Legal
Privacy notice
Snowplowguys is designed to keep comparison research public and buyer planning private.
Public browsing and analytics
Public editorial pages do not require an account. Vercel hosts the site and Vercel Web Analytics provides aggregate traffic information such as the page viewed, referrer, approximate location, browser, operating system and device type. Web Analytics does not use analytics cookies. Snowplowguys filters private saved-plan, administrator and authentication routes before analytics events are sent, and does not add form contents, planner fields or email addresses to analytics events.
Private quote plans
Saved plans are encrypted before they are stored in Postgres through Prisma and opened through an unguessable bearer link. The link acts like a password: anyone who has it can view, edit or delete the plan. We store a token hash, not the token. Plans expire after 180 days of inactivity, extended when a plan is updated. Do not enter names, contact details or other identifying information.
Contact submissions
We use the information submitted to review corrections, advertising enquiries, listing updates and general messages. Contact fields are encrypted at rest and stored in Postgres through Prisma before a best-effort notification email is sent through Twilio. We do not automatically share submissions with providers. Spam is retained up to 30 days; pending and resolved submissions up to 12 months.
Administration and security
The moderation inbox uses passwordless NextAuth email sign-in plus a server-side ADMIN_EMAILS allowlist. Essential authentication session data is used for signed-in administrators. Hosted secrets protect stored fields, private plans, abuse controls and authentication. No internet service is risk-free; keep sensitive or financial information out of submissions.