Privacy Policy

Personal Information

When you create an account or place an order, we collect:

• Name and email address
• Billing and shipping addresses
• Phone number (optional — used for order updates and, if you opt in, text messages)
• Payment information (processed securely through third-party providers — we never store full card numbers)

Team and Organization Information

If you create or join a team, league, school or club through Snapshot, we also collect:

• Team, organization and roster details, including player names and jersey numbers
• The contact details a coach or organizer provides for players and parents
• Which roster spots have been filled, paid for, or are still outstanding

If you are a coach or organizer, you are responsible for having permission to share the information you enter about other people — see Children's Privacy below.

Content You Upload

We collect and process:

• Photos and images you upload for card creation
• Text and information you add to your cards
• Design choices and customizations

Technical Information

We automatically collect:

• IP address and device information
• Browser type and version
• Usage data and analytics
• Cookies and similar tracking technologies

Communication Records

When you contact us, we may collect:

• Email correspondence
• Support ticket information
• Chat logs and communication records

We use your information to:

• Process and fulfill your orders
• Create and customize your sports cards
• Manage your account and provide customer support
• Process payments and prevent fraud
• Send order confirmations and shipping notifications
• Send text messages about your order, if you have opted in (see Text Messages below)
• Improve our services and user experience
• Send marketing communications (with your consent)
• Comply with legal obligations

We do not sell your personal information for money, and we never sell or share the photos you upload. We do not use those photos to train artificial intelligence models — see AI-Assisted Card Generation below.

We do share limited information — such as advertising cookie identifiers and, after an order, a scrambled (hashed) version of your email address — with advertising platforms so we can tell which ads led to a sale. Several US state privacy laws classify that as a “sale” or “share” of personal information even though no money changes hands, so we treat it that way. You can turn it off at any time, and we will not charge you a different price or give you a worse service for doing so: Your Privacy Choices.

We may share your information with:

Service Providers

• Payment processors (Stripe)
• Printing and fulfillment partners
• Shipping carriers (USPS, UPS, FedEx)
• Cloud storage and hosting providers
• Analytics and marketing platforms

Legal Requirements

We may disclose information when required to:

• Comply with legal obligations or court orders
• Respond to government requests
• Protect our rights and property
• Ensure user safety and security

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

We implement comprehensive security measures including:

• Industry-standard encryption for data transmission and storage
• Secure servers and databases with access controls
• Regular security audits and monitoring
• Employee training on data protection practices
• Multi-factor authentication for administrative access

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to protect your information.

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Process orders and handle customer support
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements

You may request deletion of your account and associated data, subject to legal retention requirements.

Account Access and Control

• Access and update your account information
• Download your data and order history
• Delete your uploaded images and content
• Close your account (subject to legal requirements)

Marketing Communications

You can:

• Opt out of marketing emails at any time
• Unsubscribe using links in our emails
• Contact us to update your communication preferences

Cookies and Tracking

Your Privacy Choices lets you switch analytics and advertising cookies on or off at any time. The link is in the footer of every page. Necessary cookies — the ones that keep you signed in, hold your cart and save your cards — cannot be turned off, because the site cannot work without them.

If you are in the EU, EEA, UK, Switzerland or Brazil, nothing outside that necessary set loads until you agree to it. Elsewhere, analytics and advertising cookies are on by default and the link above turns them off.

We also honor the Global Privacy Control signal. If your browser or extension sends GPC, we treat it as an instruction not to share your information for advertising, automatically and without you having to tell us separately.

Most Snapshot templates are composited entirely by us from the photo you upload. A limited number of templates use artificial intelligence to generate artwork around your photo. These templates are labelled with an “AI” badge in the card builder before you select them, so choosing one is always a deliberate choice.

When you use an AI template:

• Your uploaded photo and the card details you entered are sent to our AI processing provider (fal.ai) to generate the artwork
• The generated image is returned to us and stored with your card so you can review, edit, reprint or reorder it
• We do not use your photos to train AI models, and we do not permit our AI provider to do so
• We do not use uploaded photos for facial recognition or biometric identification

If you would prefer no AI processing at all, choose any template without the AI badge — those never leave our own rendering pipeline.

If you provide a mobile number and opt in, we may send you text messages about your order or, separately, marketing messages. Message and data rates may apply. Consent to marketing texts is never a condition of purchase.

You can stop messages at any time by replying STOP, and restart by replying START. We keep a record of opt-out requests so we can honor them — that record is retained even if you delete your account, because we need it to avoid messaging you again.

Full details are in our SMS Terms.

Snapshot accounts are for adults. Our service is not directed to children under 13 and we do not knowingly allow children under 13 to create an account or provide us with their own personal information. If we learn that we have collected account information directly from a child under 13, we will delete it promptly.

Cards about children are a normal use of Snapshot. Many of our cards are made for youth athletes, and we recognize that the photo and details on a card often describe a minor. Because of that:

• Only a parent, legal guardian, or someone they have authorized (such as a coach or team organizer) should upload a child's photo or enter a child's details
• By uploading, you confirm you have the right and permission to do so
• We use a child's photo and details only to make, print and ship the card you ordered, and to provide support for that order
• We do not use children's images in marketing without separate, explicit permission
• We do not sell children's personal information or use it for targeted advertising

A parent or guardian may contact us at any time to review, correct or delete a child's photo and details. We will honor those requests even where the card was created by a coach or organization.

Snapshot ships worldwide, so which rights apply to you depends on where you live. Whoever you are and wherever you are, you can email privacy@makesnapshots.com to see, correct or delete what we hold about you, and we will not treat you differently for asking.

California and other US states

If you live in California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon or another state with a comprehensive privacy law, you have the right to:

• Know what personal information we collect about you and who receives it
• Get a copy of it, and correct it if it is wrong
• Delete it
• Opt out of the “sale” or “sharing” of your personal information for advertising — Your Privacy Choices, or simply turn on Global Privacy Control in your browser
• Not be discriminated against — same price, same service — for exercising any of these

You may use an authorized agent to make a request on your behalf. We do not use or disclose sensitive personal information for purposes that require a right to limit it.

Europe, the UK, Switzerland and Brazil

If you are in the EU or EEA, the UK, Switzerland or Brazil, you additionally have the right to access, correct, delete, restrict and object to our processing, to receive your data in a portable form, and to withdraw consent at any time — withdrawing is as easy as giving it, via Your Privacy Choices. You also have the right to complain to your local supervisory authority.

We rely on the following legal bases:

• Performance of a contract — creating, printing and shipping the cards you ordered, and supporting that order
• Consent — analytics and advertising cookies, and marketing email or text messages. You can withdraw it at any time
• Legitimate interests — keeping the service secure, preventing fraud, and defending legal claims
• Legal obligation — tax, accounting and records we are required to keep

Snapshot is based in the United States, so using our service means your information is transferred there. Where that transfer is from the EEA, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) with the providers listed in section 13. See International Data Transfers above.

Our service integrates with the following third-party services:

Necessary — always active

• Stripe — payment processing
• Supabase — data storage, file storage and authentication
• Vercel — website hosting
• fal.ai — AI image generation, for AI-badged templates only (see section 9)
• Twilio — text messaging
• Resend — transactional and marketing email
• Shipping and logistics providers (USPS, UPS, FedEx)

Analytics — only with your permission

• Google Analytics 4 — traffic and usage measurement
• PostHog — product analytics, including session replay. Replays record how pages are used; text you type into forms is masked and is not captured
• Ahrefs Web Analytics — traffic measurement
• Intercom — customer support chat

Advertising — only with your permission

• Meta (Facebook) Pixel — advertising measurement
• TikTok Pixel — advertising measurement
• OpenAI Ads — advertising measurement
• Meta and TikTok Conversions APIs — after an order is paid, our servers send these platforms the order value and a scrambled (hashed) version of your email address and phone number, so they can match the sale to an ad. This happens on our servers rather than in your browser, and it is covered by the same advertising permission: if you have turned advertising off, we do not send it

These services have their own privacy policies, and we encourage you to review them. Nothing in the Analytics or Advertising groups above is loaded or contacted until your choice allows it — see Your Privacy Choices.