Privacy Policy

• Account Data: Email, name, password, profile photo (if uploading a profile image).
• Usage Data: IP address, browser type, device data, activity logs, and site usage patterns.
• Uploads: Photos, dive logs, ratings, and any content you choose to upload/enter.
• Support Data: If you contact us through the support page, we keep your request: your name and email address, what you write, our replies, and any rating you leave. See “Support Requests” below.
• Cookies: For essential site functions, authentication, analytics, and feedback tools. See details below.
• Data from Third Parties: If you connect a third-party account (like Google), we may receive your name, email, and profile image from them. We do not collect information about you from other sources unless you provide it or authorize it.
• Consequences of Withholding Data: If you choose not to provide necessary information, you may not be able to create an account or use certain features of ScubaSnap.

• What we keep: The name and email address you give us (or, if you are signed in with a verified account, your account’s name and email), the category, subject and message, your replies and our answers, the status of your request, and a rating from 1 to 5 stars with an optional comment if you choose to leave one. Support requests do not take attachments.
• Your private link: After you send a request you get a private link to follow it, and the emails we send about it contain a private link as well. In our database we store only a one-way code of each link, not the link itself. Anyone who has the link can read and answer your request, so keep it to yourself. A link stops working after a while or when we withdraw it, and you can ask for a new one.
• Emails about your request: We email the address on your request to confirm it and to tell you when there is an update. These emails contain a private link, not the text of our answers.
• Who can see it: Only ScubaSnap staff with admin access, and the hosting and email services that store and deliver our messages (see “When We Share Your Data”). Your rating and our internal notes are visible to staff only. We do not use support requests for advertising.
• Protection against spam and abuse: We limit how often requests can be sent, using a coded (hashed) form of your IP address that we delete after about two days, and we run other automatic spam checks. Our server also keeps a log of the emails it sends: the type of email, a shortened code of the email address, an IP address, and whether the mail server accepted the email.
• Cookies and tracking: The form for a new support request is a normal page of ScubaSnap (see “Cookies & Tracking”). The page that shows your new private link, and the pages you open with a private link, use only the essential session cookie, load no analytics, advertising or consent scripts, and do not pass the address of the page on to other websites.
• How long we keep it: For as long as needed to answer you and to handle follow-up questions, and until you ask us to delete it. Deleting your account also deletes the support requests linked to it.
• Your choices: You can ask us for a copy of your support requests, or ask us to delete them, through the support page. For requests written without an account we look them up by the email address you used.

• To operate and improve ScubaSnap’s features and services.
• To keep your account secure and verify your identity.
• To communicate important updates, responses, or service-related info.
• To answer your support requests.
• To personalize your ScubaSnap experience.
• To analyze site usage and prevent abuse or fraud.
• To comply with legal obligations.
• Legal Basis for Processing: We process your data based on one or more of the following grounds:
  • Your consent (e.g., when you register or agree to cookies);
  • To fulfill our contract with you (to provide our services);
  • For our legitimate interests (such as improving the service, preventing fraud, or securing the website);
  • To comply with legal obligations.

• We retain your data as long as your account is active or as needed for legal/regulatory reasons.
• Support requests are kept for as long as needed to answer you and to handle follow-up questions, and until you ask us to delete them. Deleting your account also deletes the support requests linked to it.
• You may delete your account at any time. Upon deletion, your personal data is erased from our active systems, except where retention is legally required (e.g., for dispute resolution or compliance).
• Some information (such as logs and backup copies) may remain in secure archives for a limited time to ensure integrity and compliance with our backup policy, but will not be used for other purposes and is deleted on a rolling basis.

• All data is stored securely in EU-based data centers.
• We use STRATO for hosting and file storage, with encryption and strict access controls.
• We regularly review our security measures and monitor for threats.

• We do not sell your data. We only share your info with:
  • Trusted partners who help us run ScubaSnap (e.g. STRATO for hosting, Google Analytics for site stats, Mailgun or similar for transactional email, error monitoring services, backup storage, and analytics partners as needed).
  • Our internal team for answering support requests, technical support and abuse prevention.
  • Legal authorities, only if required by law.
• All third-party providers must follow strict privacy and security rules and act only on our instructions.

ScubaSnap is not intended for children under 16. We do not knowingly collect info from children. If we find such an account, we will delete it immediately.

If you use ScubaSnap from outside the EU, your data may be transferred and processed in the EU. All transfers use appropriate safeguards to protect your data.

ScubaSnap does not use your personal data for automated decision-making or profiling.

• Access: Request a copy of your personal data at any time.
• Update: Edit your profile info at any time.
• Delete: Delete your account to erase your data (right to be forgotten).
• Restrict/Withdraw Consent: Limit or withdraw your consent for data processing.
• Portability: Ask for your data in a portable format.
• Object: You may object to certain types of processing of your data (such as direct marketing, if used).
• Complain: You have the right to lodge a complaint with your local data protection authority (Autoriteit Persoonsgegevens in the Netherlands).
• Contact us through the support page to exercise any of these rights, including to ask for a copy of your support requests or to have them deleted.

• We use essential cookies for login and site functions. Refusing cookies may disable key features of ScubaSnap.
• We use Google Analytics to help improve the site, but these do not personally identify you.
• For details on how to manage cookies, see your browser’s help section.

• Some browsers offer a “Do Not Track” feature. ScubaSnap does not respond to Do Not Track signals, as there is currently no industry standard for compliance.
• If you are a California resident, you have the right to request information regarding the disclosure of your personal data to third parties for direct marketing purposes. ScubaSnap does not share personal data with third parties for their own direct marketing.

• We use industry-standard measures to keep your data safe: encryption, monitoring, secure backups, and more.
• If a data breach occurs that affects your personal data, we will notify you as soon as possible and take necessary action.

We may update this Privacy Policy as our services change. Any changes will be posted here and take effect when published. Please check back regularly.

This Privacy Policy and any related disputes are governed by the laws of the Netherlands. You agree to the exclusive jurisdiction of the Dutch courts unless otherwise required by law.

For questions, concerns, or to exercise your rights, please send us a support request. We're happy to help!

Contact support