Privacy notice

Version 2026-10-12-v4 · Updated 12 October 2026

This notice covers the WhatsSnag registration-of-interest website. For privacy enquiries, contact hello@whatsnag.com or write to our registered office below.

Who is responsible?

WhatsSnag is operated by Napkin Group Limited, registered in England and Wales, company number 10338310. The company is the controller of registration information. Registered office: Park Mill Burydell Lane, Park Street, St. Albans, England, AL2 2EZ.

What we collect and why

We collect your name, company name, business email address and, if you provide them, phone number, company type and approximate monthly snag volume. We also record when you register, your acknowledgement of this privacy notice, its version, your separate marketing choice and the exact marketing wording/version. Repeated submissions from the same normalised email address are counted without changing existing contact details or consent. Administrators may record a registration status to manage your enquiry.

We use this information to record and respond to your business’s interest, understand demand and assess suitability for future product discussions. Our lawful basis for handling registration enquiries is legitimate interests in responding to business enquiries and evaluating a new service. You can object. Registration does not create an account, purchase or subscription. The required privacy acknowledgement confirms that you have read this notice; it is not consent to marketing. We use an optional phone number only to respond to your enquiry, not for unsolicited marketing.

Registration and account emails

We use your email to confirm registration, verify control of the address and welcome you to the interest list after verification. These service messages are separate from optional marketing. Verification links expire after 24 hours. Password-reset messages apply only to existing verified WhatsSnag accounts; joining this interest list does not create a password or an active product account. Reset links expire after 30 minutes.

Service email

We use Google Workspace and the official Gmail API to send from hello@whatsnag.com. The website has permission to send email from this company mailbox. It does not read your inbox, connect customer mailboxes, or send registration information to an AI model. The sender authorisation token is encrypted with a separate key. Queued email payloads are retained for up to 30 days.

Marketing is your choice

Only if you select the optional checkbox will we use your email for promotional launch news, WhatsSnag product news and offers. Without this consent we limit messages to the registration acknowledgement, verification and replies to your specific enquiries. Our lawful basis for that marketing is consent. You can withdraw it at any time without affecting your registration, by contacting us. Any marketing emails must include an unsubscribe route. Registering does not subscribe you to marketing unless you choose it.

Read the separate Cookie Policy.

Optional analytics

Analytics starts only after you choose “Allow analytics”. We count visits using a random first-party session cookie, record a broad traffic source and approved campaign/message labels, and link a submitted registration to that visit. We do not use advertising pixels, device fingerprints or cross-site tracking. We do not retain full referrer URLs or arbitrary advertising query strings.

The ws_visit cookie lasts 30 minutes. Each new measured session may count as a new visitor; the dashboard does not claim to count unique people. Declining analytics does not affect registration. Use “Analytics choices” in the website footer to withdraw; this removes the current visit record and its link to a registration.

ws_analytics_choice_v1 is stored in your browser for up to 180 days to remember your preference. The essential ws_form cookie lasts up to one hour and protects the form from cross-site requests. It is not used for marketing. The essential ws_admin cookie lasts one hour and protects the owner dashboard following access-key sign-in. The ws_oauth cookie lasts ten minutes and protects an owner-initiated Google authorisation flow. Your IP address is processed briefly for abuse prevention; the application uses a keyed hash in memory for up to ten minutes and does not store raw IP addresses in the database.

Retention

Registrations are kept for up to 12 months unless you request deletion sooner. Visit-level analytics is kept for up to 90 days. Automated maintenance removes expired data daily and when the application starts. Spending totals contain no registrant details. Daily backups are kept for six days and weekly backups for 27 days. Deleted information may remain in these restricted recovery backups until they expire. If a backup is restored, deletion requests are reapplied before normal use.

Storage and sharing

Our website and encrypted registration database are hosted by Railway in its EU West region. Access to the private owner dashboard requires authentication. Google Workspace processes service emails; internal notifications sent to hello@whatsnag.com contain a registration reference rather than your submitted contact details. GoDaddy provides domain and DNS services. We do not sell your information.

These providers may process account, security, support or service information outside the UK, including in the United States. Their data-processing terms provide applicable international transfer safeguards, including standard contractual clauses and the UK Addendum where required. Details are available in Railway’s Data Processing Addendum and Google’s Cloud Data Processing Addendum. Contact us for information about safeguards relevant to your information.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal information; object to processing based on legitimate interests; and withdraw marketing or analytics consent. We will verify a request appropriately. You may complain to the Information Commissioner’s Office. We do not make automated decisions with legal or similarly significant effects using this registration form.

← Back to WhatsSnag