent browser storage. If you select the optional “Remember my confirmation on this device” checkbox, we store a SHA-256 email fingerprint and expiry timestamp under snapit.waitlist.confirmation.v2 for up to 30 days. It recognizes a confirmed address you enter; it is not proof of account ownership. The fingerprint is pseudonymous, not anonymous, and is not used for advertising. This preference is off by default. Server-side duplicate protection still works without it. Expired records are ignored and removed when this feature is used; stored data can physically remain until removed by you or the browser. Older indefinite fingerprints are not read by this version. Unchecking the preference clears both formats.
Essential authentication cookies
When you sign in on the production website, Snap It sets __Host-snapit_site_access, a short-lived access cookie lasting up to 15 minutes, and __Host-snapit_site_refresh, a rotating refresh cookie lasting up to 30 days. Both are HTTP-only, marked Secure, use SameSite=Strict, are limited to the root path, and cannot specify a parent domain. They are necessary for signed-in account and protected-download features. Local development uses equivalent unprefixed cookies because the __Host- prefix requires HTTPS.
The Mac-account bridge uses a separate pair: __Host-snapit_mac_access (up to 15 minutes) and __Host-snapit_mac_refresh (up to 30 days), with the same protections. It does not import or merge an older website session. Supabase session tokens are not returned to website JavaScript or stored in browser local storage.
Temporary browser storage
Signup and password-reset pages may use session storage to carry an email address between steps. Session storage is limited to the current browser session and is not an advertising identifier.
No advertising or analytics cookies
Snap It does not currently use behavioural advertising cookies, cross-site tracking pixels, or third-party analytics cookies. Because only strictly necessary authentication storage is used, the current site does not display a consent banner. If we add non-essential storage, we will update this policy and request consent where required before using it.
Your controls
You can remove cookies using your browser settings. Removing either authentication cookie may sign you out. Browser controls may also block storage, but protected website functions may then stop working.
Contact
Questions about website storage can be sent to contact@hellosnapit.com.