Privacy policy
Last updated: October 5, 2026
Controller and contact
EURL BENOIT EVEILLARD, SIREN 983 284 126, registered office 20 Rue Chardon Lagache, 75016 Paris, France, is the controller for the Service data described here. Contact support@sneaps.io for privacy requests. Polar receives purchase and payment data directly and publishes its own privacy policy at https://polar.sh/legal/privacy-policy.
Data processed
Our server receives the Licence Key but stores only its SHA-256 hash and the key ID assigned by Polar. We keep usage counters (images used per billing period and per day), request IDs and states, timestamps, and technical logs containing the event, key ID, outcome and duration. The prompt, image size and quality are processed to generate the image. Our Worker code does not store prompts, generated images or IP addresses. Our host, Cloudflare, processes IP addresses to route and secure requests under its own privacy policy. Cloudflare invocation logging has been disabled. Previously collected invocation logs, which may contain IP addresses, expire after their existing 7-day retention period. This statement concerns our server; third-party providers process prompts under their own terms.
Licence activation and payments
When a key is activated or checked, the plugin sends Polar the key, product name and site hostname. Polar handles licence keys and, as merchant of record, receives the Customer’s email and payment data directly and handles payments, taxes, invoices, refunds and subscriptions. We may process the email and information the Customer sends to support to answer their request.
Purposes and legal bases
Licence validation, image generation, usage accounting and support are necessary to perform the contract. Security and abuse prevention rely on our legitimate interest in protecting the Service, balanced against individuals’ rights. Any records we must retain to meet accounting or other statutory requirements are processed to comply with legal obligations. Do not include personal data, secrets or sensitive information in prompts.
Recipients and international transfers
Recipients include Cloudflare (server hosting and D1 database storage configured in Western Europe), Polar (payments and licence keys), a model-routing service and third-party AI image model providers (prompt processing to create images). Some providers may process data outside the European Economic Area, including the United States and possibly other countries. Transfer safeguards: [SAFEGUARDS, LAWYER TO CONFIRM]. Requests about these safeguards can be sent to support@sneaps.io.
Retention
Our server does not store prompts or generated images. The retention periods below describe our server records. Polar and other providers apply their own retention policies.
| Data | Retention |
|---|---|
| Licence Key SHA-256 hash | Deleted approximately 1 day after its last use. |
| Polar key ID and request records | Approximately 62 days after the last request. |
| Usage counters | Approximately 62 days after the last request in the billing period. |
| Technical logs | 7 days. Logs contain the event, key ID, outcome and duration, never a prompt, a Licence Key or an image. |
| Abuse blocklist | For as long as the block applies. Entries are removed manually, without automatic deletion. |
| Support correspondence | 3 years after the end of the customer relationship. |
| Accounting records | 10 years from the end of the financial year, under French accounting obligations. |
Your rights and cookies
You may request access, correction, deletion, restriction, portability or objection where applicable by emailing support@sneaps.io. We may need information to verify your identity. You may complain to the CNIL (cnil.fr) or your competent supervisory authority. The sneaps website does not use analytics or set cookies. If you proceed to Polar for payment, its own cookies, processing and privacy policy apply on its service.