Effective as of: October 5, 2026
Thank you for using Snakeling. This Privacy Policy applies to our mobile apps, the browser game at snakeling.com, and our website (together, the "Services"). The Services are provided by Sannax ("we", "us", "our"), a Canadian corporation.
We are the data controller (meaning we are responsible for your data). This policy explains what information we collect, how we use and protect it, and your rights. If you have questions, contact our Data Protection Team, led by our Person in Charge of the Protection of Personal Information, at .
We collect information when you use our Services. We do not ask for a player username or password.
When you first play, we estimate your region from your IP address and device or store settings and apply the stricter age rule. If we cannot determine your region, we use a stricter default threshold. You will be asked for your birth month and year through neutral pickers (no age threshold shown, no retry). We create your guest account only after you answer. We store your birth month and year on our servers to run age-appropriate features and to know when you may graduate to full mode. We do not display your birth month or year in the app or return it through our APIs beyond your account mode (restricted or full).
If you are below the age threshold for your region, you may play in restricted mode: no email linking, generated display names and handles (no free-text names), limited social features, and child-directed advertising. If you are at or above the threshold, you may use full mode, including optional email linking. Personalized advertising is only enabled for players aged 16 and over, where permitted; younger full-mode players receive non-personalized ads.
We do not collect a player password, your real legal name, precise GPS location, or payment card numbers. Checkout is handled by Apple, Google, Amazon, your platform, or, for purchases on our website, our payment provider. We store the receipt and transaction identifiers they give us (not card data) to deliver, restore, and refund purchases.
Where applicable law requires a lawful basis, we rely on:
We share information only as described here. We do not sell your personal information.
Service providers. We use providers who process data on our instructions and only for the purposes we specify, such as server hosting and email delivery for one-time sign-in codes. They may not use your data for their own purposes.
Platforms and advertising partners with their own privacy policies:
When personalized ads are enabled in full mode, our advertising partners receive your device advertising identifier and related technical data. Some laws treat this as "sharing" or "targeted advertising." You can opt out as described in section 5 and on Your Privacy Choices.
We may also disclose data when required by law or to protect rights and safety, or as part of a merger or acquisition with notice to you.
We do not send marketing emails. Email is transactional and security only.
Restricted mode: Child-directed ads only. We do not request the App Tracking Transparency (ATT) prompt on iOS for restricted users.
Full mode: Ads may be personalized where permitted, but only if you are 16 or over based on the birth month and year you provided; full-mode players under 16 receive non-personalized ads. On iOS we request ATT before using the advertising identifier. On Android you can reset or limit your advertising ID in device settings.
When we enable web advertising, consent will be managed through a certified tool. See Your Privacy Choices for opt-out options.
Our servers are in Canada and the United States, and your data is processed there regardless of where you live. Some service providers may process data in other countries. Where a transfer of personal data is subject to the GDPR or UK GDPR, we rely on the EU-U.S. Data Privacy Framework (and its UK extension) where the recipient is certified, or on Standard Contractual Clauses and equivalent contractual safeguards otherwise.
We retain data while you use the Services and for a reasonable time after. Inactive accounts may be deleted after 24 months.
You can delete your account in the app. We hide your public profile immediately and purge after a 30-day recovery window. Parents may ask us to skip recovery. See How to Delete Your Account. If you cannot use in-app deletion, contact .
When an account is deleted, we keep records of its purchases and currency history, no longer linked to the account, as long as we need them for refunds, chargebacks, tax, and accounting.
We use physical, electronic, and procedural safeguards including encryption and access controls. No system is 100% secure. Keep your device and linked email secure; do not share sign-in codes or your recovery code.
Uninstalling stops new collection from that device but does not delete your account. Use in-product deletion (section 7) or contact us.
Depending on where you live, you may have rights to access, correct, delete, port, or object to processing of your personal data, and to withdraw consent. Contact . You may also have an authorized agent submit a request on your behalf; we will ask the agent for proof of authorization and may verify your identity directly. We respond within one month where required.
You may lodge a complaint with a regulator, such as the Office of the Privacy Commissioner of Canada (OPC), or your local data protection authority in the EU or UK if GDPR applies to you.
We use a regional age threshold. Below it, you may play in restricted mode without linking email. We still create a guest account and store birth month and year, progress, and an IP address at creation to operate the service age-appropriately.
If you entered the wrong birth month or year, contact . We do not offer a self-serve retry. Support may correct your birth month and year after verification.
Parents and guardians: If you believe your child is below the age threshold for your region and is playing in full mode, or should not be using the Services at all, contact us at . We may ask you to verify you are the parent (linked email, public player ID, display name, or approximate purchase dates). We can:
We will not put the account through the age gate again once we have verified parental information. Restricted users cannot link email; uninstall may lose access unless a recovery code was saved or the device restores the guest credential (Keychain / Auto Backup on mobile; not guaranteed on web). We remind restricted users of this and offer a recovery code before their first purchase.
Canada: You have rights under PIPEDA to access and correct your personal information and to withdraw consent, subject to legal or contractual restrictions. Contact our Data Protection Team or the Office of the Privacy Commissioner of Canada.
Quebec: Residents of Quebec have additional rights under Law 25; our Person in Charge of the Protection of Personal Information can be reached at .
United States: We do not sell personal information. When personalized ads are enabled in full mode, device advertising identifiers are provided to our ad partners, which California and some other state laws treat as "sharing" for cross-context behavioral advertising or "targeted advertising." Depending on your state, you may have the right to know what personal information we collect, to delete it, to correct it, to opt out of sharing and targeted advertising, and not to be discriminated against for exercising these rights. You can opt out through your device settings, the in-app ad settings, or Your Privacy Choices. On our website we will honor the Global Privacy Control signal once web advertising is enabled. To exercise other rights, contact ; we may need to verify your request using your public player ID or linked email. We do not sell or share personal information of users we know to be under 16; personalized advertising is only enabled for players 16 and over.
EEA and UK: The lawful bases in section 3 apply. You may complain to your local supervisory authority. Transfers are described in section 6.
We may update this policy. We will post the current version on this page. When we can, we will also show a notice in the app.
By using the Services and accepting our Terms, you consent to processing as described here, subject to your rights and any consent choices you make (such as for personalized ads in full mode).
Data Protection Team: