Brainzie Snugstar is built so that there is almost nothing about you for us to hold. Your data, your analyses and your graphs live in your own Google Drive or OneDrive — never on a server we own. This policy explains the little we do process, why, and how you can check every word of it yourself.
The short version. Your projects — the values you type or paste, the tests you run, the graphs you draw — are saved straight from your browser to your own Google Drive or OneDrive. We can't see them, sell them, share them or lose them, because they never reach us. What we do process is tiny: usage counts filed under a pseudonym — a one-way, salted scramble of your verified email when you're signed in, a random identifier when you're not — the messages you send us, and — only once paid plans exist and only if you subscribe — your email and subscription status.
Brainzie Snugstar is operated by Brainzie Ltd ("we", "us"), a company registered in England & Wales (company number 16262756). We are the data controller for the limited personal data described below. You can reach us at privacy@brainzie.co.uk.
Snugstar runs entirely in your browser, on your device. The statistics are calculated there, the graphs are drawn there, and when you save, your project is written directly to a folder called Brainzie Snugstar in the Google Drive or OneDrive you connected (in OneDrive, inside Apps › Brainzie Snugstar, the folder Microsoft gives each app of its own). That storage is yours, and is governed by your agreement with Google or Microsoft.
We have no database and no file store for your projects — there is simply nowhere on our side for them to go. It also means we cannot retrieve your data, and we cannot recover it if you lose access to your own cloud account, so keep that account secure.
Most privacy policies ask you to trust them. Ours is built so you don't have to: every claim above is something you can verify in a few minutes, with tools you already have.
drive.file permission). Google itself stops Snugstar from opening any other file in your Drive — even if we wanted to, we couldn't.googleapis.com (Google Drive) or graph.microsoft.com (OneDrive). The only requests to our own address carry an action name and a number, such as {"event":"data_pasted","value":1} with your usage pseudonym, and, once per sign-in, the request that obtains that pseudonym (section 5) — never a value from your data.Files.ReadWrite.AppFolder permission) — Apps › Brainzie Snugstar in your OneDrive. Microsoft itself stops Snugstar from opening anything outside it, for personal and work or school accounts alike.Your projects may contain data about people — study participants, patients, volunteers. Because Snugstar never sends that data to us, we are neither its controller nor its processor: you (or your institution) remain the controller, and the storage provider you chose holds it under your agreement with them. Please make sure that keeping it in your Google Drive or OneDrive is allowed by your ethics approval, your participants' consent and your institution's data policies, and pseudonymise it where you can.
We want to know how many people use Snugstar and how much, so we can keep improving it. We do this without ever learning who anyone is:
These counts are stored in Cloudflare Workers Analytics Engine, which deletes them automatically after three months.
Signing in happens between you and Google or Microsoft: they give your browser permission to use your own storage, and your password never reaches us. The access they grant is held in your browser and used to talk to your own storage — and, once per sign-in, to let our server confirm your email for the pseudonym above, which is all it keeps.
Snugstar is free today. If we introduce paid plans and you subscribe, the app will ask our subscription service whether your account has a plan: it sends your sign-in token, which the service checks with Google or Microsoft to learn your verified email address. For subscribers we then store your email with your subscription status (active or lapsed, and the renewal date) in Cloudflare KV. Payments will be processed by Stripe, which handles your card details directly — we will never see or store them. For as long as you use only free features, no account record about you is kept — only the pseudonymous usage counts above.
If you use our contact form or email us, we receive what you send — your name, email address and message — and use it only to reply and to keep a record of the conversation. The contact form is protected by Cloudflare Turnstile, a privacy-friendly anti-spam check that does not track you across sites.
On this website (the pages you are reading now, not the app) we count visits with Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and collects no personal data: we see only anonymous, aggregate numbers such as page views, the site that referred a visit and the country it came from.
This website and the app are served by Cloudflare. As with any website, Cloudflare may transiently process technical request metadata (such as your IP address) to deliver the service and protect it from abuse.
We do not sell your data and never will. We rely on a small number of trusted providers purely to run the service: Google and Microsoft (sign-in and the storage you chose — under your own agreement with them), Cloudflare (hosting, the contact form, pseudonymous usage analytics and, once paid plans exist, subscription status) and, once paid plans exist, Stripe (payments). Some of these providers may process data outside the UK/EEA; where they do, appropriate safeguards (such as standard contractual clauses) apply.
Your projects are kept in your own cloud for as long as you choose — you can delete them there at any time, without asking us. Messages you send us are kept for as long as the conversation needs, and then for a reasonable record-keeping period. A subscription record is kept for as long as you subscribe, and afterwards only as long as our legal and accounting obligations require. Pseudonymous usage counts are deleted automatically after three months.
Under UK GDPR and equivalent laws you have the right to access, correct or delete the personal data we hold, to object to or restrict our processing, and to data portability. Because your projects live in your own cloud, you already control them directly — you can view, export or delete them without us. For the limited data we hold (your messages, a subscription record if you have one, and the usage counts filed under your pseudonym — tell us the email you sign in with and we can find them), contact privacy@brainzie.co.uk and we'll action your request. You also have the right to complain to the UK Information Commissioner's Office (ICO) or your local data protection authority.
Brainzie Snugstar is not intended for children under 16, and we do not knowingly collect their data.
We may update this policy from time to time. When we make material changes we'll update the date above and, where appropriate, let you know in the app. We will never change Snugstar so that your projects are sent to us without telling you first, here and in the app.