Privacy Policy

Personal Information

When you create an account or place an order, we collect:

• Name and email address
• Billing and shipping addresses
• Phone number (optional — used for order updates and, if you opt in, text messages)
• Payment information (processed securely through third-party providers — we never store full card numbers)

Team and Organization Information

If you create or join a team, league, school or club through Snapshot, we also collect:

• Team, organization and roster details, including player names and jersey numbers
• The contact details a coach or organizer provides for players and parents
• Which roster spots have been filled, paid for, or are still outstanding

If you are a coach or organizer, you are responsible for having permission to share the information you enter about other people — see Children's Privacy below.

Content You Upload

We collect and process:

• Photos and images you upload for card creation
• Text and information you add to your cards
• Design choices and customizations

Technical Information

We automatically collect:

• IP address and device information
• Browser type and version
• Usage data and analytics
• Cookies and similar tracking technologies

Communication Records

When you contact us, we may collect:

• Email correspondence
• Support ticket information
• Chat logs and communication records

We use your information to:

• Process and fulfill your orders
• Create and customize your sports cards
• Manage your account and provide customer support
• Process payments and prevent fraud
• Send order confirmations and shipping notifications
• Send text messages about your order, if you have opted in (see Text Messages below)
• Improve our services and user experience
• Send marketing communications (with your consent)
• Comply with legal obligations

We do not sell your personal information for money, and we never sell or share the photos you upload. We do not use those photos to train artificial intelligence models — see AI-Assisted Card Generation below.

We do share limited information — such as advertising cookie identifiers and, after an order, a scrambled (hashed) version of your email address — with advertising platforms so we can tell which ads led to a sale. Several US state privacy laws classify that as a “sale” or “share” of personal information even though no money changes hands, so we treat it that way. You can turn it off at any time, and we will not charge you a different price or give you a worse service for doing so: Your Privacy Choices.

We may share your information with:

Service Providers

• Payment processors (Stripe)
• Printing and fulfillment partners
• Shipping carriers (USPS, UPS, FedEx)
• Cloud storage and hosting providers
• Analytics and marketing platforms

Legal Requirements

We may disclose information when required to:

• Comply with legal obligations or court orders
• Respond to government requests
• Protect our rights and property
• Ensure user safety and security

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

We implement comprehensive security measures including:

• Industry-standard encryption for data transmission and storage
• Secure servers and databases with access controls
• Regular security audits and monitoring
• Employee training on data protection practices
• Multi-factor authentication for administrative access

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to protect your information.

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Process orders and handle customer support
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements

You may request deletion of your account and associated data, subject to legal retention requirements.

Account Access and Control

• Access and update your account information
• Download your data and order history
• Delete your uploaded images and content
• Close your account (subject to legal requirements)

Marketing Communications

You can:

• Opt out of marketing emails at any time
• Unsubscribe using links in our emails
• Contact us to update your communication preferences

Cookies and Tracking

Your Privacy Choices lets you switch analytics and advertising cookies on or off at any time. The link is in the footer of every page. Necessary cookies — the ones that keep you signed in, hold your cart and save your cards — cannot be turned off, because the site cannot work without them.

If you are in the EU, EEA, UK, Switzerland or Brazil, nothing outside that necessary set loads until you agree to it. Elsewhere, analytics and advertising cookies are on by default and the link above turns them off.

We also honor the Global Privacy Control signal. If your browser or extension sends GPC, we treat it as an instruction not to share your information for advertising, automatically and without you having to tell us separately.

When you make a choice in the cookie banner or on Your Privacy Choices, we keep a record of it so we can show what you agreed to: a random consent ID saved in your browser, which categories you allowed, whether your browser sent GPC, the date, the version of the banner, the language it was shown in and your country. The record holds no IP address and is not linked to your account. Your consent ID is shown on the Your Privacy Choices page if you want to ask us about a record.

Most Snapshot templates are composited entirely by us from the photo you upload. A limited number of templates use artificial intelligence to generate artwork around your photo. These templates are labelled with an “AI” badge in the card builder before you select them, so choosing one is always a deliberate choice.

When you use an AI template:

• Your uploaded photo and the card details you entered are sent to our AI processing provider (fal.ai) to generate the artwork
• The generated image is returned to us and stored with your card so you can review, edit, reprint or reorder it
• We do not use your photos to train AI models, and we do not permit our AI provider to do so
• We do not use uploaded photos for facial recognition or biometric identification

If you would prefer no AI processing at all, choose any template without the AI badge — those never leave our own rendering pipeline.

When you choose to connect Snapshot in ChatGPT, you authorize access to save selected artwork, create cards from selected photos and details using Snapshot templates or AI, list artwork previously saved through the connection, create physical-card previews and prepare your Snapshot cart. We receive the image files you select, their file identifiers and names, your card names, optional back-of-card details (such as player name, team, bio and stats), product options, slab label text and your artwork/print-rights approval. Images can include people and details about them. Only share images you have permission to print; the children's privacy requirements below apply to this connection too.

We keep the original images and print-ready versions privately with your Snapshot account for previews, printing, support and reorders. If you ask Snapshot to create a card or generate a matching back, we also save your supplied details, template choice, creation progress and candidate designs. Saved artwork, product reviews and approval records remain with your account until you request deletion, subject to the order and legal retention requirements in section 6. Disconnecting does not delete them. To request access, correction or deletion, email privacy@makesnapshots.com.

ChatGPT receives the tool results needed for your request: artwork names and references, selected products, print-quality information, quotes and the checkout link. The embedded studio also receives temporary links to your private proofs, front and back candidates and mockups. OpenAI processes the information you share in ChatGPT under its own policies. Our hosting, authentication and storage providers in section 13 process the connection data; printing and shipping use our ordinary order workflow. Importing completed artwork does not send it to our AI generation provider. If you choose Snapshot matching-back generation, we send the selected front and the details you confirm to our AI generation provider, as described above. You select the finished back before printing. If you choose Snapshot's AI card generator, we send your selected photo, any optional logo and supplied card details to that provider to create front and back choices. You choose both sides before saving. Static-template creation sends the selected photo to our background-removal provider (PhotoRoom), then renders your entered details into the selected template on Snapshot.

We store hashed connection credentials, permission scopes, connection times and status to enforce account access, and daily import/preview counts to prevent abuse. Access credentials expire after one hour; refresh credentials expire after 30 days unless renewed. These expiry periods end access, not the retention of saved artwork or connection records. Our service temporarily uses request IP addresses to limit abusive traffic. We use import, preview and cart-approval records to understand use of this feature. The embedded studio has no advertising or analytics scripts.

Snapshot does not request your full conversation history or payment details through plugin tools. Sign-in takes place on Snapshot; your Snapshot password is never returned to ChatGPT. Shipping, payment and final purchase confirmation also happen on Snapshot. You can revoke access at any time on the ChatGPT connection page. Snapshot's website cookie choices continue to apply when you visit our checkout or other pages.

When you connect Snapshot to Claude, you can upload selected photos and artwork, provide card details, create fronts and backs with Snapshot templates or AI, preview physical products and prepare your cart. We receive the files you select, filenames, supplied names and statistics, template choices, product options, slab labels and your print-permission confirmation. These can include personal information; only provide images and details you have permission to use. Our children's privacy requirements apply.

The embedded upload control sends your chosen image directly to private Snapshot storage. It does not send image bytes or storage credentials through Claude's conversation. Claude receives the file reference and filename, your supplied card details, creation status, artwork references, product options, print-quality information, quotes and cart links needed for your request. The embedded studio receives temporary private image links for proofs and mockups. Anthropic processes information shared with Claude under its own policies.

Snapshot's static templates use PhotoRoom to remove the photo background and Snapshot to render both sides. Requested AI card or matching-back generation sends the selected images and supplied details to our AI provider as described above. Importing finished designs does not send them to the generation provider. Claude does not provide native photo generation for this workflow.

Original uploads, supplied fields, resulting artwork, generation progress and candidates, previews and approval records stay privately with your Snapshot account for creation, printing, support and reorders, until deletion is requested, subject to section 6. Disconnecting does not delete them. Contact privacy@makesnapshots.com for access, correction or deletion. Our hosting, authentication, storage and processing providers in section 13 support this service.

We store hashed connection credentials, scopes, connection times and status, plus daily upload/import and preview counts to control access and abuse. Access tokens expire after one hour; refresh tokens expire after 30 days unless renewed. Request IP addresses are used temporarily for rate limits. The studio contains no advertising or analytics scripts. Snapshot does not request your full conversation, password or payment details through Claude tools.

Sign-in, shipping, payment and final order placement happen on Snapshot. Disconnect through the Claude connection page; this leaves your ChatGPT connection unchanged. Website cookie choices apply when you visit Snapshot.

If you provide a mobile number and opt in, we may send you text messages about your order or, separately, marketing messages. Message and data rates may apply. Consent to marketing texts is never a condition of purchase.

You can stop messages at any time by replying STOP, and restart by replying START. We keep a record of opt-out requests so we can honor them — that record is retained even if you delete your account, because we need it to avoid messaging you again.

Full details are in our SMS Terms.

Snapshot accounts are for adults. Our service is not directed to children under 13 and we do not knowingly allow children under 13 to create an account or provide us with their own personal information. If we learn that we have collected account information directly from a child under 13, we will delete it promptly.

Cards about children are a normal use of Snapshot. Many of our cards are made for youth athletes, and we recognize that the photo and details on a card often describe a minor. Because of that:

• Only a parent, legal guardian, or someone they have authorized (such as a coach or team organizer) should upload a child's photo or enter a child's details
• By uploading, you confirm you have the right and permission to do so
• We use a child's photo and details only to make, print and ship the card you ordered, and to provide support for that order
• We do not use children's images in marketing without separate, explicit permission
• We do not sell children's personal information or use it for targeted advertising

A parent or guardian may contact us at any time to review, correct or delete a child's photo and details. We will honor those requests even where the card was created by a coach or organization.

Snapshot ships worldwide, so which rights apply to you depends on where you live. Whoever you are and wherever you are, you can email privacy@makesnapshots.com to see, correct or delete what we hold about you, and we will not treat you differently for asking.

California and other US states

If you live in California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon or another state with a comprehensive privacy law, you have the right to:

• Know what personal information we collect about you and who receives it
• Get a copy of it, and correct it if it is wrong
• Delete it
• Opt out of the “sale” or “sharing” of your personal information for advertising — Your Privacy Choices, or simply turn on Global Privacy Control in your browser
• Not be discriminated against — same price, same service — for exercising any of these

You may use an authorized agent to make a request on your behalf. We do not use or disclose sensitive personal information for purposes that require a right to limit it.

Europe, the UK, Switzerland and Brazil

If you are in the EU or EEA, the UK, Switzerland or Brazil, you additionally have the right to access, correct, delete, restrict and object to our processing, to receive your data in a portable form, and to withdraw consent at any time — withdrawing is as easy as giving it, via Your Privacy Choices. You also have the right to complain to your local supervisory authority.

We rely on the following legal bases:

• Performance of a contract — creating, printing and shipping the cards you ordered, and supporting that order
• Consent — analytics and advertising cookies, and marketing email or text messages. You can withdraw it at any time
• Legitimate interests — keeping the service secure, preventing fraud, and defending legal claims
• Legal obligation — tax, accounting and records we are required to keep

Snapshot is based in the United States, so using our service means your information is transferred there. Where that transfer is from the EEA, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) with the providers listed in section 13. See International Data Transfers above.

Our service integrates with the following third-party services:

Necessary — always active

• Stripe — payment processing
• Supabase — data storage, file storage and authentication
• Vercel — website hosting
• fal.ai — AI image generation, for AI-badged templates only (see section 9)
• Twilio — text messaging
• Resend — transactional and marketing email
• Sentry — error monitoring for our servers. Error reports carry no IP address; cookies, form contents and email addresses are removed before they are sent
• Shipping and logistics providers (USPS, UPS, FedEx)

AI access to public pages

We use Rebilder to provide readable versions of selected public pages to AI assistants and to measure their requests to those selected pages. Reports include the public page address without query strings, the detected assistant platform, request time and response format. We exclude account, checkout and other private routes, and do not send customer details, cookies, query text or referring-page addresses in these reports. This integration does not add a browser tracking tag.

Optional Google Customer Reviews survey

After a completed purchase, we may show Google's voluntary Customer Reviews invitation. To display the invitation and arrange a survey if you accept, we provide Google with your order ID, email address, delivery country and estimated delivery date. You choose whether to receive the survey; we do not select consent for you. This choice is separate from Snapshot marketing emails.

Después de una compra completada, podemos mostrar la invitación voluntaria de Google Customer Reviews. Para mostrarla y organizar una encuesta si aceptas, facilitamos a Google el identificador del pedido, tu correo electrónico, el país de entrega y la fecha estimada de entrega. Tú decides si quieres recibir la encuesta; no seleccionamos el consentimiento por ti. Esta decisión es independiente de los correos de marketing de Snapshot.

Analytics — only with your permission

• Google Analytics 4 — traffic and usage measurement
• PostHog — product analytics, including session replay. Replays record how pages are used; text you type into forms is masked and is not captured
• Intercom — customer support chat
• Sentry — error reports from your browser when a page breaks, so we can fix it. Reports carry no IP address; cookies, form contents and email addresses are removed before they are sent

Advertising — only with your permission

• Meta (Facebook) Pixel — advertising measurement
• TikTok Pixel — advertising measurement
• OpenAI Ads — advertising measurement
• Meta and TikTok Conversions APIs — after an order is paid, our servers send these platforms the order value and a scrambled (hashed) version of your email address and phone number, so they can match the sale to an ad. This happens on our servers rather than in your browser, and it is covered by the same advertising permission: if you have turned advertising off, we do not send it

These services have their own privacy policies, and we encourage you to review them. Nothing in the Analytics or Advertising groups above is loaded or contacted until your choice allows it — see Your Privacy Choices.