Privacy Policy

Snacked is a quiz-funnel SaaS operated by SOFTWARY S.R.L., an Italian limited liability company with registered office at Via Giovanni Porzio F11, 80143 Napoli (NA), Italy, VAT number IT10580571213. Contact: support@snacked.it.

For creators (you, the account holder): email, display name, public handle, payment customer id and invoice metadata from our payment partner, plan and subscription status, audit log of plan changes, support correspondence.

For respondents(people who take a creator's quiz): email, GDPR consent flag, archetype scoring and the answers chosen, anonymous session id, country derived from IP (we do not store full IPs in the leads table), user agent, optional UTM parameters set by the creator's share link.

For creator data, we are the data controller. For respondent (lead) data captured through a creator's quiz, the creator is the data controller and Snacked is the data processor — see the Data Processing Agreement (DPA) available on request via support@snacked.it.

Contract performance for the creator account; explicit consent for respondent lead capture (the GDPR consent checkbox at the email gate is mandatory and recorded). Legitimate interest for product analytics and abuse prevention.

Lead data captured by a creator is retained while the parent quiz is live. After a quiz is deleted, leads are kept for 30 days for recovery, then permanently erased by an automated daily job. Account deletion soft-deletes the account for 14 days, then permanently erases all user-owned data. Audit logs and billing records are retained for the period required by tax and accounting law (typically 10 years for invoices in Italy).

We rely on the following providers to operate the service. Each processes personal data only on our instructions and under a compliant data-processing agreement. We may add or change sub-processors over time; this section is updated when we do.

Access, rectification, erasure, restriction, portability, objection — write to support@snacked.it. Creators can export all their account data from /settings/account. Respondents who want their lead data removed should contact the creator whose quiz they completed (the creator is the data controller for that data); we will assist on request. We respond within 30 days.

We use strictly necessary cookies for authentication and session management. With your consent we may also use cookies for product analytics. EU/EEA/UK/CH visitors see a banner on first arrival; others can manage preferences in their browser. No third-party advertising or cross-site tracking cookies are set on our marketing surface. Per-quiz tracking pixels (Meta, GA4) are only fired when a creator has explicitly configured them for their quiz, in which case the creator's own privacy policy governs.

Some sub-processors are located outside the EU/EEA. Where this is the case, transfers are protected by Standard Contractual Clauses (SCCs) and adequacy decisions where applicable.

Material changes are posted here with the “Last updated” date refreshed. Substantive changes that affect how we process creator data trigger an email to active creators with at least 14 days notice before they take effect.