Privacy Policy

This policy explains what data SnipeBid (“we”, “us”) collects when you use the SnipeBid extension, the SnipeBid Android app, this website and our API, why, and what your choices are. We keep it short because we collect as little as we can.

What we never collect

• Your EA password. SnipeBid runs inside your own logged-in web app session and never sees, asks for or stores your EA login details.
• Your full payment details. Card payments are handled by our payment provider (Explodely), crypto payments by NOWPayments. We never see your card details or your wallet’s keys.
• Anything from inside the extension for advertising. Ad measurement happens only on this website (see Cookies and ad measurement); the extension never sends data to Google, Meta or Microsoft.

What we store

• Email address: to deliver your license, send billing and important service messages, and answer support requests.
• The email you start the free trial with. When you press “Start free trial”, we ask only for your email. We use it to create your license and email you your key and messages about your trial (for example that it is about to end, with a link to choose a plan), and store it with the plan you looked at, the language of the page, whether you are in the EU/EEA, UK or Switzerland, your cookie choice at that moment and, if you allowed cookies, your IP address and browser user agent. With or without cookies we also note, for every signup, the country your connection comes from (two letters, as our network provider Cloudflare reports it), the kind of device (iPhone, Android phone, tablet or computer) and whether the page was opened inside an app’s built-in browser (such as Facebook, Instagram or TikTok). These three are worked out on our server from the request your browser sends anyway; the user agent itself is not stored for this, and we use them only in totals (for example, how many signups from in-app browsers go on to activate). To keep it to one free trial per person we check whether the email already has a SnipeBid key (if so, we email you that key again instead) and may refuse temporary inbox addresses. If you allowed cookies, the email is also remembered in your browser to fill in the form next time (opting out removes it). The email then stays with your license like any other license email.
• The email you enter before checkout. When you add an extra EA account, we ask for your email first. We pass it to our payment provider’s checkout so the form is already filled in, and store it with the language of the page, whether you are in the EU/EEA, UK or Switzerland, your cookie choice at that moment and, if you allowed cookies, your IP address and browser user agent. If you don’t finish the checkout, we may send you one reminder email about an hour later, never more, and only if you allowed cookies on this site or are outside the EU/EEA, the UK and Switzerland. Every reminder has an unsubscribe link that stops it for good. We don’t send it if you already have a SnipeBid license. If you allowed cookies, the email is also remembered in your browser to fill in the form next time (opting out removes it). These entries are deleted after 90 days.
• Which creator sent you. If you open this website through a creator’s link (an address with ?c= and the creator’s code), your browser remembers that code for 30 days (local storage and a first-party cookie named sb-creator, never shared with anyone else). When you start a free trial or a crypto order, the code is sent with it and we note on your license which creator brought you, so we can pay that creator their commission when you subscribe. It holds nothing about you besides the code and when you first opened the link; clearing your browser’s site data removes it. Visits through creator links are counted in aggregate only, so creators can see how their link performs: per day the number of visits and unique visitors, the landing page and the referring site’s name. No cookies and no personal data: to count unique visitors your browser keeps a random ID in local storage (sb-vid), and the server keeps only daily totals, never that ID or your IP address.
• Which site or link you came from. Your browser remembers which site or link brought you here: the referring website (its name only, not the full address), campaign tags in the link (such as utm_source or utm_campaign), the page you landed on, when, the creator or referral code if the link had one and, for ad links, only that an ad click ID was present, never the ID itself. It is kept in your browser’s local storage (sb-src for your first visit, kept for 90 days, and sb-src-last for the most recent one) and both are sent with a free trial signup or a purchase, so we know which channels work. No cookies, nothing is shared with third parties, nothing is kept in browsers that opted out of measurement with ?notrack=1, and clearing your browser’s site data removes it.
• Which email links get opened. The links in our emails about your key and your free trial carry campaign tags (utm_source=email and the name of the email) and a short random code that stands for that one email (sbm=…). When such a link opens a page on this website, the page removes the code from the address bar right away and tells our server once which email’s link was opened and on which page, so we know which emails help. No cookie, no IP address stored, nothing sent in browsers that opted out of measurement with ?notrack=1; the code isn’t passed to anyone else, and these records are deleted after 90 days. Our emails contain no tracking images, and the links go straight to our pages (no redirect through a tracking service).
• License key and its status, plan and renewal dates.
• Crypto orders. When you pay with crypto, we store the order ID, the product and plan, the coin, the amount, the payment status and the email you entered with the order, so we can deliver or extend your license once the payment confirms, email you before a prepaid plan ends (with a one-click renew link) and answer questions about the order. We don’t send your email to NOWPayments.
• An identifier of your linked EA account (a hashed or internal account ID, never your password) so a license is used on the right account and a free trial is used once.
• Usage counters: searches, buys and coins spent per day and per hour, so your limits work across every browser and PC. If you use the account dashboard, also trade statistics the extension reports, such as buys, sells and profit.
• Your SnipeBid settings (cloud profile): settings, targets and filters, so they load on a new browser or after a reinstall.
• Leaderboard nickname and visibility. Every new license gets a random anonymous nickname (like “Sniper-4821”), never your EA name, and is shown on the public leaderboard by default. The extension tells you this once when you activate it. Publicly, only the nickname and trading totals for the period (profit, number of flips, best flip) are shown. You can rename yourself or turn it off at any time in the extension’s Settings (“Show me on the leaderboard”) or on My SnipeBid; once off, it stays off until you turn it back on yourself. Refunded, revoked and expired licenses are never shown. The site also shows overall numbers (such as price updates in the last hour or traders active today) that are totals only and never identify anyone.
• Phone remote. If you link a phone (Settings → Phone remote in the extension, or “Use this device as remote” on My SnipeBid), we store the name you give the device, when it was linked and last seen, a hash of its access token (the token itself stays on the phone), its notification choices and, if you turn notifications on, the push address your browser gives us (Apple, Google, Mozilla or Microsoft deliver the notifications; their content is encrypted end-to-end so they can’t read it). While a phone is linked, the extension reports the bot’s latest status (running or paused, today’s counters, the last Log lines) and events such as sales, which we keep only to show them on your phone and to send your notifications; commands and events are deleted after a day or two, devices 30 days after you unlink them. My SnipeBid (/account/), where the phone remote lives, loads no analytics or ad trackers and sets no cookies.
• Anonymous market price reports: prices the extension already sees while trading (sale prices, finished auctions, cheapest Buy Now). These are used to show live prices and are not linked to you publicly.
• Creator program applications: name, email, channel links, audience size, Explodely username (optional) and your message, used only to review your application and run the program.
• Contact form messages: your name, email, topic and message are sent to our mailbox so we can reply.
• Extension setup steps. When you first install the extension, it creates a random installation ID (a random number, not your EA account, email or license key) and sends us the setup steps you reach: installed, panel opened, signed in to the EA Web App, key screen shown, key entered and whether it worked (with a short reason code when it didn’t). Each step goes once, with the extension version, your browser’s language and the date; we also note the country your connection comes from. When you activate a key, the installation ID is sent along once and linked to that license, so we can see which setup steps lead to a working license. Updates of an older installation send none of this, and it is turned off together with the anonymous error reports (Settings → Safety, “Send anonymous error reports”). Removing the extension deletes the ID.
• Anonymous error reports: when something in the extension fails, it sends the error type, the feature, the extension version and a short message with numbers, coin amounts and account details removed. They help us fix problems fast, are kept for 30 days, and can be turned off in Settings → Safety (“Send anonymous error reports”).
• Technical logs: our servers keep short-lived logs (such as IP address and request time) for security and to prevent abuse.

Android app

The SnipeBid Android app opens EA’s FC 27 Web App with SnipeBid built in. What it stores and sends:

• On your phone. The extension’s settings and your license session are stored on the phone, in the app’s private storage, which other apps can’t read. Its built-in browser also keeps EA’s own login cookies there, so you stay signed in to the Web App. Uninstalling the app removes all of it.
• Our servers. The app talks to the same SnipeBid servers as the extension, with the same data described above (license, usage counters, cloud profile, price reports and, if turned on, anonymous error reports).
• Updates. Installed from Google Play, the app is updated by Google Play. The APK from our website checks snipebid.app for new versions when it starts and every few hours. That request carries only what any download needs (the app and Android version, and your IP address in our technical logs) and no personal data.
• Setup steps. The app sends us an anonymous app ID (a random number created when you first open it) and setup-step events (first open, onboarding done, signed in to the Web App, license active, first bot start), each with the app version, Android version and app language, so we can fix setup problems. They contain no personal data: no license key, no EA account, no device or advertising ID. Uninstalling the app (or clearing its data) deletes the ID.
• No ads, no analytics. The app has no advertising, no analytics SDKs and no crash-reporting service, and it doesn’t use the website’s Google, Meta or Clarity measurement.
• EA’s Web App. The Web App inside the app is EA’s own website: you sign in on EA’s own login page, and EA’s privacy policy applies to what you do there. SnipeBid doesn’t read or store your EA password.
• Permissions. The notification permission and the battery exemption are used only to keep the bot running in the background and to show its status with a Stop button. The APK from our website also asks to install its own updates. The app doesn’t ask for your contacts, location, camera or files.

Cookies and ad measurement

This website uses Google Ads measurement (to see which ads bring visitors and sign-ups) and Microsoft Clarity to understand how visitors use the site (clicks, scrolling and anonymised session recordings). Clarity sets its own cookies, masks what you type into forms, and is operated by Microsoft under its privacy statement. The account page stores your license key in your browser’s local storage only if you sign in there, and “Sign out” removes it. The extension stores its settings locally in your browser and in your cloud profile.

Google Ads click id. When you arrive from a Google ad, the link carries Google’s ad click id (gclid, or gbraid / wbraid on iPhones). If you have allowed cookies, your browser keeps it in this site’s local storage (sb-gclk, at most 90 days) and, when you start the free trial, sends it to our server, which keeps it with your trial. When your trial is activated (the first time you connect your key to an EA account), we report that to Google Ads from our server: Google’s scheduled import fetches a file with the click id, the time of the activation and the name of the conversion, and nothing else (no email, name or IP address). We keep the click id for up to 90 days after your click and delete it sooner once it can no longer be reported. Without your consent the click id is not kept in your browser, not sent with your trial and never reported; declining or opting out removes it from your browser. Google is the controller for its own use of this data under its privacy policy.

Meta (Facebook) Pixel and Conversions API. To measure which Facebook and Instagram ads bring visitors, trials and sales, this website uses the Meta Pixel, which sets Meta cookies (_fbp, and _fbc when you arrive from a Meta ad) and reports page views, product views, checkout clicks and completed sign-ups to Meta. We also send these events from our server (Meta Conversions API) so they are counted once and reliably. With them we send the Meta cookie values, your IP address and browser user agent, the page and ad campaign (UTM) you first came from, and, after a purchase, your email address, name, and the ZIP code, country and phone number your payment provider gives us, all but the IP address, user agent and cookie values hashed (SHA-256) before they leave our server, plus the product and amount. Crypto orders are measured the same way: the Purchase event is sent from our server once the payment confirms, under the same cookie choice as the rest of this section. For creator program applications we send a Lead event with your hashed email and name. When you start the free trial or enter your email before checkout and have allowed cookies, we send a Lead event with your hashed email, and your hashed email is added to that trial’s or checkout’s events (the Pixel hashes it in your browser before sending it). For a free trial, a StartTrial event follows from our server only when the trial actually starts, the first time you connect your key to an EA account (not when you sign up), with the time it started and the same details we stored when you signed up (your hashed email, the Meta cookie values, your IP address and browser user agent, the page and campaign); it is sent at most once per trial, and never if you didn’t allow cookies. Meta uses this to match events to Meta accounts; it is the controller for its own use of the data under its privacy policy.

Your choice. In the EU/EEA, the UK and Switzerland we ask first: Google Ads, Clarity and the Meta Pixel stay off (nothing is loaded from Meta and no Meta cookie is set) until you press “Accept” in the cookie notice, and our server sends nothing to Meta about your visit or a free trial or checkout you started while it was off. If you started a free trial or a checkout before choosing, your browser keeps only its random reference number, in that browser tab (session storage), and nothing else happens with it. If you then press “Accept” (in the cookie notice, on the thank-you page or in “Your privacy choices”) in the same tab within 7 days, we report that order (free trial or purchase, including a crypto order) to Meta as described above, with the time it happened (for a free trial, the StartTrial event is sent once the trial has started, with the time it started); if you decline, or never choose, it is never reported and the reference is deleted when you close the tab or decline. Your choice is saved in your browser for 12 months in a small first-party cookie (sb-consent) that also applies on our subdomains such as squad.snipebid.app, so you only choose once. Elsewhere there is no cookie notice: analytics and ad cookies are on by default, and you can opt out at any time with “Your privacy choices” (in the footer of every page, or the button below). We work out your region from your connection’s country as reported by our network provider (Cloudflare) and, if that is not available, from your browser’s time zone; if the region is unknown we treat you as being in the EU. Opting out (or pressing “Decline”) turns off Google Ads measurement, Clarity and the Meta Pixel, removes the Meta cookies, the stored first-visit details and the stored Google ad click id, and is remembered in your browser; you can change your choice there in every region. Purchases made without visiting this website first (for example through a creator’s link straight to the checkout) may be reported to Meta with the hashed email, name, ZIP code, country and phone number only.

Your privacy choices

Why we use it

We use this data to provide the service you asked for (licensing, cloud profile, limits, live prices, support), to keep it secure, and to meet legal and accounting obligations. We do not sell your data. For ad measurement on this website (not in the extension) we share the limited data described under Cookies and ad measurement with Google and Meta, based on your consent where the law requires it.

Who else processes it

• Our payment provider (Explodely), for checkout, billing and tax. The email you enter before checkout is passed to it to fill in the checkout form.
• NOWPayments (NOWPayments.io), our crypto payment processor, for crypto payments. We send it only the order ID, the amount and a short description of what you are buying, not your email. On its payment page you choose the coin and may enter a wallet address or refund details; that information goes to NOWPayments directly and is handled under its own privacy policy.
• Our hosting and network providers, which run our servers and protect them from attacks.
• Our email provider, for the mailbox that receives contact messages.
• Microsoft (Clarity), for anonymised website usage analytics.
• Google (Google Ads), to measure which ads bring visitors, sign-ups and activated trials.
• Meta Platforms (Meta Pixel and Conversions API), to measure which Facebook and Instagram ads bring visitors, trials and sales.

How long we keep it

We keep account data while your license is active and for a reasonable period afterwards for billing and legal reasons. Usage counters and logs are kept only as long as they are useful. Emails entered before a checkout are deleted after 90 days. You can ask us to delete your data at any time, unless we must keep it by law.

Your rights

You can ask for a copy of your data, correct it, delete it, or object to its use. Email [email protected] from the address linked to your license. Depending on where you live, you may also have the right to complain to a data protection authority.

Delete your data

This applies to SnipeBid (the extension, this website and the SnipeBid Android app, also called “SnipeBid – Trading Assistant” on Google Play, by SnipeBid / 15KM LLC). To delete your data:

1. Email [email protected] with the subject “Delete my data”, from the email address linked to your license, and include your license key if you have it.
2. We confirm by email and delete your data within 30 days.

What we delete: your license and its linked EA account ID, usage counters, trade history and leaderboard entry, your cloud profile (settings, targets, filters, squads), pauses, phone-remote devices, error reports linked to your license, and free-trial and email records. What we keep: records of payments and invoices, for as long as tax and accounting law requires (usually up to 10 years), and nothing else. Short-lived server logs expire on their own. On your phone, uninstalling the app (or clearing its data) removes everything the app stored, including its anonymous app ID; setup events already sent with that ID are anonymous and not linked to you or your license.

Changes

If we change this policy, we will update the date above and, for material changes, let you know.