SnapFut · Last updated: 4 November 2026
This policy explains what the SnapFut mobile game collects, why it is collected, where it is kept and how to have it removed. SnapFut is an independent project; the person responsible for the data described here can be reached at snapfutt@gmail.com.
Signing in is optional and used for the online part of the game: on Android with Google, on iPhone with Apple.
The name you choose for yourself in the game. It is visible to other players in trading, online drafts and leagues.
When the game first runs it generates random identifiers and stores them on your device: one is how your device signs in to our server, another identifies this installation in usage statistics. Reinstalling the game creates new ones.
The online part of the game also uses a phone identifier, because each account can be played online from one phone at a time. On Android this is the identifier Android gives SnapFut on your phone (Android ID); on iPhone it is a random value the game keeps in the iPhone Keychain. Unlike the identifiers above, it stays the same if you reinstall the game, so reinstalling does not count as moving to another phone. Our server never sees the identifier itself — only a one-way hash of it, salted for SnapFut. It is not an advertising ID, and we use it only to know which phone your account is tied to.
Your card collection, level, experience and in-game currencies live on your device. A copy reaches our server in three ways: when you use cloud backup (we then store the card identifiers you own, your level, experience and currency balances together with the time of the backup); through the card ownership registry, which records which account holds which card copy so that trading cannot be used to duplicate cards; and as part of the usage statistics described below.
Trades you complete, online draft matches, league participation and results, the ratings and short preset messages players exchange, and your wish list. There is no free-text chat between players.
While you play, the game records what happens in it and sends this to our server in batches. This is how we see whether the game works and is balanced:
These statistics are tied to the installation identifier and, when you are signed in, to your game account. They contain no email address, no name and no text you typed.
To protect trading and the card economy from modified copies of the game, the online part asks the platform to confirm that the game is genuine and runs on a genuine device: Google Play Integrity on Android and Apple App Attest on iPhone. We receive only the platform's verdict and a cryptographic key created for this check; Google and Apple process the check under their own policies.
You can move your progress to a new phone. The two phones must be next to each other: they exchange a one-time code over Bluetooth, which shows our server that both are in your hands. Your progress itself travels through our server, not over Bluetooth: the old phone uploads it, erases it locally, and only then the new phone downloads it, so two copies never exist. For this check the server also compares whether both phones are on the same network, keeping only a one-way hash of the network address, never the address itself. The uploaded progress is deleted from the server as soon as the new phone confirms it has received it, or when the transfer is cancelled.
On Android 11 and older, Android grants Bluetooth search only together with the location permission, so the game asks for it there, and only when you start a transfer. The game does not read or send your location; on Android 12 and newer this permission is not requested at all.
If you submit a bug report from inside the game, it includes your message plus a technical summary: app version, platform, operating system version, device language, session identifier, your account and device identifiers, your level, currency balance, number of cards owned, the versions of game content you have downloaded, and a crash summary if the game crashed. If you have turned logging on in the game's settings, recent application logs are attached as well. Logging is off by default.
The game shows no ads and contains no advertising SDKs. We do not collect the advertising identifier or build any advertising profile.
What we never collect: your real name or postal address, your phone number, your contacts, your location, your photos or files, and any payment details — the game has no purchases, so no payment data exists.
We do not sell data, we do not share it with data brokers, and we do not use it for advertising profiling or for any purpose beyond running and improving the game.
On our own server, in a PostgreSQL database that only we have access to. Traffic between the game and the server is encrypted with TLS. The server is rented from a hosting provider; no third party is given access to the data on it.
The only external services involved are Google Sign-In and Sign in with Apple (for authentication) and Google Play Integrity and Apple App Attest (for the device check).
In the game: open Settings → Account → Delete account. Your account is deleted immediately and this can't be undone.
Without the game: write to snapfutt@gmail.com with the subject SnapFut account deletion, from the email address you signed in with, or include the support code shown in the game's settings. We will delete your account within 30 days and confirm when it is done. See also How to delete your account.
What is deleted: your account and nickname, your cloud backup, your entry in the ownership registry, your online coins and packs, trades and invites, ratings of you, league and online draft results, the phone your account is tied to, and your error reports.
What remains: usage statistics stay only in anonymized form, no longer linked to you. A trade partner's history still lists the trade, under a random identifier that no longer leads to anyone. Ratings you gave to others stay the same way. To keep daily limits from being reset by deleting an account, your phone's identifier is kept with that day's limit records and erased automatically within a few days.
Your cards, coins and packs stored locally on your device are not deleted with your account, so you can keep playing offline. They are removed by uninstalling the game. If you sign in again, you start a new account and that local progress is registered on it.
SnapFut is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, write to us and we will remove it.
If this policy changes, the date at the top of the page changes with it. Significant changes will also be announced inside the game.