Privacy policy

Last updated: May 3, 2026.

This policy explains how Snorklee processes data related to the snorklee.com site, customer accounts, billing, support and audience measurement performed for customer sites. It complements the terms, the DPA and the legal notice.

#Who is responsible?

For the snorklee.com site, account management, billing, support and the commercial relationship, Snorklee's publisher acts as controller.

For audience measurement performed on customer sites, the customer is generally the controller and Snorklee acts as processor, under the DPA. The customer remains responsible for visitor information, legal basis, other tools and the events it chooses to send to Snorklee.

#Account data

To create and manage an account, we process data such as name, email, company, country, language, declared sites, selected plan, invoices, payments, support messages, security logs and account preferences.

This data is used to:

• provide the service;
• secure the account;
• manage subscription and billing;
• respond to requests;
• send messages required for the service to operate;
• comply with our legal obligations.

Depending on the case, these processing operations are based on contract performance, legal obligations, our legitimate interest in securing and improving the service, or your consent where required.

#Audience data

When Snorklee measures a customer site, collected data is limited to what is needed to produce audience statistics: page path, referrer domain, traffic source, country or region depending on configuration, browser family, device type, operating system, language, authorised events, duration, scroll, technical errors and aggregate counters.

Custom events must remain technical or business-related. The customer must not send directly identifying data to Snorklee, such as names, email addresses, phone numbers, customer IDs, postal addresses or sensitive data.

The IP address and User-Agent may be used transiently at ingestion to geolocate, detect abuse, classify browser/device families or recognise some crawlers. They are not stored raw in analytics events.

Snorklee does not set analytics cookies, does not use advertising identifiers and does not track visitors across multiple sites.

#Optional connections

The customer may enable optional connections, for example Google Search Console or Bing Webmaster Tools. These connections are disabled by default, revocable, and used read-only to bring the customer's own search data into the dashboard.

When a customer enables a connection to a third-party service, use of that service may be subject to that third party's own terms and policies.

#Processors

The main providers used are: Clever Cloud for hosting, DB-IP / Eris Networks for the geolocation database, Mollie for payments, Brevo for transactional emails and Mistral AI for the documentation assistant (no audience data is sent to it).

Production audience data is hosted in the European Union.

If the customer enables Google Search Console or Bing Webmaster Tools, read-only requests may be sent to those services to retrieve the customer's own search data. This connection is optional, disabled by default and chosen by the customer.

The detailed list of processors, their roles and any related safeguards are described in the DPA or compliance documentation. This list may change with reasonable notice where the change is significant.

#Retention periods

Account data is kept for the duration of the contractual relationship, then archived for the time required to meet our legal obligations, including accounting and tax obligations.

Invoices and accounting records are kept for the applicable legal period.

Raw audience data is kept for 90 days, unless a different configuration or obligation is stated in the DPA. Analytics aggregates are kept for up to 25 months. After termination, site data may be kept for 30 days to allow recovery, then deleted under the applicable procedures.

Support messages are kept for the time needed to handle the request, then archived where needed for follow-up and evidence.

#Security

Snorklee implements technical and organisational measures intended to protect data: EU hosting, access controls, security logging, encrypted communications, environment separation and limitation of internal access on a need-to-know basis.

#Your rights

You may request access, rectification, erasure, restriction, objection or portability where these rights apply. You can write to dpo@snorklee.com or contact@snorklee.com.

For data about an end visitor collected on a customer site, contact the publisher of that site first. Snorklee then assists the publisher if the request concerns processing performed by Snorklee on its behalf.

You may lodge a complaint with the CNIL if you believe your rights have not been respected.

#Opt out of audience measurement

Our own site measures its audience without analytics cookies and without advertising identifiers. You may object to this measurement on this browser at any time.

When a Do Not Track or Global Privacy Control signal is detected, Snorklee automatically ignores audience measurement for that browser.

This choice applies to this browser. It does not add any advertising or profiling cookie.

#Cookies

The public Snorklee site does not set audience-measurement, advertising or profiling cookies. After signing in to the dashboard, a strictly necessary session cookie may be used to maintain the user session.