1. What Are Cookies
Cookies are small text files placed on your device when you visit a website. We also use similar technologies such as browser localStorage and (on our mobile builds) secure native storage. Together, these help us keep you signed in, remember your preferences, secure the Service, and understand how it is used.
First-party technologies are set by SnapToQuiz itself and are used only by us. Third-party technologies are set by other companies whose services we use (such as analytics or fonts); these third parties may receive your IP address and device information when they load.
2. Cookies & Technologies We Use
Essential (Always active)
Required for the Service to function. These are first-party and cannot be disabled while you use SnapToQuiz.
| Technology | Purpose | Duration |
|---|---|---|
| auth_token (localStorage) | Maintains your login session | 15 minutes |
| auth_refresh_token (localStorage) | Keeps you signed in across visits | 90 days |
| auth_user (localStorage) | Caches your account summary (id, email, tier, credits) for fast loading | Until logout |
| pq_visited_paths (sessionStorage) | De-duplicates repeated page-view tracking within the same browser tab | Browser tab |
| pq_last_visit_id (sessionStorage) | Stores the last page-visit ID for linking quiz attempts to visits | Browser tab |
| cc_consent (localStorage) | Remembers your cookie preferences. Set by the Zenixr CookieConsent script. | 6 months (180 days) |
Analytics (Requires your consent)
Help us understand how visitors use SnapToQuiz so we can improve the experience. These are only activated if you accept analytics in the cookie banner. PostHog also automatically suppresses itself if your browser sends a "Do Not Track" signal.
| Technology | Purpose | Provider / Region |
|---|---|---|
| PostHog (localStorage) | Product analytics, autocapture of clicks and pageviews, and session replay. Session replays capture the visible page including text content and form input. Once you are signed in, PostHog also receives your user id, email, and display name. | PostHog Inc. (USA) |
| Firebase Analytics | Event logging and screen tracking on native mobile builds. Once you are signed in, Firebase Analytics receives your user id, email, and subscription tier. | Google LLC (USA) |
| Page visit tracking | Pages visited, referrer, query parameters, device type and details, and a hashed (SHA-256) IP address. | SnapToQuiz (first-party, EU servers) |
3. The Cookie Banner and Your Choices
SnapToQuiz uses a cookie consent banner provided by Zenixr CookieConsent (loaded from cookieconsent.zenixr.com). The banner offers four standard categories:
- Essential — always on. Required for the Service to work; cannot be disabled.
- Analytics — optional. Enables PostHog and our first-party page-visit logging. SnapToQuiz does use analytics when you consent.
- Marketing — optional. The banner shows this category for completeness, but the SnapToQuiz website does not use any marketing or advertising cookies, so toggling it does not load anything. (Advertising appears only in the free tier of the mobile apps; see the Mobile App section below.)
- Functional — optional. Reserved for future preference features. SnapToQuiz does not currently use any functional cookies.
On the web, you can change your cookie preferences at any time by clicking the "Manage Cookie Preferences" button shown below this policy. You can also control cookies through your browser settings. In the mobile app, the cookie banner and "Manage Cookie Preferences" button do not apply — use the in-app menu → Privacy choices instead (see the Mobile App section below).
Note: Blocking essential technologies may prevent the Service from functioning properly.
4. Third-Party Services
When you accept analytics, data may be sent to the following third-party services:
- PostHog — product analytics and session replay. Data is processed in the United States. Privacy Policy
- Firebase Analytics (Google) — event logging and screen tracking on native mobile builds. Privacy Policy
The following third-party services are loaded as part of the normal operation of the Service, regardless of your analytics choice. They may receive your IP address and User-Agent when their resources are loaded:
- Zenixr CookieConsent — the cookie banner script (cookieconsent.zenixr.com). Receives your IP and country to determine which consent flow to show, and stores a record of your consent choices.
- Google Fonts — delivers the typefaces used on our website. Privacy Policy
- Stripe — payment processing on our checkout and billing-portal pages, when you subscribe or buy credits. Privacy Policy
- Firebase Authentication — verifies Google and Apple sign-in tokens when you sign in with those providers. Privacy Policy
No advertising on the web. This website does not use advertising cookies and we do not engage in cross-context behavioral advertising or "sale" of personal information (as defined by US state privacy laws) through the website. The SnapToQuiz iOS and Android apps display banner ads through Google AdMob on the free tier only — see the Mobile app section below and our Privacy Policy for details.
5. Mobile App — No Cookies, In-App Consent
The SnapToQuiz iOS and Android apps do not use HTTP cookies. Instead, they use secure on-device storage (Capacitor Preferences) to remember your login session and your privacy choices. The web cookie banner is not shown in the mobile app.
In-app Privacy choices. On first launch the mobile app shows a "Privacy choices" screen with separate toggles for Analytics and Personalized ads. You can reopen it at any time from the in-app menu → Privacy choices.
Analytics on mobile. If you grant analytics consent we enable Firebase Analytics and PostHog (configured in reduced mode: autocapture and session replay are disabled on native). If you decline, neither SDK transmits any data.
Ads on mobile. The free tier shows banner ads served by Google AdMob. AdMob may receive your advertising identifier (IDFA on iOS, Android Advertising ID on Android) subject to the OS-level controls below.
- iOS — after you grant consent we trigger Apple's App Tracking Transparency prompt. If you choose Ask App Not to Track, AdMob serves non-personalized ads and your IDFA is not shared. You can change this in Settings → Privacy & Security → Tracking → SnapToQuiz.
- EEA / UK / Switzerland — we also show Google's User Messaging Platform (UMP) consent form on first launch, letting you allow or deny specific ad partners under the IAB Transparency & Consent Framework. Your TCF choice is stored on-device.
- App-level personalized-ads toggle — if you turn off "Personalized ads" in our Privacy choices screen, we pass the non-personalized ads flag to AdMob regardless of ATT/UMP state, and you only see contextual ads.
- Android — manage or reset your Advertising ID from Settings → Google → Ads.
- Pro subscribers — no ads are shown.
6. Other Tracking Technologies
Beyond cookies and localStorage, websites can use other tracking technologies such as web beacons, tracking pixels, and Flash cookies. SnapToQuiz does not use web beacons, tracking pixels, or Flash cookies. Some of our analytics sub-processors (e.g., PostHog) may use similar technologies as part of their SDK; these are only activated if you consent to analytics.
7. Browser and Device Controls
Most browsers let you view, manage, block, or delete cookies and local storage through their settings. The exact steps depend on the browser you use:
Do Not Track. Some browsers offer a "Do Not Track" (DNT) signal. There is no industry-standard way to interpret DNT, so our first-party page-visit logging does not currently respond to it. However, our analytics provider PostHog is configured to respect DNT, which means PostHog and its session replay are automatically suppressed when your browser sends a DNT signal. You can manage all optional analytics through our cookie banner and the browser controls above.
8. Hosting & Data Location
SnapToQuiz is hosted on servers operated by Hetzner Online GmbH in the European Union. Any data stored via cookies, localStorage, or transmitted while you use the Service is processed on Hetzner infrastructure under EU GDPR safeguards. For more information, see:
9. Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes to the technologies we use or for legal, regulatory, or operational reasons. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to revisit this page periodically.
10. Contact
For questions about our use of cookies, contact us at [email protected].