Privacy Policy

Data we process

Account data may include email, name, avatar, sign-in provider identifiers, verification status, sessions and MFA settings. Purchase and license records may include Stripe customer or Checkout identifiers, plan, amount, currency, order status, license version, registered projects and developer counts. Stripe Checkout collects the billing address to establish the transaction location, issue receipts, and support tax and dispute handling; the SnowUI application database does not copy the full billing address. Security records may include timestamps, source IP addresses, rate-limit events, audit events and failure diagnostics.

SnowUI does not receive or store full card numbers. Payment details and the complete billing address are handled by Stripe; SnowUI may access relevant order details through Stripe when needed for tax, support, or dispute obligations. Installing or running the component package does not upload project source code or create device fingerprints.

Google sign-in data

When you choose Google sign-in, SnowUI requests only the basic openid, email and profile identity scopes. We receive your Google account identifier, email and its verification status, name and avatar URL to create or identify your SnowUI account and sign you in. This sign-in feature does not request permission to read Gmail, Google Drive or Google Calendar, and does not automatically merge accounts from different sign-in providers just because they share an email address.

This identity information and provider association are stored in the SnowUI account database hosted by Neon and processed by our Google Cloud Run account service. The sign-in flow may also store identity, access or refresh tokens issued by Google; access and refresh tokens are stored with the account service’s OAuth token encryption enabled. Website edge, database and encrypted-backup providers process information as needed to supply these services. Google sign-in data is not used for advertising personalization, sold, or used to train general-purpose AI models. The retention period and deletion exceptions are described under “Retention, security and choices” below.

You can stop using Google sign-in in your Google Account’s third-party connections. Removing that connection does not automatically delete information already stored by SnowUI or end existing SnowUI browser sessions. Sign out or revoke sessions in SnowUI, and use our contact page to request deletion of applicable account data.

Manage Google Account third-party connections

Why we use it

We use data to create and protect accounts, send verification and password emails, process orders, issue and recover licenses, maintain project and seat allowances, support operational audits, prevent abuse, and meet applicable contractual, tax and legal obligations. We do not sell personal data or use account data to train general-purpose AI models.

Service providers and international processing

SnowUI uses Cloudflare for the website and network edge, Google Cloud Run for account services, Neon for managed PostgreSQL, Resend for transactional email, Stripe for payments, and Google for optional sign-in and Google Analytics website traffic measurement. These providers may process data outside your region under their own terms and safeguards.

Retention, security and choices

To limit bulk account creation, the account service sets a necessary browser cookie valid for one day. It contains a server-signed random identifier. Digests of the source IP and this identifier are used to count daily new accounts. The identifier is not used for advertising, cross-site tracking or device fingerprinting and cannot reliably identify a physical machine.

Account data is kept only as long as needed to provide the service and meet security, contractual, tax, dispute and legal obligations. Order, license and append-only audit records may be retained longer than active sessions. SnowUI uses access isolation, least privilege, encrypted backups and audit records, but no system can guarantee absolute security.

You may request access to, correction of, or deletion of applicable account data. Data required by law, for fraud prevention, or as evidence of orders and licenses may not be deleted immediately. Use the contact page and never send passwords, license private keys or complete payment details.

Contact SnowUI

Website traffic analytics

snowui.dev uses Google Analytics to measure page views and traffic sources. The Google tag loads by default on the production website. Google may use cookies, browser and device information, and approximate location to process analytics data. We send page and referrer addresses without query parameters; limited-format campaign tags identify traffic sources. Automatic site-search, form-interaction, outbound-link, and file-download collection is disabled, as are Google advertising personalization signals. Visits may be absent from Google Analytics when the browser blocks the tag or cookies.

The component statistics switch below controls only SnowUI’s own component visit statistics, not Google Analytics. You can block Google Analytics with your browser settings or extensions.

Component visit statistics

When component visit statistics are enabled, valid component documentation visits are counted by default to recommend popular components. Repeat visits to the same component in one anonymous browser session count once per 30 minutes. A random session ID is shared across tabs in the same browser and replaced on the next eligible visit after 30 minutes. The server stores only its HMAC digest, the component ID and visit time; it does not store search terms, account identity or your recent list. With daily cleanup running, visit records are kept for at most 31 days. Public data contains only component totals from the previous 30 days.

You can turn statistics off or on at any time, free of charge. Turning them off clears the browser session ID and stops new reports. Search and your local recommendations still work.