Is My Marvel Snap Data Safe with SnapComplete?
Short answer: yes. SnapComplete never sees your Marvel Snap password. You sign in to SnapComplete with Google, Discord, or Twitch, then link your game account via Google or Apple through their official sign-in pages (the same pages the Marvel Snap app uses). Your collection, matches, and cosmetics sync to Supabase servers (hosted on AWS in the US). You can unlink the game account or delete everything at any time from Settings. This page covers exactly what gets stored, who can see it, and how to wipe it if you ever want to.
What Gets Stored on Our Servers
When you sign in and sync, a small amount of data moves off your device and into your account on Supabase. The list covers owned cards, variants, avatars, titles, emotes, and card backs; per-card progression (splits, mastery, boosters); currency balances (gold, credits, tokens, boosters); matches if enabled (deck, opponent, cube result, turn-by-turn replay); your email and display name from the provider you signed in with; and settings/preferences (filter defaults, wishlist, planned purchases). Collection data only leaves your device if you sign in. If you use SnapComplete without signing in, everything stays in your browser's localStorage and never touches our servers.
What We Never Store
We never store your Marvel Snap password, your Google or Apple password, credit card numbers (Stripe handles all payment details and we only see subscription status), private messages, friends list, or anything outside your collection scope. Analytics logs your country but not your address or GPS. The Privacy Policy documents every data source in more detail, including what PostHog (our analytics provider) collects.
How Sign-In Works
SnapComplete supports three providers for signing into the site itself: Google, Discord, and Twitch. These only identify your SnapComplete account. They do not link your game collection.
To sync your Marvel Snap collection, you also link a separate game provider: Google Play (if you play on Android or Steam with Google sign-in) or Apple (if you play on iOS with Sign in with Apple). Linking uses the same OAuth flow the game itself uses. You land on Google's or Apple's standard sign-in page, enter your credentials with them (not us), and they return an authentication token. SnapComplete stores the token so it can read your game data, but we never see your game password or your Google/Apple password. You can unlink the game account any time from Settings and Account.
Who Can See Your Data
Nobody sees your personal data by default. Every page that shows owned cards, splits, matches, or currency balances is scoped to your account. Other players cannot view your collection. A few things are visible across the site, but always in aggregate or opt-in form: owner counts on cards/variants/avatars are totals across all synced accounts with no way to trace a specific player; leaderboard rankings show percentile tiers automatically but your name only shows if you are in the top 10 individual spots OR you turn on name visibility as a premium user who reaches the top 10%; community deck stats aggregate win rates across all tracked matches with no individual match detail exposed; match sharing with partner sites applies only to deck compositions, cards drawn, locations, cube values, and win/loss results from matches captured after April 2026, and you can opt out at any time.
Deleting Your Data
Three options, ordered by how much you want to keep: (1) Clear local only: sign out and clear your browser's localStorage. Everything resets without touching the cloud. (2) Unlink game account: removes the stored authentication token and stops all future syncs. Your SnapComplete account and history stay, but no new game data gets pulled. (3) Delete account: email us or use the in-app account deletion flow. We permanently remove your profile, match history, and collection data from Supabase within 30 days. Analytics data tied to your user ID is also purged. Match data shared with partner sites before deletion is not recallable once it has been shared, but we stop sharing new matches the moment tracking is disabled or the account is deleted.
How We Protect the Servers
Supabase handles the database layer: encryption at rest, encrypted connections, and row-level security so your account can only read its own rows. Payments go through Stripe using Stripe Checkout, which means card numbers never touch our servers. Analytics runs through PostHog on US cloud servers. We do not sell data, we do not use advertising cookies, and we do not run third-party ad networks. Everything about what the site does is paid for by the optional $5/mo Premium subscription.
Bot Match Filtering (User Value, Not Detection Details)
Marvel Snap matches you against bots more often than most players realize. SnapComplete filters bot matches out of your deck win rates so the numbers reflect your real competitive performance. You can also toggle the filter to show only bot matches if you want to see how the matchmaker is treating you. How we detect bots is not something we document publicly, because exposing the signals would help bot operators evade them. What matters for you is that the filter works and you can trust your stats.
Questions We Get Asked
Is SnapComplete affiliated with Second Dinner? No. SnapComplete is an independent fan site not affiliated with, endorsed, sponsored, or specifically approved by Second Dinner or Marvel Entertainment. We read Marvel Snap data through the same official sync endpoints the game app uses, but we operate independently.
Can you modify my game account? No. The authentication token we store is scoped read-only. We can see what you own. We cannot spend your tokens, open your packs, or change anything in the game.
What happens if I never sign in? Everything stays local. Your collection, filters, wishlist, and completion planner all work in your browser. Closing the tab without signing in means nothing leaves your device. The trade-off is that you lose cross-device sync, match tracking, and leaderboards.
Do you share my data with third parties? Only match data with opt-in partner sites (see Privacy Policy), Stripe for payment processing, PostHog for analytics, and Supabase for hosting. Those are documented in full on /privacy. We do not sell data to advertisers or resellers.