Privacy policy

• You can use the site without an account. If you sign in with Google, we keep your name, email and photo, plus the travel profile, favourites and saved pages you choose to add. We never ask for your passport number.
• If you ask us for help with a visa or a trip, we use your name, phone and trip details only to get back to you and help.
• We do not sell personal data and do not use advertising cookies.
• We use Google Analytics to count visits and see which pages help people, only if you say OK to analytics cookies. You can say no and the site works the same.
• Like any website, our hosting provider processes technical data (such as IP addresses) to deliver pages and keep the service secure.

OpenAmbit Technologies Private Limited, Urbtech Trade Centre, A-116, Sector 132, Noida 201304, Uttar Pradesh, India, is the data controller (or "data fiduciary" under India's Digital Personal Data Protection Act, 2023) for personal data processed through snuck.app. Contact: privacy@snuck.app.

Technical request data. When you load a page, your browser sends standard data: IP address, browser and device type, the page requested, the referring page and the time. Our host processes this to serve pages, protect against abuse and attacks, and keep short-lived logs for debugging and security. Legal basis: our legitimate interest in running a secure website.

Approximate country. To pre-select a passport and units, the site reads the country our host derives from your IP address. Your browser remembers the country code so the next visit starts with it; we do not store it on our servers or link it to any identifier.

What you type or pick. Countries chosen in search boxes and filters are used to show you the right page. Searches are sent to our server only to return results and are not linked to you.

Usage statistics (only with your consent). If you accept analytics cookies, Google Analytics 4 records the pages you view, how you arrived (for example from a search engine), approximate location (city level), device, browser, language and screen size, and assigns a random identifier stored in a cookie. Google Analytics 4 does not log or store IP addresses. We use it to understand which pages are useful and to fix problems. Legal basis: your consent, which you can withdraw at any time.

Your account (only if you sign in). Signing in with Google gives us your name, email address and profile photo. In your profile you can add which passports you hold, where you live, visas or permits you have, how and why you travel, your interests, upcoming and dream trips, needs such as food or access, an age group, and which emails you want. All of it is optional. We also keep the countries you heart, pages you save and whether you found pages helpful, and who you follow and who follows you. Each time you sign in we record when, your IP address, approximate location (city and region from the IP), network, browser, device type and, for your first sign-in, the page you arrived on and the site or campaign that sent you. We use these to keep accounts safe and to understand how people find snuck. We use this to show answers for your passport, personalise suggestions and, only for the topics you tick, send you emails. Legal basis: performing our agreement with you (the account) and your consent (emails and optional profile details). You can edit or delete any of it, or your whole account, at my.snuck.app.

Public profile (only if you switch it on). You can choose a username and show a public page at snuck.app/@username with your name, photo, cover picture, tagline, social links, and the countries you've visited, love or dream of. Anyone can see it and search engines may list it. It never shows your email, passports, age or needs. Other members can follow you; you see who follows you. Switch it off any time to hide the page.

Reports. If you use "Report a problem", we keep the page, your message, and your email if you give one or are signed in, to fix the page and reply to you.

Visa and trip requests. If you ask us for help with a visa or a trip, we keep what you enter: your name, phone number, email if you give one, and your trip details (where and when, who is travelling, where you fly from, budget, the visa you need and any notes), with the page you sent it from and the time. Our team uses it to contact you and to help you apply or plan the trip, and we email you a confirmation. If the request is about a trip a member designed, that member sees only your first name and initial, where you are from, the month, the travellers and your budget; never your phone number or email. Legal basis: taking the steps you ask for before any agreement with us, and our legitimate interest in following up your request.

Trips you design. If you design a trip and send it for review, we keep the trip and, once we publish it, show it on snuck with your name or username as its designer.

Messages you send us. If you email us, we keep your message and address to reply and to keep a record of the correspondence.

Strictly necessary. Our host may set security cookies to protect the site from abuse. If you sign in, a session cookie (snuck.session_token) keeps you signed in across snuck.app and my.snuck.app. Your browser also stores small preferences locally (for example your cookie choice, passport and units) which never leave your device. These do not need consent.

Analytics (optional). Only after you allow analytics ("Accept all", or the Analytics switch in "Choose what to allow"), we load Google Tag Manager, which runs Google Analytics. Google Analytics then sets first-party cookies named _ga and _ga_*, which last up to 2 years. Advertising storage and ad signals stay switched off (Google Consent Mode). If you choose "Only necessary", neither script loads and no analytics cookies are set.

Personalisation (optional). Not used yet. If we add features that remember what you look at to suggest trips, they will run only if you allow personalisation, and its cookies or local storage will be listed here first.

Changing your mind. Use cookie settings (also in the footer of every page) to answer again at any time. Saying no after a yes turns analytics off straight away and deletes its cookies. You can also clear this site's data in your browser, or install Google's opt-out add-on at tools.google.com/dlpage/gaoptout. We do not use advertising features, Google signals or cross-site tracking, and we do not share analytics data with Google for its own advertising.

• Cloudflare, Inc.: hosting, content delivery, database, storage, security and the visitor-country header.
• OpenFreeMap and OpenStreetMap tile servers: map tiles requested by your browser when you view a map; they receive standard request data.
• Amazon Web Services, Inc.: sending our emails (Amazon Simple Email Service), such as sign-in messages and request confirmations.
• Google LLC and Google Ireland Ltd: Google Analytics and Google Tag Manager (only with your consent; see policies.google.com/privacy) and Google sign-in for accounts.

Our providers operate globally, so data may be processed outside your country, including in the United States and the European Union. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Request and security logs are kept by our host for a short period (typically days to a few weeks) and then deleted or aggregated. Google Analytics data is kept for 14 months and then deleted automatically; aggregate reports may be kept longer. Emails are kept for as long as needed to handle your request and for a reasonable period afterwards for our records, unless you ask us to delete them. Account data is kept until you delete it or your account; deleting your account removes your profile, favourites, saved pages and ratings straight away. Visa and trip requests are kept while we handle them and for up to 24 months after our last contact with you, then deleted, unless you ask us to delete them sooner.

Depending on where you live (for example under the EU and UK GDPR, India's DPDP Act, or US state privacy laws such as the CCPA), you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, to withdraw consent, to nominate someone to act for you, and to complain to a data protection authority.

Because we collect very little, we often cannot link data to you. To make a request, email privacy@snuck.app. We will respond within the time the law requires. We do not sell or share personal data for cross-context behavioural advertising, and you can always decline analytics cookies.

The site is for a general audience and is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect their personal data.

Pages are served only over encrypted connections (HTTPS), and access to our systems is limited to authorised people. No method of transmission or storage is completely secure.

For any complaint about how your personal data is handled, write to our Grievance Officer, OpenAmbit Technologies Private Limited, Urbtech Trade Centre, A-116, Sector 132, Noida 201304, Uttar Pradesh, India, at privacy@snuck.app. We acknowledge complaints within 72 hours and aim to resolve them within 30 days. If you are not satisfied, you may approach the Data Protection Board of India or your local data protection authority.

We will post any changes on this page and update the date below. Significant changes will be highlighted on the site.