Privacy notice
Last updated 13 November 2026
Snugg is a small hobby project: a place to walk around and chat, on snugg.club and inside Discord (the Snugg Activity). It's made to keep as little about you as possible. You can use it without an account. There are no ads, analytics or trackers, and nothing is sold or shared for marketing.
Who is responsible
The data controller is Snugg.club, Finland. Contact: support@snugg.club.
What is stored, why, and for how long
| What | Why | How long |
|---|---|---|
A session cookie (hg_session) with a random code. We only store a one-way hash of it.
|
Recognizing your browser so you keep your nickname. Strictly necessary, so there's no cookie banner. | Up to 400 days in your browser. We forget it after 180 days unused, when you sign out, or when you delete your identity. In Discord it's kept only inside Discord's frame (a partitioned cookie). |
| Your nickname, avatar look, visit count, when you first and last visited, and the country your last visit came from (worked out from your IP address by our host; the address itself isn't kept). | Showing you to others and letting you come back as yourself. | Until you delete it, or automatically 400 days after your last visit. Your nickname becomes free for others after 90 days away. |
| If you save an account: your email address and a one-way hash of your password (never the password itself). | Letting you sign in on other devices, and sending you a password reset link when you ask for one. | Until you delete your identity. |
| While you save an account: the address you typed, your password's hash, and a one-way hash of the code we email to confirm the address is yours. | Making sure nobody saves an account with someone else's email. | 15 minutes, or until you type the code. |
| If you use Snugg in Discord: your Discord user ID, linked to your Snugg identity. When you open Snugg there, Discord asks you to let Snugg see who you are and which Discord servers you're in. Discord then tells us your Discord name (only offered as a nickname to start from, not kept) and the servers you're in, with your permissions in each (only read during sign-in, not kept). We never see your messages on Discord. Discord also asks to let Snugg set your activity status: while you're in a room, your Discord profile says you're in Snugg and how many others are there with you, never which server or channel. If you say no to that, Snugg works the same without it. | Signing you in as yourself on any device, and letting only a Discord server's members into its rooms. | Until you delete your identity. The access Discord gives us is used while you sign in and isn't stored. |
| For each Discord server and channel Snugg is opened in: a Snugg server and room named after them (from Discord), the Discord IDs of the server and channel, and who opened it there first. For a Discord DM or group DM: its channel ID. | Giving each Discord channel its own room, the same for everyone in it, every time. | Until the room or server is deleted. Who opened it first: until they delete their identity (the server and its rooms stay). |
| If you're an owner or admin (Manage Server) of a Discord server Snugg is opened in: that you are, and when Discord last said so. | Letting the Discord server's admins decorate and moderate its rooms. | Counts for a day, and is checked again each time you open Snugg there. Kept until you delete your identity, or Discord says you're no longer an admin. |
| Servers and rooms you create: their names, style, invite link, members, and who is banned from them. Which servers you've joined. | Running your servers and showing them in your list. | Until you delete the server or your identity, or leave it. |
| Private messages: who sent what to whom, when, and whether it's been read. Who you've blocked. | Delivering your conversations. The admin only sees messages from a conversation someone reports. | Messages: 180 days, then deleted automatically, or sooner if either person deletes their identity. Blocks: until either person deletes their identity. |
| Friends: who you've asked, who asked you, and who accepted. Which room you're in right now, so your friends can find you (they see the room only if it's the lobby, a public server, or a server they're in themselves). | Showing your friends list and letting friends join you. | Friendships until either person removes the other or deletes their identity. Where you are: only while you're in a room (at most 2 days if a room shuts down unexpectedly), plus up to 15 seconds in a cache used to count heads in Snugg's rooms. |
| Furniture you arrange in your rooms, and what your avatar is holding or doing (dancing, a drink). | Showing the room the same way to everyone. | Furniture until the room is deleted. What you hold or do only while you're in the room. |
| Chat moderation log: what was said out loud in a room, by which nickname and identity, when, and a one-way hash of the sender's IP address. Whispers aren't in it. | Dealing with harassment and abuse. Only the admin can read it. | 7 days, then deleted automatically. |
| Whispers: who whispered what to whom, when. | Letting either of the two report the other. They reach the admin only in such a report. | 1 hour, then deleted automatically. |
| Reports: who reported whom, in which room, with the room's last 30 lines said out loud and the last 30 whispers between the two. | Letting the admin act on reports. | 30 days, or until the admin dismisses them. |
| Failed sign-in attempts and emails we sent: a one-way hash of the IP address and of the email address. | Slowing down password and code guessing, and keeping anyone from flooding an inbox with our emails. | 15 minutes (confirmation codes sent: 1 day). |
| When the nickname and look picker is shown to you: when, the page you landed on, the site you came from (its name only), the kind of device and browser (not the full browser string), your country (from your IP address), how far you got, and whether you then picked a nickname or signed in. A one-way hash of your IP address goes with it for a day. It isn't tied to your nickname or identity. | Counting how many visitors leave without joining, to make the start easier. Only the admin sees it. | 30 days (the IP hash: up to 2 days). |
| A one-way hash of your IP address when you pick a nickname. | Limiting how many new nicknames one network can make (spam prevention). | 1 hour. |
| If the admin bans someone from all of Snugg: their nickname, identity, and a hash of their IP address. | Keeping banned people out. | The IP hash for 7 days; the rest until the ban is lifted. |
| How many people were around each hour: only a number, not who. | Letting the admin see how busy Snugg is. | 30 days. |
| How long each stay in a room lasted and how many others were there: only numbers, not who or which room. | Letting the admin see whether people find company here, to make Snugg better. | 90 days. |
| Two settings in your browser's local storage: whether you dismissed the tip to save an account, and whether you turned sound effects off. | Remembering those two choices. | Until you clear your browser data. |
Other chat isn't kept anywhere: the chat log panel you see lives only in your browser tab. IP addresses are never stored as such, only as one-way hashes made with a secret key, so they can't be turned back into addresses by trying them all. In Discord, your connection comes through Discord, which doesn't pass on your IP address: nothing above that mentions an IP address applies to you there.
Legal basis
Legitimate interests (GDPR Article 6(1)(f)): running the chat you chose to use, and keeping it safe from spam and abuse.
Where it's processed
Snugg runs on Cloudflare, which processes data on our behalf. Its Email Service also sends our emails (confirming your address, password reset), so it sees your email address and the message. Rooms and the database are kept in Cloudflare's EU jurisdiction. Cloudflare's network may still handle connections outside the EU, under its data processing terms, and may keep short-lived technical logs (such as IP addresses of requests) for a few days to run and protect the service.
In Discord, Snugg runs inside Discord's app, and everything between you and Snugg passes through Discord's proxy. Discord (Discord Inc., in the United States) handles that, and your Discord account, under its own privacy policy.
Your rights
- Delete everything: in Snugg, open Settings (the cog) → Account → “Delete my identity”. This removes your nickname, look, account, link to Discord, servers, private messages and friends at once. Lines you said stay in the moderation log until they expire after 7 days, and whispers until they expire after an hour.
- Get a copy: Settings → Account → “Download my data” saves everything we keep about you as one file (JSON). Other people appear in it only by the nicknames you'd see in Snugg.
- Correction, objection, anything else: email the contact above. To know the data is yours, we'll need you to be signed in to your account (or, without one, signed in on the browser you use Snugg on).
- Complaints: you can contact the Finnish Data Protection Ombudsman, tietosuoja.fi.
Adults only
Snugg is for people aged 18 and over. Please don't use it if you're younger.
See also the terms of use and the house rules.