Privacy policy
The short version
- We collect what Snug needs to work: your email, first name, settings and swipes.
- People you link with see your first name, your matches with them, suggestions you send them, and that you liked a title when it turns up in their deck. They never see your passes.
- We don't sell your data, show adverts or use advertising or analytics trackers.
- You can delete your account in the app at any time. You're unlinked straight away, and everything else is deleted for good after 30 days, unless you sign back in to keep it.
- Snug is for people aged 16 and over.
1. Who we are
Snug (the app at app.snug.watch and the website at snug.watch) is run by Parkell Ltd, a company registered in England and Wales (company number 17549468), registered office 86-90 Paul Street, London EC2A 4NE ("we", "us"). We are the controller of your personal data under the UK General Data Protection Regulation and the Data Protection Act 2018, and the EU GDPR where it applies.
Questions or requests about your data: hello@snug.watch.
2. What we collect
| What | Details |
|---|---|
| Account | Your email address, a password (stored only as a secure hash by our sign-in provider) and the first name you give us. |
| Settings | Your country, which streaming services you have, whether you want films, series or both, your hard no's (subtitles, languages, kids' and family, anime and animation, highest age rating), the takeaway cuisines you leave out and the delivery apps you use, your avatar colour and your alert choices. |
| Activity | Your swipes (like, pass, fave, seen it and what you thought), titles you follow for new episodes, your matches, titles pinned to Up next, suggestions you send or receive and any note you add, the words you type into a mood deck, your takeaway swipes, and your picks in Knock it out. |
| Swipe together | While you have Swipe together open, whether you're there right now (shown live to the person you're swiping with), the nudges you send and receive, and how many shared sessions you've used this week. |
| People you link with | Who you're linked with and whether they're a partner or friend. Linking only happens when one of you enters the other's invite code. |
| Alerts | If you turn on notifications, a push subscription address from your browser or phone so we can send them. It doesn't identify you on its own. |
| Your photo | If you add a profile photo, the photo itself. Only people you link with are shown it. |
| Error reports | When something goes wrong in the app, it sends us what broke: the error message, the screen you were on, your device type (iPhone, Android or web), the app version, your account id if you're signed in, and anything you choose to add in "Tell us what happened". We use these only to fix bugs. |
| Guests in a room | If someone invites you into their room without a Snug account, we keep only the first name you type and your swipes in that room (films and takeaways). They're deleted when the room ends, and within 12 hours at most. They're never added to anyone's account, taste or matches. Guests don't need an account, so a guest may be under 16, which is why we keep nothing else and delete it so quickly. |
| Invite requests (the waitlist) | If you request an invite (or joined the waitlist before), your email address, the page or link you came from, and the country your browser is set to. We may first send one email asking you to confirm it was you; if you don’t confirm, your address is deleted after 30 days. Otherwise we use it only to send you your invite (an early-access code) and to tell you when Snug opens to everyone, and delete it whenever you ask. |
| Account activity | A record of what happens with your account, so we can help when something goes wrong: when you sign up (and the early-access or invite code you used), confirm your email, sign in, change your password or hit a sign-in problem (such as a wrong password), the setup steps you finish, the kind of device and browser you use and whether Snug is on your home screen, your answer to the notifications prompt, when you link with someone or match, and emails we send you. It doesn’t include your passwords or anything you type. |
| Terms acceptance | When you agree to the Terms of use and this policy, the version and the time, so we can show you agreed. |
| Technical data | Our hosting providers keep short-lived logs of requests, such as IP address, browser or device type and time, to keep the service running and secure. |
We don't collect your location, contacts, payment details or anything from your streaming accounts. Snug never signs in to your streaming services.
3. How we use it, and why we're allowed to
| Use | Lawful basis |
|---|---|
| Running your account, building your deck, finding matches, Swipe together, mood decks and Up next | Contract: it's the service you signed up for |
| Letting a guest swipe in someone's room | Legitimate interests: helping a group decide what to watch, keeping only a first name and swipes for the length of the room |
| Emails about your account, such as confirming your address or resetting your password | Contract |
| Emailing people who request an invite | Consent, which you give by ticking the box when you join and can withdraw at any time by replying or emailing hello@snug.watch |
| Match, suggestion and new-episode notifications | Consent, which you give through your device's permission prompt and can withdraw in the app or your device settings |
| Keeping an account activity record, and sending one-off emails to help you get set up (for example, how to turn on alerts) | Legitimate interests: helping you when sign-in, setup or alerts don’t work, and making sure you don’t miss matches |
| Keeping Snug secure, preventing abuse and fixing problems | Legitimate interests |
| Keeping records we must keep by law | Legal obligation |
Your taste is worked out from your own swipes to rank your deck. It isn't used for advertising and isn't shared outside Snug. We don't make decisions about you that have legal or similarly significant effects.
4. Who can see what
- People you link with see your first name and colour, your matches with them, titles either of you pins to Up next, suggestions and notes you send them, and "liked by" on a title when it appears in their deck. They don't see your passes, your hard no's or your other settings.
- People in a room see the first name of everyone in it, who's in the takeaway deck, how many titles each person has swiped, and which titles won or came close. They don't see who liked what.
- The person you Swipe together with sees whether you're there right now, and any nudge you send them.
- Nobody else using Snug can see anything about you.
5. Services we use
We use a small number of providers who process data for us under contracts that require them to protect it and only use it on our instructions.
| Provider | What for | Data involved |
|---|---|---|
| Supabase | Database and sign-in | Everything in section 2 |
| Vercel | Hosting the app and website, and routing mood deck requests | Technical data; mood deck text |
| OpenAI, via Vercel AI Gateway | Choosing titles for a mood deck | The words you type, a list of candidate titles, a short summary of your taste (genres and themes you tend to like or skip), and the first names of anyone linked to you who liked one of those titles. Not your email, surname or account details. |
| Resend | Sending account emails | Email address, first name |
| Apple, Google and Mozilla push services | Delivering notifications | Push subscription address and the notification text |
Title information comes from TMDB and ratings from OMDb, and streaming availability comes from JustWatch through TMDB. We only send them title lookups, never personal data. Posters and artwork load straight from TMDB's image servers, so, as with any image on the web, TMDB sees your IP address and browser details when they load.
Ordering food. When you tap to order a takeaway, Snug opens Deliveroo, Uber Eats or Just Eat. We don't send them anything about you, and anything you do there is between you and them, under their own terms and privacy policy.
Trailers. Snug uses YouTube API Services to play trailers in YouTube's embedded player. The player only loads when you open a trailer. When it does, YouTube (Google) receives technical data such as your IP address, device and browser details, and what you watch in the player, and handles it as its own controller under the Google Privacy Policy. We don't send YouTube your name, email or anything about your Snug account. On the web we use YouTube's privacy-enhanced mode.
6. International transfers
Some providers store or process data outside the UK and European Economic Area, including in the United States. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses, as appropriate.
7. How long we keep it
- Your account data is kept while you have an account.
- When you delete your account, you're signed out and unlinked from everyone straight away, and your shared matches, suggestions and push subscriptions go with it. Your profile, photo, swipes, taste and alerts are kept for 30 days in case you change your mind, then deleted for good. Copies in our providers' backups are overwritten on a rolling basis.
- We keep a record that an account was deleted and when (an account id and dates, nothing else), so we can show we did it.
- Sign-ups that are never confirmed are deleted after 7 days.
- Swipe together rooms, with guests' names and every swipe in them, are deleted within minutes of the room ending, and after 12 hours at most.
- Your account activity record is deleted after 180 days, or with your account if that’s sooner.
- Error reports are deleted after 90 days. Usage counts for plan limits are deleted after 35 days.
- Hosting logs are kept for a short period set by each provider, normally no more than 30 days.
8. Your rights
You have the right to access your data, correct it, delete it, restrict or object to how we use it, and take a copy in a portable format. Where we rely on consent, you can withdraw it at any time.
You can change most things yourself in the app, and delete your account under Profile, Account, Delete account. For anything else, email hello@snug.watch. We'll reply within one month.
If you're unhappy with how we've handled your data, tell us first: email hello@snug.watch with "Complaint" in the subject. We'll acknowledge it within 30 days, look into it without delay and tell you what we've done.
You can also complain to the Information Commissioner's Office at ico.org.uk, or to your local data protection authority if you live in the EU.
9. Cookies and storage
- The app keeps you signed in by storing a session token on your device (browser storage or the app's own storage). This is strictly necessary for Snug to work.
- The website only sets a cookie,
snug_preview, if you open a private preview link we've shared, so you can see pages that aren't public yet. It contains no personal data. - We don't use advertising, analytics or social media cookies, so there's nothing to accept or reject.
- When you play a trailer, YouTube's player may store cookies or similar data on your device. That's YouTube's, under the Google Privacy Policy, and it only happens if you open a trailer.
10. Age
Snug is for people aged 16 and over. If you're under 16, please don't create an account. If we find an account belongs to someone under 16, we'll delete it.
11. Security
Data is encrypted in transit and at rest by our providers, access to the database is locked down so each person can only reach their own data, and passwords are never stored in readable form. No service is perfectly secure, so if something goes wrong that affects you, we'll tell you and the ICO where the law requires it.
12. Changes
If we make important changes to this policy we'll tell you in the app or by email before they take effect. The date at the top shows when it last changed.