Legal
Privacy Policy
Last updated: October 28, 2026. This site is operated from Sweden and complies with GDPR (EU) 2016/679.
Who we are
snakediet.org is an unofficial fan community website. It is not affiliated with Cole Robinson or snakediet.com. The site is operated by a private individual based in Sweden.
What data we collect
- Account data: username, email address, and a hashed (bcrypt) password when you register.
- Fasting logs: start/end times and duration of fasts you choose to record.
- Weight logs: weights you voluntarily enter.
- Usage data: basic server logs (IP address, browser, pages visited) kept for up to 30 days for security purposes.
- Session cookies: a single session cookie to keep you logged in.
What we do NOT do
- We do not sell or share your data with third parties.
- We do not run advertising or tracking scripts.
- We do not use Google Analytics or any third-party analytics that identify you personally.
- Anonymous visit statistics: we count page views with our own cookie-free system. A visit is recorded as the page visited, the referring website, device type (mobile/desktop) and a one-way hash of your IP address and browser that changes every day and cannot be traced back to you or followed across days. No IP address is stored. Visitors who send a "Do Not Track" signal are not counted. Data is deleted after 400 days.
- YouTube videos: embedded videos only load from YouTube (privacy-enhanced mode) after you click play.
Legal basis for processing (GDPR)
We process your data on the basis of contract (to provide the service you signed up for) and legitimate interests (security logs). Optional data like weight logs are processed on the basis of your consent.
Your rights under GDPR
- Right to access your personal data
- Right to correct inaccurate data
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object to processing
To exercise any of these rights, contact us via the contact page. We will respond within 30 days.
Cookies
We use one session cookie (snakediet_sess) strictly necessary for login functionality. No tracking cookies. No third-party cookies.
Data retention
Your account data is kept for as long as your account is active. You may delete your account at any time by contacting us. Server logs are deleted after 30 days.
Data security
Passwords are hashed with bcrypt and never stored in plain text. All connections use HTTPS.
Contact
For privacy-related requests: contact page