Privacy Policy

Last updated: 2026-09-29

Free public preview. Payment collection is disabled. Email sign-in is available; the account processing below applies when you use it. Future payment processing applies only when paid access opens.

1. Who is responsible

SnakeRank is operated by HE YUYE (何玉叶), an individual operator based in Hangzhou, China. Contact: support@snakerank.app. HE YUYE is responsible for SnakeRank's processing described here. This service is intended for adults aged 18 or older outside mainland China.

2. Current game data

• Submitted runs: selected app, optional supporter name, accepted score, random seed, run issue/completion/expiry times and tick count. Submitted moves are processed transiently to replay and check a run; the current run database does not store the full move sequence.
• Public display: your supporter name may appear with an app's leading score; accepted results contribute to public app totals. Avoid real names or sensitive information if you do not want them displayed.
• Browser identity: a first-party cookie called rr_visitor contains a random identifier and has a maximum age of one year. The database stores its SHA-256 hash to recognize repeat supporters. A hash remains pseudonymous data; it is not proof of a unique person.
• Local storage: your browser can remember your supporter nickname and local game records. You can clear them in browser settings; clearing local storage does not delete server records.
• Technical/support data: Cloudflare processes requests, IP addresses for rate limiting and technical/security logs. If you email us, we receive your email address, message and any information you choose to include.

3. Accounts and future payments

Email sign-in uses your email address, one-time codes, terms-acceptance version and account/session records. Sign-in codes expire after 10 minutes. The database stores hashes of verification codes and session tokens rather than their usable values. Cloudflare Email Service processes your email address and the code to deliver sign-in messages. These are requested account-access messages, not marketing emails.

A secure, HttpOnly first-party cookie called sr_session keeps you signed in for up to 30 days. Signing out invalidates that session. Account records include your account identifier, email, creation time and accepted terms version; authentication records include challenge timing and verification attempts. Your email address is not displayed on the public leaderboard. When purchases open, attempt-ledger records will link credited packs, issued runs, refunds and payment references to your account.

When paid access opens, Waffo Pancake will process checkout and card data under its own applicable notices. SnakeRank will receive purchase references, amount/currency, payment/refund status and information needed to fulfill and support the purchase. We do not store full card numbers or security codes. Paid checkout remains disabled; this description is not a claim that live payment collection has started.

4. Purposes and legal grounds

We use game and account information to provide requested play, validate scores, deliver purchases and support users. Where GDPR-style legal bases apply, these activities are based on providing the requested service/contract; preventing abuse and maintaining security relies on legitimate interests balanced against your rights; legally required records rely on legal obligations. Where consent is required for an optional feature, we will request it separately. We do not use this preview for targeted advertising or sell personal information.

5. Sharing and locations

Cloudflare provides hosting, database infrastructure, sign-in email delivery and support-email forwarding. The current production database is in Cloudflare's western North America region; infrastructure requests may be handled in other countries. The operator accesses support and service information from China. Information may therefore be processed outside your country. We use provider contractual and security controls and apply transfer safeguards where required; no specific adequacy decision or transfer certification is promised here.

Pressing a share button opens X's composer; we do not automatically post to your account. X and other linked app websites process information under their own policies. We may disclose information where legally required or needed to investigate abuse, and to service providers for the purposes described here. Public leaderboard information is visible to visitors and may be copied by others.

6. Retention and security

We keep run and supporter records while needed to operate the preview leaderboard, investigate abuse and resolve requests; preview scores may be reset. Cookie expiry and run-token expiry do not automatically delete database records. We have not implemented an automatic retention-deletion schedule. Support messages are retained while needed to resolve the matter and related disputes. We retain account records to provide your account and resolve related requests or security issues. Sign-in code and session expiry prevent further use but do not automatically delete the underlying database records; explicit sign-out removes the corresponding session record. Future purchase records will be retained for fulfillment, disputes, tax and other applicable legal requirements. We will establish and publish the relevant purchase-record periods before paid collection starts.

We use HTTPS, hashed run/session credentials where applicable and restricted backend access. No internet service is perfectly secure. We will respond to security incidents and give notifications required by applicable law.

7. Your choices and rights

You can play local practice without submitting a supporter name, avoid public submissions, clear browser storage or contact us to request access, correction or deletion. Depending on your location, you may also request portability or restriction, object to certain processing, withdraw consent without affecting earlier lawful processing, or complain to a privacy authority. Email support@snakerank.app; we may ask for proportionate evidence that the records belong to you and will respond within the applicable legal deadline. Anonymous browser records can be difficult to identify after cookies are cleared. Necessary legal/security records may be retained where the law permits or requires.

We do not knowingly offer the service to children under 18. Contact us if a child has supplied data so we can review and remove it as appropriate. Do not send identity documents unless specifically needed and a suitable secure process is provided.

8. Updates

We will update this date when practices change and provide notice of material changes through the site or, where relevant, your account email. New optional uses requiring consent will be offered separately. See our Terms of Service and Refund Policy.