Legal

Privacy Policy

Last updated October 17, 2026

Draft, pending legal review. This page isn't final yet and isn't legal advice. Highlighted items get filled in before paid plans open.

The short version

  • Your searches, the listings you see, your settings and your Facebook login stay on your PC. We never receive them.
  • We only get what we need to sell and license Pro: your email and order details (through our payment provider), your license activations, and anything you email us.
  • The website has no cookies, no analytics and no trackers. We don't sell your information, and we don't run ads.

This policy explains what information FirstSnag handles and why. "We", "us" and "our" mean [Owner legal name], doing business as FirstSnag, as described in our Terms of Service.

1. What stays on your computer

The app keeps everything it works with in a folder on your PC:

  • your searches, filters and settings;
  • the listings it finds (title, price, photo link, place and link), their price history, your stars and notes, alerts and an activity log;
  • the app's own browser profile, which holds your Facebook sign-in for the app's window.

We never receive any of this. The app doesn't save seller names or profiles. Your Facebook password goes straight from you to Facebook in the app's browser window; the app never sees it. Anyone who can use your PC could use that window, so keep your PC to yourself, and never share the app's data folder.

2. What the app sends, and to whom

  • Facebook. The app loads Marketplace pages in its own browser window, signed in to your account. Facebook receives what any browser sends (like your IP address, cookies and device details), under Facebook's own privacy policy.
  • NHTSA (nhtsa.gov). When you open a vehicle listing, the app may look up its year, make and model, or a VIN, to show recalls and complaints. You can turn this off in the app's settings.
  • Sites you open yourself. Quick links like eBay sold prices or NICB VINCheck open in your own browser, only when you click them.
  • Us, for license checks (Pro only). When you activate or the app checks a Pro license: your license key, an anonymous device ID (a one-way code made from your PC's details, which can't be turned back into them), the app version and your IP address. We use these to enforce the 2-PC limit and to stop abuse.
  • Us, for updates. The app downloads a small file from our website to see if there's a new version. Like any web request, it includes your IP address.

The app has no ads, no analytics and no tracking, and it doesn't send us crash reports.

3. The website

firstsnag.com is a plain website. It sets no cookies, runs no analytics or trackers, and loads nothing from other companies (no outside fonts, scripts or ads). Our web host, DigitalOcean, runs the server; the server keeps standard logs (IP address, page requested, browser type and time) for security and troubleshooting, for up to 30 days. If you pick a light or dark theme, your browser remembers that choice on your device; it's never sent to us.

4. Payments

Our reseller, Lemon Squeezy, is the merchant of record for Pro. It collects your name, email, billing address, payment method and location (for tax and fraud checks) under its own privacy policy. From it, we receive your name, email, country, what you bought, your subscription status, and limited card details such as the brand and last four digits. We never receive your full card number.

5. Licenses and the referral program

To run Pro licenses and the "give a month, get a month" referral program, our license server stores your license key, the device IDs it's activated on, the IP addresses used to activate it, and who referred whom with the dates of their sign-ups and payments.

To stop self-referrals, we compare the referrer and the new customer on three things: limited card details from our payment provider (never the full number), device IDs and IP addresses. A match means the referral doesn't earn a reward. Unusual patterns are checked by a person. We use this information only to run licenses and the referral program.

6. The creator program

If you apply, we keep your name, email, channel links and what you tell us. Our payment provider's affiliate system tracks clicks and sales from your link, and collects the payout and tax details it needs to pay you.

7. Emails to us

If you email us, we keep the conversation so we can help you. Our inbox is hosted by [Email provider]. Please don't send us passwords or card numbers.

8. Who we share information with

Only the service providers that run FirstSnag for us: Lemon Squeezy (payments and creator payouts), DigitalOcean (website and license server) and [Email provider] (email). We share information with others only when the law requires it, to protect people from fraud or harm, or if the business changes hands (and then this policy keeps applying). We don't sell your personal information, and we don't share it for advertising.

In legal terms, we process information to provide the service you asked for (contract), to keep it secure and fair (legitimate interests), and to keep tax and accounting records (legal obligation).

9. How long we keep it

  • Orders and license records: while you're a customer, then as long as tax law requires (usually up to 7 years).
  • Referral checks (device IDs, IP addresses, card details): up to 12 months after a referral is decided.
  • Website server logs: up to 30 days.
  • Support emails: up to 2 years after the conversation ends.

10. Your choices and rights

You can ask us to show you, correct, export or delete the personal information we hold about you, or object to how we use it. Email privacy@firstsnag.com from the email address on your order. We'll answer within 30 days (or sooner where the law requires). We may keep what we're legally required to keep, like tax records.

If you live in California or another US state with a privacy law, you have the right to know, delete and correct your information, and to opt out of its sale or sharing (we don't sell or share it), and we won't treat you differently for using these rights. If you're in the European Economic Area or the UK, you also have the right to complain to your local data protection authority.

Your data on your own PC is fully in your hands: uninstalling the app, or deleting its data folder, removes it.

11. Children

FirstSnag isn't meant for children under 13, and we don't knowingly collect information from them. If you think a child has given us information, email us and we'll delete it. Buying Pro requires an adult, as our Terms explain.

12. Security

The website and license server use HTTPS. Access to our records is limited to the people who run FirstSnag, with two-step sign-in on every account. The best protection is that most of your information never leaves your PC in the first place.

13. Changes and contact

We'll update this page if what we collect changes, and change the date at the top. If a change matters, we'll tell customers by email before it takes effect. We're based in the United States, and the information we hold is stored there.

Questions or requests: privacy@firstsnag.com, or by mail to [Owner legal name], [Mailing address].

Questions about this page? Email support@firstsnag.com.

Our Terms of Service, Privacy Policy and Refund Policy are adapted from the Basecamp open-source policies, used under CC BY 4.0. We rewrote them for a Windows desktop app and added sections on third-party websites, licensing, referrals and creators. The Referral and Creator Terms are our own.