Snagzi

Privacy Policy

Last updated 6 October 2026

Snagzi is operated by Edvardas Juckas, based in Spain (“we”). Snagzi is a Shopify app that lets merchants run a small in-store game where shoppers can earn a discount code. This policy explains what data the app handles, why, and how long it is kept. Merchants’ use of Snagzi is also covered by our Terms of Service, which include our data processing terms.

Data we handle for merchants

When a merchant installs the app we store:

• The store domain, store ID and store currency.
• Campaign settings the merchant creates, including wording and styling.
• Subscription plan and monthly usage counts.
• Access tokens issued by Shopify, used only to call Shopify APIs on the store’s behalf.

Data we handle for shoppers

When a shopper plays the game on a merchant’s storefront:

• A random visitor identifier is generated in the browser and stored in the shopper’s own browser storage. It is not linked to a name or an account.
• Identifiers we store on our side are hashed with a store-specific secret before being written. We do not store raw visitor or customer identifiers.
• Game progress: how many times the mascot was caught, which pages of the store were visited during the game, and time spent playing.
• Discount codes issued to that shopper, and whether they were redeemed.
• Only if the merchant runs an email campaign and the shopper explicitly opts in: the email address they enter, together with their consent. Email addresses are encrypted at rest (AES-256-GCM).

To limit automated play abuse, we count how many new games start in each store per hour and, for shoppers signed in to a customer account, per account, using a store-specific hash of the account ID that changes daily. We do not use shoppers’ IP addresses for this. These rate-limit records expire within a day and are removed by background cleanup. Hosting providers may maintain separate infrastructure logs.

Shopper consent

The game itself works without analytics consent. Reporting data is only recorded when the shopper’s consent allows it, as reported by Shopify’s Customer Privacy API. Shoppers who decline analytics can still play and still receive their reward; they are simply excluded from merchant reports.

How long we keep it

• Game sessions expire 30 days after they are created. Once a session is at least 90 days old and has expired, background cleanup removes its configuration snapshot and raw browsing details, preserving numerical reporting and hashed reward-eligibility records.
• Event logs older than 90 days are removed once their game session has expired. Cleanup may be deferred while a customer data request is awaiting fulfilment.
• Progress stored in the shopper’s own browser is pruned after 90 days.
• Issued discount records, email consents, numerical reports and minimal hashed eligibility records are kept while the app is installed, to support consent records, historical reporting and duplicate-reward prevention. These remain subject to customer and store deletion requests.
• Merchant campaign and usage data is kept while the app is installed.
• Encrypted database backups are kept for 30 days, then deleted automatically. Data deleted from the app disappears from backups as they expire.

Deletion and data requests

We implement Shopify’s mandatory compliance webhooks. When Shopify sends a request on a shopper’s or store’s behalf we action it:

• customers/data_request — we compile the data held for that shopper.
• customers/redact — we delete that shopper’s data.
• shop/redact — we delete the store’s data after uninstall.

Shoppers should raise requests with the store they shopped with, which forwards them to us through Shopify. Merchants can also contact us directly at support@snagzi.app.

Sharing

We do not sell personal data and we do not share it with third parties for their own purposes. These providers process data on our instructions, only to run Snagzi:

• Shopify — the platform the app runs on, including discount codes and checkout.
• Railway — application hosting and our database.
• GitHub — storage of our encrypted database backups.
• ntfy.sh — failure alerts to the operator’s phone, containing only an event name and a store domain, never shopper data.

Where data is processed

Our application servers and database run in the United States (Virginia), and our encrypted backups are stored by GitHub in the United States. Shopify processes data in the locations where its services operate. Our location in Spain does not mean data is processed there.

Changes

We will update this page when our handling changes, and revise the date above.

Contact

Edvardas Juckas, Spain. Questions about this policy: support@snagzi.app.