Privacy Policy.

Last updated: June 10, 2026. Effective: June 10, 2026.

Short version: Hosted Snap runs entirely in your browser. The photos you upload to make a before-and-after image never leave your device — they are not uploaded to our servers. The only data we ever collect is your email address, and only if you choose to submit it through a form on this site (newsletter, contact form, etc.). We don’t sell anything we collect, we don’t use it for advertising, and we don’t train AI models on it.

1. Who we are

Hosted Brands LLC ("Hosted Brands," "we," "us") operates Hosted Snap at hostedsnap.com.

Contact: [email protected]

2. The big thing: your photos stay on your device

The before-and-after photo tool is implemented as client-side JavaScript. When you drop two photos into the tool, the browser composites them locally using HTML5 Canvas and then offers you the result as a download. No photo is ever transmitted to a Hosted Snap server. We do not store, log, or analyze any photo you load into the tool.

This means: you can use Hosted Snap on job-site photos that include customer property, license plates, addresses, or anything else sensitive, and that imagery does not leave your device through our service. (Standard caveat: the platform you eventually post the finished image to — Facebook, Instagram, your website — has its own data practices. That’s out of our hands.)

3. What we actually collect

  • Email address (only if you submit one). If you submit the contact form or any future newsletter form, we store the email address you typed (plus the message, if there is one) so we can reply or send the newsletter you signed up for. Stored in our Postgres database on Railway.
  • Server logs. Standard request logs — IP address, user agent, request path, timestamp. Retained 30 days for debugging and abuse prevention. Logs do not contain your photos because your photos never reach the server.
  • Cookies. A first-party session cookie if (later) you create an account. No third-party advertising cookies. No tracking pixels.

4. What we do not collect

  • Your photos. Repeated for emphasis: photos uploaded to the editor are processed in your browser and never transmitted to us.
  • OAuth tokens or social-platform data. Hosted Snap does not connect to Google, Facebook, Instagram, or any other platform on your behalf. There is no “Sign in with Google” flow here.
  • Behavioral tracking. No third-party analytics SDKs that profile users across the web. We may run privacy-respecting first-party page-view counters in the future, but they will not contain personal identifiers.
  • Payment data. Hosted Snap is free. There is no billing flow, no card collection, no payment processor.

5. How we use the email addresses we do collect

If you submit your email through the contact form or a future newsletter form on this site, we use it only to:

  • Reply to your message (if you sent the contact form).
  • Send the newsletter you signed up for (if you signed up for one).
  • Occasionally let you know about new Hosted Brands tools we think are relevant to local service businesses.

We never sell, rent, or trade email addresses. We never use Hosted Snap email submissions for advertising to you on third-party platforms.

6. Third-party processors

We use the minimum vendors required to run the site:

  • Railway — hosts the web server and Postgres database where any submitted email addresses live.
  • Cloudinary — serves static images for the site itself (e.g., the logo). Does not receive your uploaded photos.
  • Beehiiv (if/when newsletter ships) — manages newsletter subscriber lists. We will update this section before any newsletter goes live.

None of these vendors are permitted to use your data for any purpose other than providing infrastructure to Hosted Snap.

7. Your rights

  • Access: Email [email protected] with the subject "data access" — we’ll provide a copy of any data we hold on you within 30 days. (Most users: we will literally have one row containing your email address and one message.)
  • Deletion: Email "delete my data" to the same address — we will remove your record within 30 days.
  • Correction: Same email, same window.
  • GDPR / CCPA: EU/UK/California residents have access, correction, deletion, and portability rights — same email, same 30-day window.

8. Data retention

  • Submitted emails / messages: Retained until you ask us to delete them, or until the underlying purpose is complete (e.g., we replied to your contact-form message and a reasonable follow-up window has passed).
  • Server logs: 30 days.

9. Security

TLS for all traffic. Database access restricted to application servers. Passwords (if account flow is added later) will be hashed with bcrypt. We are a small, dogfooded product; we are not SOC 2 certified and we are transparent about that.

10. Children

Hosted Snap is for business owners and their authorized employees. We do not knowingly collect data from anyone under 18.

11. International users

Hosted Snap is operated from the United States. By using the service you consent to the transfer of any submitted data to the US. (And again: your photos do not transfer anywhere — they stay on your device.)

12. Changes to this policy

If we ever change Hosted Snap to do something materially different with your data — say, start storing photos server-side, or add a paid tier with payment data — we will update this policy and announce the change on the homepage at least 14 days before it takes effect. The "last updated" date at the top of this page is always current.

13. Contact

For any privacy or data question: [email protected].

Mailing address: Hosted Brands LLC, Grand Rapids, Michigan, USA.