Privacy Notice
Eric Bouchard, a sole proprietor in British Columbia operating the SnafuFinder publicly as edr0id, is responsible for personal information under the service’s control. Privacy questions and complaints are handled by the Privacy Officer at support@edr0idsonline.ca.
Information processed
- The customer or beta participant name and email.
- The public store URL submitted for auditing.
- Audit results and technical observations about that public store.
- Contract or privacy acceptance date and policy version.
- For beta participants, invitation status, platform, private questionnaire ratings, written feedback, and optional permission to be contacted about that feedback.
- PayPal order, capture, amount, currency, invoice, and payment-status identifiers for paid services. SnafuFinder does not receive or store full payment-card details.
- Basic request information used for security, rate limiting, and diagnosis, such as an IP address and limited server logs.
- Support, quote, recovery, cancellation, and refund communications.
Why it is used
Information is used to process payment where applicable, redeem beta invitations, prevent duplicate or unauthorized access, run the requested audit, deliver and support the report, improve beta accuracy and usefulness, diagnose failures, handle refunds, and maintain required business records. Beta feedback is private and is not published with a participant or store identity without separate permission.
Anonymous preview telemetry
When someone submits a public storefront URL for a free preview, SnafuFinder retains the submitted public URL and technical audit information so the service can operate, diagnose failures, maintain security and reliability, evaluate Auditor accuracy, identify unreliable checks, and improve product functionality. This may include the audit time and duration, Auditor version and profile, detected ecommerce platform, readiness score and finding counts, individual technical check outcomes and evidence generated from public storefront behavior, DNS/HTTPS/TLS findings, storefront and checkout-entry signals, payment-provider signals, policy-page findings, rendered desktop/mobile journey status, and normalized failure category or failed stage.
Free-preview telemetry does not deliberately include names, email addresses, payment credentials, passwords, private storefront credentials, browser fingerprints, advertising identifiers, keystrokes, or unrelated page contents. Detailed anonymous-preview telemetry is scheduled for automatic deletion after 90 days; cleanup runs when new anonymous telemetry is recorded or the owner telemetry dashboard is read. It is available only through the authenticated owner system and is not exposed through the public preview response.
Service providers
PayPal processes checkout and payment information under its own privacy terms. Apple iCloud Mail or another configured transactional email provider may process the destination email and message when email delivery is enabled. Infrastructure providers may process limited server and security logs.
Consent and choices
The service collects information needed to respond to a service inquiry and provide the requested audit, private link, recovery, support, payment processing, or beta access. A customer who does not provide required checkout information cannot complete a purchase. A beta participant may keep the report without completing the optional questionnaire. A feedback contact does not subscribe anyone to marketing. Consent may be withdrawn for optional or future uses, but withdrawal cannot undo processing already required to complete a transaction or satisfy legal obligations.
Security
Payment and email credentials remain server-side. Private report tokens are stored as one-way hashes, and the recoverable token copy is separately encrypted. Private links keep tokens out of ordinary HTTP request paths. Access is limited to operational need and reasonable safeguards are used, but no system can promise absolute security. Customers should keep report links private.
Retention
Detailed anonymous free-preview telemetry is retained for 90 days. Personal information used to make a decision directly affecting a customer is retained for at least one year where required by British Columbia’s Personal Information Protection Act. Transaction and accounting records may be kept for at least six years from the end of the relevant tax year where required for Canadian tax records. Other identifiable information is deleted or de-identified when it is no longer reasonably needed for report delivery, recovery, support, security, disputes, or another legal or business purpose.
Access, correction, deletion, and complaints
Requests to access or correct personal information, ask about deletion, or challenge compliance can be sent to the Privacy Officer at support@edr0idsonline.ca. Identity may need to be verified before a request is fulfilled. Some records cannot be deleted immediately where continued retention is required by law or reasonably necessary for a dispute or business record.
International processing
PayPal, Apple or another configured email provider, and infrastructure providers may process data outside Canada. Their contractual and technical safeguards apply to their processing.