SnapLabSnapLab is a football play builder for coaches. This policy describes the website and companion app as they work today. We do not sell personal information, serve ads, or run advertising or analytics trackers in the current version.
Information we use
- Account: username, email address, password verifier, password-reset token verifiers, any legacy recovery-code verifier retained from before email recovery, and, for new accounts, the date and version of the Terms accepted. We store password and recovery-token hashes, not the plain-text values. Email reset links expire after 30 minutes, can be used once, and are removed after a successful reset or account deletion. Expired reset records are pruned during later reset requests. If you choose Google or Apple sign-in, we receive provider account identifiers and verified email information; Apple refresh tokens may be stored in encrypted form for account management.
- Content: formations, plays, player labels, route geometry, notes, folders, and playbook names that you create. A playbook owner can see the usernames and email addresses of coaches who join it.
- Security and operation: sign-in session tokens, short-lived sign-in state, one-use shared-playbook code verifiers and encrypted unused codes, and limited request information needed to serve and protect the service. We use a hashed combination of an IP address and account/email information for sign-in rate limiting. Our hosting provider may process technical request details such as IP address, browser information, and timestamps to deliver and secure the site.
- On your device: the website temporarily stores an unsaved play draft in your browser session. The mobile app stores its session in secure device storage and may keep unsynced drafts on the device. Depending on your device settings, system backups may also include local app data. The service worker caches app icons and the manifest for installation.
Why we use it
To create and secure accounts, sync your work, let you print and organize plays, enable playbook sharing that you choose, recover access, prevent abuse, and respond to support and privacy requests. We do not use your plays to train an AI model or display them publicly.
Sharing and service providers
When you create a one-use access code and another coach redeems it, that coach can view, edit, add, and delete plays in the shared playbook. The owner can remove access. Our hosting and database services process data to run SnapLab. Resend processes the recipient email address and security-message content to deliver password-reset links and password-change notices. These messages do not subscribe you to marketing emails. We do not add tracking pixels to them; email-provider delivery records may follow its own retention schedule. Google or Apple receives information when you choose their sign-in flow; their own privacy terms apply. We do not currently load third-party embeds, ad pixels, or analytics scripts on SnapLab pages.
Retention and security
Saved plays and account details remain until you remove them or delete your account. Sign-in cookies expire after 30 days; the OAuth sign-in state cookie expires after 10 minutes. Expired sign-in and abuse-prevention records are pruned during later authentication activity. Signing out does not erase an unsynced local draft. Account deletion clears drafts in the current browser tab or mobile app; other open tabs, devices, and system backups may require separate clearing. Provider operational logs may follow separate retention schedules. We use encrypted connections, restricted access, and hashed credentials, but no online service can promise absolute security.
Your choices
You can edit your username and delete your account and saved content in Account settings. You can remove plays and formations individually, control shared-playbook access, and clear local browser or app storage from your device. For access, correction, deletion, or other privacy questions, contact us below. We may need to verify that a request concerns your account. Applicable state law may provide additional rights.
Children
SnapLab is intended for coaches and adult account holders, not for children under 13. Please do not create an account for a child under 13. If you believe a child’s information was submitted, contact us so we can review and remove it as appropriate.
Changes
We will update the effective date when this policy changes. If we add advertising, analytics, paid features, or new data uses, we will update this policy and any required choices before enabling them.
Questions or requests: Snaplabsupport@gmail.com. Include the email address associated with your account so we can verify your request. Do not send your password, password-reset link, or any legacy recovery code.