This is a draft under review and may change before the official launch.

Privacy Policy

Version: 2026-09
Last updated: ⚠️ [publication date]

Your privacy is part of your safety. This policy explains clearly what we collect about you, why, what we never collect, and how you control your data.

Who we are

Sndak is an independent digital awareness and protection platform, run by the Sndak Team. For any question about your privacy, contact us at: privacy@sndak.com.

What we never store

We designed Sndak so you can use most of its services without us storing anything about you:

• Links you check: we analyze them instantly and do not store them.
• Message text you check: we analyze it instantly and do not store it.
• Passwords in the password strength checker: they are checked on your device only, and are never sent to us or to anyone else.
• Your answers in the assessments (phone security, privacy, account security, digital identity): we use them only to calculate your result, and do not store them.
• Your answers in the "Something happened?" flows: we use them only to prepare your plan, and do not store them.

All of these services are available without creating an account.

What we store if you create an account

An account is optional, and is only needed to request an expert consultation and track your requests. If you create an account, we store:

• Your email address: to log you in, and to send email confirmation, password recovery, and security alert messages.
• Your password: in an encrypted form that cannot be reversed. No one at Sndak can know your password.
• Your preferred language for emails.
• Your email confirmation status, and the time you agreed to the Terms and Privacy Policy along with their version number.
• Your account creation time and last login time: for security purposes.

What we store if you request a consultation

• The field you chose, and the description of your problem as you wrote it.
• The contact method you chose, and your number if you chose WhatsApp or Telegram.
• The screenshot if you attached one.
• The request number, status, and dates.

Who sees your request: you, the expert assigned to your request, and only the platform supervisors responsible for managing requests.

Attachments are stored in a private space not accessible to the public, and are only shown to the people above after their permission is verified.

Important: never write passwords, verification codes, or card numbers in your request. Sndak experts will never ask you for them.

Outside services we use

• Google Safe Browsing: when you check a link (or a link inside a message), we send the link to this Google service to see if it is listed in known threat databases. We send no information about you with it.
• Email provider (Resend): to send confirmation and password recovery emails. It handles your email address and the message content for sending purposes only.
• Hosting provider ⚠️ [provider name and server country]: where the platform runs and its data is stored.

We do not sell your data, share it with advertisers, or use it for any marketing purpose.

Cookies and browser storage

• One session cookie: created only when you log in, to keep you logged in for up to 7 days. It is protected so that scripts inside the page cannot read it, and it is deleted when you log out.
• Two notes in your browser: that you have seen the privacy notice, and when you closed the sign-up invitation, so we don't show them again. They stay on your device and are not sent to us.
• A random code for your device: created in your browser and sent with checking requests, so each person gets their own checking allowance instead of sharing one with everyone on the same internet network. It contains no information about you, we don't store it, and we forget it within 15 minutes.

We use no trackers, no third-party analytics, and no ads. The fonts the site uses are hosted with it, so your browser does not send requests to other parties while you browse.

Security logs

• To protect the platform from abuse (such as repeated password-guessing attempts), we process your IP address temporarily to apply usage limits, without saving it to your account.
• We keep a log of sensitive administrative actions (such as changing the status of a request or account) for security and accountability. If you delete your account, these logs remain without being linked to you.

How we protect your data

This includes: encrypted passwords, password recovery and email confirmation links that are short-lived and single-use, an email alert when your password changes, signing out all your devices when it changes, and storing attachments in a private space. No system is 100% secure, but we work continuously to protect your data.

How long we keep data

• Your account data and requests: we keep them as long as your account exists.
• Screenshots attached to consultation requests: automatically and permanently deleted 90 days after the request is completed or cancelled, because they may contain sensitive information. The request text remains so you can see it in "My requests".
• Confirmation and recovery links: expire within 24 hours (confirmation) or 30 minutes (recovery).

Your rights

• Access: see your account data on the "My account" page, and your requests in "My requests".
• Change: change your email language and password from "My account".
• Delete: delete your account yourself at any time from "My account". All your consultation requests and their attachments are permanently deleted with it and cannot be recovered.
• For any other request about your data, contact us at privacy@sndak.com.

Children

Creating a Sndak account is available to people aged 13 or older. If you are younger, you can use the checking tools, guides, and assessments without an account, preferably with help from a parent or an adult you trust.

Changes to this policy

If we make a material change to this policy, we update the version number and ask you to agree to the new version the next time you log in.

Contact us

privacy@sndak.com