Privacy Policy

Last Updated: July 22, 2026

This Privacy Policy explains how Kick Turn Solutions LLC, a Colorado limited liability company doing business as "Snowball" ("Company," "we," "us," or "our"), collects, uses, and shares information when you use the Snowball web application, the website at snowball.fast, and related services (collectively, the "Service"). It is part of, and incorporated into, our Terms of Service. If you do not agree with this Policy, do not use the Service.

1. Scope

This Policy applies to information we process about users of the Service in the United States. The Service is intended for users in the United States.

2. Data Blindness Where Possible

We designed the Service to avoid collecting or storing certain personal information on our servers wherever possible:

• Phone numbers — Your phone number is encrypted using Oblivious Pseudorandom Function (OPRF) technology before it is sent to the Service. The same applies to the phone numbers of people you message.
• Address book — Your contacts are stored on your device. To protect against loss if your device clears its local storage, an encrypted backup is also kept on our servers: your contacts are encrypted on your device before they are uploaded, so the Service stores only encrypted data and does not receive your contacts in readable form.
• Your name — Your name is stored locally on your device and is used only as a convenience for composing messages that you send directly from your device.

3. Information We Collect

Information you provide:

• Email address (optional) — Though an email address is not required to use the Service, it is necessary to register a new topic. For accountability purposes, any topic that you register will display your email address, which means your address will be discoverable in the list of topics maintained by the Service. The only exception is topics you designate as "by invitation only," which limit visibility to those who have a copy of your invite link.
• Approximate location (opt-in) — If you opt in, we collect location at the ZIP-code level. We use it to aggregate geographic statistics on the use of the Service, and to help users find local topics. Sharing this information is optional; you can decline, and you can withdraw your consent at any time.
• Push-notification token — if you enable notifications, a device or browser token so we can deliver them. You can turn notifications off at any time in your device or browser settings.

Information collected automatically:

• Authentication cookie — a single strictly necessary, http-only cookie containing a JSON Web Token (JWT) that keeps you signed in. We do not use analytics, advertising, or cross-site tracking cookies.
• Server logs — our hosting and push-delivery providers may automatically record technical information such as IP address, browser type, and timestamps for security and reliability.

User-generated content:

• Topics — The Service stores basic information about the topics that you register, including name, type, description, and a representative image.
• Message logs — The Service records an abstract log of the messages that you send. The log deliberately excludes the actual message content and the contact information of the recipients. The phone numbers of the sender and receiver are encrypted with OPRF.

4. How We Use Information

We use the information above to:

• provide, operate, and maintain the Service;
• let you author and manage topics and secure your profile, if you provide an email address;
• authenticate you and keep you signed in;
• enable you to send messages to recipients you choose, using OPRF-protected phone numbers;
• deliver push notifications you have enabled;
• aggregate geographic statistics on the use of the Service and help users find local topics, if you opt in to share approximate location;
• communicate with you about the Service, including security and administrative messages;
• protect the security and integrity of the Service and prevent fraud or abuse; and
• comply with legal obligations and enforce our Terms.

We do not use your information for third-party advertising, and we do not sell your information.

5. Cookies

We use only one cookie: a strictly necessary, http-only authentication cookie (a JWT) that keeps you logged in. It is not used for analytics, advertising, or tracking you across other sites. Because it is essential to signing in, the Service will not function properly if it is blocked. We do not currently use any analytics or advertising cookies or similar tracking technologies.

6. How We Share Information

We do not sell or rent your personal information. We share information only as follows:

• Service providers: vendors that help us operate the Service (for example, text messaging and emailing services for identity verification, hosting, and push-notification delivery), who may process information only on our behalf and under contract.
• Legal and safety: when we believe in good faith that disclosure is necessary to comply with the law or legal process, to enforce our Terms, or to protect the rights, property, or safety of any person.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

Because your name stays on your device, your address book is uploaded only as a backup that is encrypted on your device, and phone numbers are protected with OPRF before they reach us, we do not share your contacts and cannot disclose recoverable phone numbers.

7. Push Notifications

If you enable push notifications, we use your notification token solely to deliver them. You can disable push notifications at any time through your device or browser settings; doing so stops further notifications.

8. Data Retention

We keep your information for as long as your profile is active or as needed to provide the Service, and thereafter as needed to comply with our legal obligations, resolve disputes, and enforce our agreements. We delete profile data within 30 days of profile closure. When information is no longer needed, we delete or de-identify it.

9. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect your information. These include encrypting phone numbers with an Oblivious Pseudorandom Function (OPRF) before they reach the Service, keeping your name on your device rather than on our servers, storing your address book only as a backup that is encrypted on your device before upload, transmitting data over encrypted connections, and storing your authentication token in an http-only cookie. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10. Your Privacy Rights (Colorado)

If you are a Colorado resident, the Colorado Privacy Act (CPA) gives you the right to: confirm whether we are processing your personal data and access that data; correct inaccuracies; delete your personal data; obtain a portable copy of the data you provided to us; and opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or certain profiling. We do not sell personal data, use it for targeted advertising, or engage in such profiling.

To exercise these rights, contact us at legal@snowball.fast. We will respond within the timeframe required by the CPA and will not discriminate against you for exercising your rights. If we decline your request, you may appeal by replying to our decision; if we deny your appeal, you may contact the Colorado Attorney General.

11. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users under 18 (or the age of majority where they live) may use the Service only with the consent and supervision of a parent or legal guardian, consistent with our Terms of Service. If you believe a child under 13 has provided us personal information, contact us and we will delete it.

12. Sensitive Information

We do not require you to provide sensitive personal information (such as information that reveals political opinions) to use the Service. Our data-blindness design — OPRF-protected phone numbers, on-device storage of your name, and address-book backups that are encrypted on your device before upload — is intended to reduce the sensitivity of the information we hold.

13. Changes to This Policy

We may update this Policy from time to time. If we make changes, we will post the updated Policy and revise the "Last Updated" date above, and, for material changes, provide reasonable notice through the Service or by email. Your continued use of the Service after the updated Policy takes effect constitutes acceptance of the changes.

14. Contact Us

If you have questions about this Policy or our privacy practices, contact us at:

Kick Turn Solutions LLC dba Snowball 3510 Endicott Dr, Boulder, CO 80305 USA Email: legal@snowball.fast