Security
Private workspaces, narrow access.
Snip is designed so each signed-in administrator can access only their own links and results.
Tenant separation
Every account receives a private workspace. The service derives that workspace from the verified login and applies a server-side workspace boundary to every customer data operation. Browser input cannot select another workspace, and cross-workspace requests are handled like unknown records.
Operator boundaries
Platform operators can disable or restore accounts and review those actions. That authority cannot browse customer workspaces through Snip. Infrastructure access is reserved for limited operational recovery and is not part of routine administration.
Data protection
Cloudflare D1 data is encrypted at rest and connections are protected in transit. Login sessions expire, can be revoked, and are stored only as one-way hashes. Raw network and browser details have bounded retention, while expired links and their results are deleted.
Responsible reporting
Contact the Snip operator privately if you find a security or privacy concern. Do not include candidate data in public reports.