Privacy Policy

Effective date: October 12, 2026 · Zero-Knowledge Privacy Pledge

At SnipFerry (accessible from snipferry.com), the privacy of our visitors and users is of paramount importance. This Privacy Policy outlines what information is collected, how it is handled, and our foundational zero-knowledge privacy architecture.

1. 100% Client-Side Processing for Utility Tools

All transformation, formatting, minification, and conversion tools (including our JSON suite, Word Counter, Base64 encoder/decoder, Hash generator, and Regex tester) execute 100% locally inside your web browser using client-side JavaScript and native Web APIs.

Your inputs, formatted outputs, and raw data are never transmitted over the network or logged on our servers for these tools.

2. Zero-Knowledge Live Text Sharing

When you create a shared text room on SnipFerry:

  • Client-Side Encryption (AES-GCM-256): When End-to-End Encryption is active, text is encrypted before transmission. The decryption key is contained strictly in the URL hash fragment (#key=...). Because URL fragments are never sent to web servers in HTTP requests, SnipFerry servers only store and transmit ciphertext. We cannot read your plaintext even if requested.
  • Automatic Room Expiry: All temporary rooms automatically self-destruct upon reaching their expiry limit (1 hour, 24 hours, or 7 days) and are purged from memory and storage disks permanently.
  • Burn After Reading: When enabled, a room permanently erases itself immediately after being opened once.

3. Account Data

To prevent abuse, we keep temporary network-based room counters in server memory. Guest room ownership uses a hash of the network address. On Cloudflare, temporary quota counters and hashed ownership are kept in Durable Object storage so limits survive runtime restarts; expired entries are removed. Raw network addresses are not saved with room records. Signed-in room limits use your account ID. These counters do not track browser tool actions, and encryption keys are never sent to us.

When you register for an optional SnipFerry account:

  • We collect your email address and a one-way password hash (derived using scrypt with a random cryptographically secure salt). We never store plaintext passwords.
  • To limit repeated registration and sign-in attempts, we store temporary counters keyed by hashes of network addresses and normalized account identifiers. These counters expire and are automatically removed.
  • Account data is used exclusively to authenticate your session, sync your saved snippets, pinned tools and room history.
  • We never sell, rent, or trade your email address or personal data to third parties.

4. Cookies and Local Storage

We use standard HTML5 LocalStorage and cookies for essential functionality only:

  • texthop-theme: Stores your light/dark mode preference.
  • __Host-texthop_session (or texthop_session during local development): An HttpOnly login cookie that expires after seven days. Session tokens are not kept in LocalStorage.
  • texthop-local-rooms: Stores your recent rooms locally on your device without transmitting them to our servers.

5. Third-Party Advertising

We may display non-intrusive banner sponsorships or Google AdSense advertisements outside the main workspace. Third-party vendors, including Google, use cookies to serve ads based on prior visits. Users may opt out of personalized advertising by visiting Google Ads Settings.

6. Contact Us

If you have any questions about this Privacy Policy, please reach out via our Contact Page or write to privacy@snipferry.com.