Snap! Privacy Policy

Your privacy and safety online are very important to us. To protect your privacy, we limit what we collect and what we publish on the website. Although, as a nonprofit educational institution, we are technically exempt from the United States Children's Online Privacy Protection Act (COPPA), we are voluntarily following its rules about data collection from children under 13. This policy also conforms to the European Union General Data Protection Regulation (GDPR), which restricts data collection from children under 16. We apply these protection policies to all users, wherever located, so 16 is our cutoff age for parental notification.

We follow industry standards to maintain the security of our web server. However, we cannot absolutely guarantee that malicious third parties will be unable to break into our database. This privacy policy explains how our authorized staff and contractors will use your information. Our servers are located in the United States of America.

Information We Collect

Using our software

You can program in Snap! without providing us with any personally identifiable information at all. We do not record any information about the programs you write unless you choose to save projects on our cloud server. (You can instead save projects only on your own computer). You can also, without providing any information, download our example projects, libraries, and other public media.

Creating a Snap! account

If you wish to save the projects you create on our cloud server, then you must create an account on this site so that your storage is separate from other people's storage. When you create an account, we collect your email address or, if you are under 13, your parent's or guardian's email address. We use your address for five purposes:

We do not use your address for any other purpose. You will never receive marketing emails of any kind through this site, neither from us nor from third parties.

We do not share your address with anyone else, except for companies contracted with us to provide services to us. Any such companies agree to obey this privacy policy. The only exception is that we might be compelled by legal subpoena to provide information to police agencies or courts.

We ask for your month and year of birth when you sign up in order to decide whether to ask for your own email address or your parent's email address. But this partial birthdate information is never sent to our server; it is used only on your computer during the signup dialog.

Information in your projects

You can save projects on our server for your personal use, or you can explicitly choose to share a project with the other users of this site.

We will never examine projects that you save privately on our site without your explicit permission (for example, if you report a bug that affects one of your projects). Again, the only exception is that we might be compelled to provide information to government agencies.

Projects that you choose to share are available for anyone to examine. We may examine shared projects for research purposes. We urge you strongly not to include personally identifying information (PII) in your shared projects! For example, if you post a project that says "today is my birthday" you are telling the entire world your date of birth, which is a very important piece of personally identifying information.

There are two levels of public access to your project. If you share a project, we provide you with a URL that can be used by anyone to whom you send that URL. Anyone who knows your username and the name of the project can compute the URL; however, people in general won't even know that the project exists until you tell them. But if you publish a project, it appears on our web site, searchable by username and by project name. Anyone, even someone who does not have an account with us, can see the project, including its code as well as its behavior when run.

Our users enjoy sharing their projects with other users, and we encourage you to publish projects that don't include personally identifiable information. Your email address (or your parent's), the only piece of PII we knowingly associate with your account, is never visible to people outside our staff. But we can't control PII that you include in a project.

If we are notified by a third party that your shared project includes their copyrighted content (such as a musical performance), we are required by law to investigate, and may revoke the shared status of that project.

Communications that you initiate

If you contact us by email, we save your email address and whatever other information you include in your message long enough to respond to you, which might take some time if your message is a bug report. We then delete your email.

Server logging

This site is hosted at the University of California, Berkeley, Electrical Engineering and Computer Sciences Department. This web server collects the following information: Internet Protocol (IP) address of computer being used; web pages requested; referring web page; browser used; date and time; and statistics identifying particular IP addresses from which our websites are accessed. We do not associate this data to individual user identities.

This information is used to improve the technical quality of the site, and may be used for investigation of deliberate attempts to deny the use of our site to others. We do not log personally identifiable information, except that your IP address may indicate your Internet service provider and your general geographic area.

The server for cloud storage of user accounts is maintained by us on a commercial cloud computing provider and follows the same privacy guidelines.

Google Analytics

Like many other web sites, we use Google Analytics to collect statistical information about how our site is used. We get only general statistical information from Google Analytics, not personally identifiable information. However, if you have ever used other Google services, then Google knows who you are. We have no control over their use of information; see Google's privacy policy for more information.

We recommend that you use AdBlock Plus, Ghostery, NoScript, and/or Privoxy to protect your browsing privacy. The first two are really easy to install and use; the last two take a bit more effort to whitelist sites you trust. (You might also consider the tracking-free DuckDuckGo search engine). We have no connection with any of those services.

How to remove your information

If you delete your account on our site, we will delete all the information associated with that account, including your email and your saved projects. However, we routinely save your information for 30 days after your deletion request, in case it was made in error, so that you can ask us to recover the account.

Under the GDPR, you (or your parent if you are under 16) have the right to ask us to delete your account instantly, and we will honor such requests as soon as you click the link in an email we'll send to your registered email address to verify that it's really you making the request.

If you are the parent of a child with an account on this site and would like us to remove the account, please contact us, and include in your message your child's account name, the email address associated with the account, and a way to contact you offline (to prevent forgeries).

For further questions

Contact

You can contact the development team at:

contact@snap.berkeley.edu

For bugs and suggestions related to either Snap!, or its community website, please refer to the Snap! forum.