Who we are and what this policy is for.
SNACKS is a design studio based in Brooklyn, New York and Chicago, Illinois. This policy explains what we collect from you, why, and what you can do about it.
It applies to two things we run:
- This website, snacksdesign.com, including the contact form.
- Snacks Sites, our website platform for clients, at sites.snacks.design, including the sites it hosts on subdomains of sites.snacks.design and on clients' own domains.
- Snacks Brains, the internal tool our team uses to work with the material from client engagements, and the AI models we use in our studio work generally.
Client sites built with Snacks Sites belong to the client. If you visit one of them, the client is responsible for how your information is handled there, and their own privacy policy applies where they have one. Our other products have their own policies where they need them.
Only what we need to run the thing you're using.
On this website. We use Google Tag Manager and Google Analytics to see how the site is used: pages visited, rough location, device and browser, and how you got here. If you use the contact form, we receive what you type, including your name and email, so we can reply.
In Snacks Sites. When you create an account we collect your name and email address. If you sign in with Google, we also receive your Google profile picture. Our sign-in provider stores a record of your sessions and the devices you sign in from.
As you use the platform we store the content you and your team create: pages, text, images, site settings, team members and their roles, and the history of changes. If you connect a Figma file, we read the file you connect. If you subscribe to a paid plan, our payment provider collects your card details. We never see or store your full card number.
We also keep ordinary server logs (IP address, browser, time of request) and error reports, so we can keep the platform running and fix problems.
To build, run, and support what you asked for.
- To sign you in and keep your account secure.
- To build, publish, and host the sites you create.
- To bill you for a paid plan and send receipts.
- To reply when you contact us, and to help when something breaks.
- To understand how the website and the platform are used, so we can improve them.
- To meet legal obligations, and to protect SNACKS, our clients, and their visitors from abuse.
We don't sell your information, and we don't use it for advertising.
Frontier models, with your material handled on purpose.
We use frontier AI models in our design and engineering work: Anthropic's Claude, OpenAI's models, and Google's Gemini among them, to draft, analyze, write code, and research. Where client material is involved, these are the rules.
- We use these models through their business API and team plans, whose terms don't allow the provider to train on what we send.
- We send a model only what the task needs, and we review what comes back. A model drafts; a person on our team decides.
- Confidential engagement material, such as interview recordings, transcripts, and internal documents, is handled in Snacks Brains, described below, which keeps it on our own hardware.
- If you'd rather we not use AI models on your material at all, tell us at the start of a project and we'll work that way.
AI help inside Snacks Sites works the same way: the text or image you ask about goes to Anthropic or Google to produce the result, under those business terms, and the result is stored with your site content like any other edit.
Our engagement tool keeps client material on our own machines.
Snacks Brains is the internal knowledge tool our team uses on client engagements. It turns the raw material of a project, such as interview transcripts, meeting notes, documents you share with us, the Slack channels we work in together, and sometimes public app reviews, into findings, themes, and decision records that trace back to the exact sentence someone said. Only Snacks staff can sign in to it, with their Snacks Google accounts and an allowlist. We ask before we record an interview.
Three rules are enforced in its code, not just in policy:
- Raw material stays home. Transcripts, notes, and documents are read only by AI models running on Snacks-controlled hardware. They aren't sent to any outside AI provider.
- Scrubbed before it leaves. When a frontier model is used to turn findings into themes and briefs, the text first passes through a scrubber that replaces names, email addresses, phone numbers, and other identifiers with placeholder tokens. The map from token to name stays in our database, and real names are restored only inside the app.
- Every finding is traceable. Each one keeps a pointer to the exact passage it came from, so nothing is attributed to a person that they didn't say.
The material lives in a database operated by Snacks, with row-level access rules, and is kept for the length of our work together and as reference afterward. On request we delete an engagement's material in full. Snacks Brains also reads our own studio's books for Snacks' finance owners only; that's our data, not yours.
What we get from your Google account.
If you choose "Continue with Google" in Snacks Sites, Google shares your name, email address, and profile picture with us. We use them to create and sign you in to your account, and for nothing else. We don't request access to your Gmail, Drive, Calendar, or contacts.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can revoke our access at any time from your Google account permissions; you'll still be able to sign in with your email address.
A session cookie and analytics. That's it.
Snacks Sites sets a cookie so you stay signed in. It's required for the platform to work. This website and the platform's control panel use Google Analytics cookies to measure usage. We don't use advertising or cross-site tracking cookies.
You can block or clear cookies in your browser. If you block the sign-in cookie, you won't be able to use Snacks Sites while signed in.
See it, fix it, take it, or delete it.
You can ask us at any time to show you the personal information we hold about you, correct it, give you a copy, or delete it. Email hello@snacksdesign.com and we'll respond within 30 days. If you live somewhere with specific privacy rights, such as the European Union, the United Kingdom, or California, those rights apply and we'll honor them.
Your site content is yours. Snacks Sites can export a complete, standalone copy of a published site at any time, with no dependency on us.
If you close your Snacks Sites account, we delete your account information and content within 30 days, except for records we have to keep for tax or legal reasons, such as invoices.
Encrypted in transit, kept only as long as it's useful.
Everything travels over HTTPS. Access to the platform's data is limited to the SNACKS team members who need it, and sign-in to our tools requires verified accounts. Our providers are established services with their own security programs.
We keep analytics data in aggregate and server logs for a short period. Account information and content are kept for as long as your account is active, then deleted as described above. Backups roll off on their own schedule after that.
Snacks Sites is a tool for businesses and isn't directed at children. We don't knowingly collect information from anyone under 16.
Questions, requests, or something we got wrong.
Write to hello@snacksdesign.com. If we change this policy, we'll update the date at the top, and for anything significant we'll tell Snacks Sites account holders by email.