Privacy

Buying Snail OS goes through Stripe. Stripe sends us your email address and the receipt; we keep both to deliver the download key and to answer refund requests. Card numbers never reach us.

Email we send goes through SendGrid. The waiting list is your email address and nothing else. Unsubscribe links work and are honoured.

The site sets no advertising cookies. Google Analytics, Vercel Analytics and Speed Insights run only after you allow analytics. A separate advertising choice is stored as declined unless you allow it, and no advertising tracker is currently loaded. Withdrawing analytics consent clears analytics cookies and stored campaign labels.

After analytics consent, the site stores first-touch UTM labels in first-party browser storage for 90 days and copies them to a checkout record. Google and Meta click IDs are captured only after advertising consent, and withdrawal removes stored click IDs. Checkout metadata can include opaque Google Analytics client and session IDs after analytics consent and Meta browser match keys after advertising consent. Analytics events omit emails, license keys, Stripe session IDs and credential-bearing URLs.

Snail OS runs on your device and keeps its state on the SD card. Nothing on the card leaves the device unless you connect an account or a phone.

Weather asks the U.S. National Weather Service for a forecast at the place you choose. The Store and firmware updates fetch files from this site. Neither call carries an identifier for you.

New connected accounts belong to connect.snailos.org. It stores encrypted provider tokens and uses the permissions you approve to compose screens for your device. Remove a connection from Connected apps or revoke it at the provider. Existing V1 connections stay on a-gnt.com until you remove and reconnect them; Page is a separate service.

Snail Connect for Mac relays Snail Messages, Calendar, Reminders and Contacts from your Mac to your device. Every record is encrypted on the Mac with a key your device generated before it leaves, and the relay stores no messages, events, reminders or contacts.

The app links your phone to your paired Snail over Bluetooth. The optional Wi-Fi relay requires a Snail Connect account and subscription. After you approve the phone, it sends notification snapshots to Connect so your signed-in Snail can retrieve them. Transport uses HTTPS; the server stores snapshots encrypted and decrypts them for your authorized device.

Notification access: with your permission the app keeps a copy of the newest 24 notifications in the shade, with the app name, title and text, on the phone. It sends that copy to your Snail on request and lets the Snail clear a notification or answer one through the notification’s own reply action. Nothing is read from inside other apps.

Calendar, Contacts and SMS: each is off until you switch it on and grant the permission. Calendar sends the next two weeks of events. Contacts sends names and numbers, starred first. SMS sends your newest texts so they appear in Snail Messages, and lets the Snail send a reply as a text from your phone. Turning a switch off stops the next send; nothing already on your device is recalled.

Storage: the copy lives in the app’s private storage and is replaced on every change. The pairing key is wrapped by the Android Keystore. Forget the Snail in the app, or uninstall it, and everything the app kept is deleted.

The app sends usage and error counters to Google Analytics with a random installation identifier. Those events exclude message and notification contents. Turning off the Wi-Fi relay stops snapshot uploads.

Snail OS and the apps are not directed at children under 13 and we do not knowingly collect their data.

This page changes when the software does; the date below is the last change. Questions go to joey@snailos.org.

Last changed 2026-09-08.