Privacy Policy

1. Who controls your information

SnoozStudios is responsible for the personal information described in this policy. Privacy questions can be sent to support@snoozstudios.com.

2. Information we use

Depending on how you use SnoozStudios, we may process your name, email address, password hash, account status, email-verification status, encrypted two-factor authentication secret, recovery-code hashes, billing-profile details, country and postal address, Stripe customer/payment references, orders, invoices, subscription status, licence entitlements, licence activations, stable server identifiers or fingerprints, download records, support tickets, API activity, security logs, IP addresses and audit logs.

SnoozStudios does not store raw card numbers or card security codes. Card payment data is handled by Stripe.

3. Why we use it

We process information to create and secure accounts; verify identity and 2FA; supply plugins and licensing services; process orders and subscriptions; prevent duplicate or fraudulent purchases; generate and validate licence keys; enforce activation limits; provide downloads and updates; operate billing, refunds and failed-payment holds; answer support tickets; protect the service from abuse; keep audit records; and comply with legal obligations.

4. Lawful bases

Depending on the activity, processing may be necessary to perform a contract with you, comply with a legal obligation, or pursue legitimate interests such as securing accounts, preventing fraud, protecting licensing systems and operating customer support. Where consent is legally required, SnoozStudios will ask for it separately.

5. Service providers

We use service providers where necessary to operate SnoozStudios. This includes Stripe for payment processing and billing, Namecheap/cPanel infrastructure for website hosting and email, and other providers we may identify when features are added. These providers process information according to their own service terms and data-protection obligations.

6. International processing

Some providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, SnoozStudios will rely on an available lawful transfer mechanism or provider safeguards.

7. Retention

We keep personal information only as long as reasonably necessary for the purpose collected, including account operation, contractual records, fraud/security prevention, support history and legal/accounting obligations. Transaction and tax-related records may need to be kept for legally required periods even after an account closes. Short-lived security records such as login-attempt and API-rate-limit data are periodically cleaned by automated maintenance.

8. Security

SnoozStudios uses password hashing, mandatory two-factor authentication for configured account flows, encrypted sensitive secrets, access-controlled dashboards, CSRF protection, server-side permission checks, audit logging, signed Stripe webhooks and private storage for paid plugin files. No online system can guarantee absolute security.

9. Your rights

Depending on applicable law, you may have rights to ask for access to your personal data, correction, deletion, restriction, objection or portability. Some information may need to be retained where required by law or necessary to establish, exercise or defend legal claims.

If you are in the UK and believe your data-protection rights have been infringed, you may also have the right to complain to the Information Commissioner’s Office.

10. Changes

We may update this policy when the service, providers or legal requirements change. The current version and effective date are shown above.