Privacy policy

The short version

• You can post without giving us your name or email.
• Your stories are stored apart from your account, linked only by a random reference. Our moderators see the reference, never your email.
• We don't sell data, show ads, or use tracking or analytics cookies.
• Anonymity has limits: if a Singapore court or authority lawfully orders us to, we may have to hand over what we hold. Leave out details that could identify you.

What we collect

• An anonymous account. On your first visit we create a random account ID, kept in your browser. We don't ask who you are.
• Your email, if you register. Registering is optional. It lets you keep, edit and delete your posts and report others' posts. Your email is held by our sign-in system, separately from what you post.
• What you post. Stories, ratings, the company, and optional details such as department and seniority, plus edits and reports you make.
• Removal requests. If you ask us to remove a story, we keep the story link, your reason and the contact details you give us so we can reply.
• Technical data. To stop spam and abuse we use your IP address briefly for rate limits; we store only a scrambled (hashed) form and delete it within a day. Cloudflare Turnstile checks that you're a person using signals from your browser. Our hosting providers keep standard access logs for a short time. Our own logs never include your account, IP address or what you wrote.
• Drafts of unfinished stories are saved only on your device, not on our servers.

How we use it

• To run SNUB: publish stories, show company ratings and let you manage your posts.
• To keep it safe: every story is checked automatically for threats and personal details such as phone numbers and addresses before it goes live, and flagged stories wait for a person to review. No story text is sent to outside AI services.
• To handle reports, removal requests and appeals, and to apply strikes and bans.
• To meet legal obligations and respond to lawful requests.

Who we share it with

Only the providers that run SNUB for us, under their own data protection terms:

• Supabase: database and sign-in, hosted in Singapore.
• Fly.io: our API, hosted in Singapore.
• Vercel: the website.
• Cloudflare: domain, security and bot checks.
• Resend: sign-in and registration emails.

Some of these providers may process data outside Singapore. We may also disclose information when the law requires it, for example under a court order. If you registered, that could include the email linked to your account.

How long we keep it

• Stories and ratings stay until you delete them or we remove them.
• Deleting a story hides it from everyone straight away. We keep a record of it for moderation and legal reasons; email us to have it erased completely.
• Contact details in removal requests are deleted 90 days after we've handled the request.
• Rate-limit records are deleted within a day.

Your choices and rights

Under the PDPA you can ask what personal data we hold about you, ask us to correct it, and withdraw your consent, which may mean deleting your account. Registered users can edit and delete their own posts from their account page. For anything else, email legal@snub.fyi from the address you registered with. We aim to reply within 30 days.

If a story is about you, use our removal request form. You don't need an account.

Cookies and storage

We store your sign-in session and any drafts in your browser's storage so SNUB works. We don't use advertising, tracking or analytics cookies. Cloudflare Turnstile may set its own cookies for bot checks. Clearing your browser data signs out an unregistered session, and its posts can no longer be edited.

Age

SNUB is for people aged 18 and over.

Changes and contact

If we change this policy we'll update the date above, and tell registered users by email about anything significant. Questions or requests, including for our data protection officer: legal@snub.fyi.