Privacy statement

1. Who we are

Snekkie (snekkie.com) is an app for finding local places to eat on Curaçao, Aruba and Bonaire. Snekkie belongs to Connective Group B.V., Jaartsveldstraat 13A, 7575 BP Oldenzaal, the Netherlands (Chamber of Commerce 97904872). We are responsible for your data in Snekkie, the "controller" under the GDPR.

2. What data

We only process what Snekkie needs:

• On every visit: your IP address and browser in our hosting's log files, and your IP address or account as a counter against abuse. In our own statistics we keep, per visit, the island, the page, where you came from and a code we calculate from your IP address and browser, but not your IP address itself.
• Search terms: what you search for, with island, language and time. Without account, device or IP address, so it cannot be traced back to you. Anything that looks like an email address or phone number is never stored.
• Device code: without an account, your browser makes a random code for Snekkie. We use it to remember your nicknames, emoji reactions and reports. For nicknames and nickname reports we also keep a one-way code calculated from your IP address (not the address itself), to spot duplicate votes. If you add a photo to a spot without an account, we keep a one-way code calculated from your device code with that photo, so you can have it erased later.
• What you post: reviews with the name you enter, photos, nicknames, tours, reports and feedback (with your email address if you like). Everyone can see reviews, photos and public tours. A nickname only becomes visible once 3 people use the same one, and never with who gave it.
• With an account: your name, email address, profile photo, language, your preferred island (so Snekkie opens on your island on a new device), saved spots, badges and invitations. If you sign in with Google, Google gives us your name, email address, profile photo and Google's sign-in codes.
• Location: only if you allow it in your browser, for the map, "nearby", Roulette and navigation. We do not store your location. During a live tour, anyone with the link sees the organiser's position; we erase it as soon as the tour stops.
• Tours: your RSVP (the name you enter and whether you are coming), stop suggestions and group photos. Reminders and notifications go by email and, if you allow it, as push notifications. Push is only available with an account.
• Businesses: for claiming and Featured, the owner's email address and the Stripe customer and subscription details. Your card details go straight to Stripe. We keep applications from transport partners to review them.

3. Why and on what basis

To provide the app you use (contract). For your location and push notifications we ask for consent first, which you can always withdraw. Statistics, preventing abuse and showing reviews, photos and nicknames publicly are based on legitimate interest. We also keep payments because the law requires it. We do not use your data for advertising and we do not sell anything.

4. Who we share with

Only with services that run Snekkie for us:

• Vercel: hosting, log files, photos and Vercel Analytics. The server functions run in the US.
• Neon: our database, in the EU.
• Hostnet (the Netherlands): all our email, via SMTP, and the mailbox info@snekkie.com.
• Google: the map, address search and place photos (Google Maps and Places), routes and signing in with Google.
• Stripe: payments from businesses.
• Upstash: the counters against abuse.
• Umami: usage statistics without cookies.
• Anthropic: translating a business's story.
• Your browser's push service (for example Google's or Apple's): delivering push notifications.

When data goes to the US, this is based on the EU Standard Contractual Clauses. What you post publicly, everyone can see; private tours and group photos only people with the link. We only give anything to authorities when the law requires it.

5. How long we keep data

As short as possible. A daily job erases data as soon as its term has passed:

• Visitor statistics: 13 months.
• Statistics for spot owners: 25 months.
• Search terms: 13 months.
• Feedback and handled reports: 1 year.
• In-app notifications: 90 days.
• Tour sessions with RSVPs, stop suggestions and group photos: 30 days after the session.
• Roulette tours without an account that never started: 30 days.
• Expired invitations: 30 days after expiry.
• Rejected transport partner applications: 180 days.
• Sign-in links: 1 day after expiry. You can stay signed in for 90 days; we erase an expired session after 7 days.
• Your account: until you delete it. Then we erase it right away; it stays in backups for at most 7 days. Your reviews (with their photos), owner replies and public tours stay, without your name.
• Reviews, photos, nicknames and tours: until you or we remove them. Counters against abuse: at most an hour. We do not keep the email address for the guide at all.
• Photos you upload in Add without an account that never end up at a spot: 7 days.

6. Cookies and local storage

No advertising cookies and no third-party cookies in the app. Our cookies keep you signed in, remember your language, remember for 7 days whose invitation you came through and count once that you created an account or spot (5 minutes). Your browser itself keeps, among other things, your island, your saved list, a draft tour and your device code. Vercel Analytics and Umami work without cookies. When you pay, Stripe sets its own cookies.

7. Your rights

You may access your data, have it corrected or deleted, restrict processing, object and take your data with you. With an account you do a lot yourself in Profile: download your data, delete a review or delete your account. Without an account, you erase what this device left behind in Profile. If you disagree with us, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Contact

Email your question or request, or write to Connective Group B.V., Jaartsveldstraat 13A, 7575 BP Oldenzaal, the Netherlands. We reply within a month.

9. Changes

If something important changes, you will see it in the app first, with the new date at the top.