Your memories are none of our business

Last updated: August 21, 2026

The short version: Unsnap comes in two flavors, and they handle your files differently. The free desktop and mobile apps run entirely on your own device and upload nothing. The online restore on this website is a cloud service: you upload your export to our servers, an automated pipeline restores it, nobody looks at it, and everything is permanently deleted within 7 days.

Which one are you using? If you downloaded an app and ran it on your Mac, PC, or phone, that is the on-device version. If you paid on this website and are uploading zip files from your browser, that is the online restore — keep reading to the "Restore online" section for what happens to your data.

The free desktop app

The desktop app does all its work on your own computer. Your photos, videos, locations, and captions never leave your device. There is no account, no login, and no upload. (This website has no in-browser restore tool that runs locally — the only thing you can do with your export on this site is the online restore described below, which uploads it.)

The app and this website collect anonymous usage analytics (via Aptabase) — things like "a restore was run" or "the download button was clicked" — so we know what's working. Analytics are anonymous, contain no personal data and none of your files' contents, and the desktop app lets you turn them off in its settings.

The mobile app

The Unsnap mobile app is the desktop app's approach on your phone: it reads the export files you pick in your files browser, restores dates, locations, and captions entirely on-device, and saves everything into an "Unsnap" album in your photo library. Your memories never leave your phone. There is no account, no login, and no upload.

The mobile app goes one step further than the desktop app: it has no analytics at all. The app itself makes no network connections — nothing is collected, anonymous or otherwise. The only network activity is the app store's own purchase handling, described below.

It asks for photo-library permission for exactly one reason: creating and filling the "Unsnap" album. Unlocking the full restore is a one-time purchase handled by your platform's app store (for example, Apple's App Store), which processes the payment itself — we never see your payment details, and the purchase adds no data collection to the app.

Restore online (the paid service)

This is the opposite of the apps: it is a cloud service, and it cannot work without your files. When you use the online restore, your browser uploads your Snapchat export zips to our storage, our server unpacks and processes them, and the restored archive is stored there until you download it. To do that we need a few things:

• Your email address — collected by Stripe at checkout. We use it to send you your upload link, job status, and download link. No marketing emails, no mailing list.
• Payment details — handled entirely by Stripe. We never see or store your card number.
• Your export files — the zip files Snapchat gave you, plus the restored archive and report we produce from them. These are stored encrypted at rest in Cloudflare R2 while your job runs and until they auto-delete.
• Job records — your email, when your job was created, its status, and a summary of the restore report (counts and warnings, not your media), so the status page and our failure alerts work. If a restore hits a problem, the alert we send ourselves includes your email and up to twenty of the export's file names so we can investigate — never the files themselves.

Deletion: 7 days, or sooner if you say so

Uploaded exports and restored results are automatically and permanently deleted 7 days after your restore is ready to download. They are deleted immediately if you press "Delete my files now" on your status page, or if your payment is refunded.

Deletion is enforced twice: our worker purges expired jobs continuously, and the storage bucket itself has a lifecycle rule that removes anything older than 7 days even if our service is down. Your files do not outlive 7 days.

What we keep after that is the job record only — your email, the job's dates and final status, and the report summary — so we can answer support questions and process refunds. If you paid but never uploaded, the job waits for you for 30 days before it is closed. Want the record gone too? Email support and we will delete it.

No human viewing

Nobody at Unsnap looks at your photos or videos. The restore pipeline is fully automated from upload to download link. The only person who ever sees your memories is you.

No AI training

Your media is never used to train any AI model — not ours, not anyone else's. It is used for exactly one thing: producing your restored archive.

Who touches the data (subprocessors)

The online restore runs on a small set of infrastructure providers. Each one sees only what its job requires:

• Cloudflare — hosts this website and stores uploaded and restored files (R2), and provides DNS.
• Railway — runs the server that processes restore jobs.
• Stripe — processes payments and gives us your email address and payment status, never the reverse.
• Resend — delivers our transactional emails (upload link, job ready, failure notices).

Questions

Email support@unsnap.io and a human (the human — it's a one-person project) will answer.