Privacy policy

Who is responsible

The data controller is OBSB SRL, a company under Belgian law (contact and address on our Legal notice). You can reach us about your data via our Contact page.

What we process

Not your Memories. The app opens your Snapchat export on your own device, so your media and its metadata are never transmitted to us and we hold no copy of them at any point. If you buy the one-time unlock, our payment provider processes your payment details — we never see or store your card number.

Basic technical logs needed to run the service. Aggregate audience statistics via Umami, which we host ourselves: it sets no cookies, stores no identifier, and never builds a profile of you. Google Analytics, which does use cookies, runs only if you accept the banner.

The deletion-alert list

If you ask to be told when Snapchat starts deleting Memories, we store your email address, the language you were reading in, the page you signed up from, and the date. The page is there to tell us which articles are useful; it identifies an article, not you.

The legal basis is your consent, and the promise on the form is the limit of what the address is used for: we write when something official changes and on the day deletions are confirmed. It is not a newsletter, it is never used for advertising, and it is never shared or sold. Every email carries a one-click unsubscribe link that works forever — no account, no login, no reply needed. We keep the record until you unsubscribe, and we delete the whole list once the deletion window has passed and the alert no longer has a subject.

Why, and on what legal basis

We process your export to provide the service you asked for (performance of a contract / your request). Cookie-based analytics run only with your consent, which you can withdraw at any time. Our cookieless statistics rely on our legitimate interest in knowing whether the site works, and involve no personal data. We rely on data minimisation and limited retention by design.

Encryption

Your media isn't transmitted at all, so there is no transfer to protect. The site itself is served over HTTPS, and the little we do store — your email address, if you asked for the alert — sits on European infrastructure.

How long we keep it

There is nothing of your archive to keep: it stays on your device. Technical logs are kept only as long as running the service requires. What we do hold — the alert list — is covered in its own section above.

Who else is involved

Hosting: OVH SAS (European infrastructure). Statistics: Umami, self-hosted on our own European server — no data leaves to a third party. Google Analytics, loaded only after your consent. Payments: a secure payment provider. Alert emails: Resend (email delivery), which receives only the addresses on that list. We do not sell or share your data, and it is never used for advertising or AI training.

Your rights

Under the GDPR you can access, correct, delete, or export your data, object to processing, and withdraw consent — at any time. Since no account is required to look, we hold as little about you as possible. Contact us and a person will handle it.

Cookies

We set no analytics cookies unless you accept them. Our self-hosted Umami statistics set no cookie at all, which is why they need no banner. The consent banner remembers your choice, which you can change at any time. Essential technical storage needed to run the site may still be used.

Complaints

If you believe we've mishandled your data, you can lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données, autoriteprotectiondonnees.be) — but we'd rather you tell us first.