Is My Marvel Snap Data Safe with SnapComplete?

Short answer: yes. SnapComplete never sees your Marvel Snap password. You sign in with Google, Apple, Discord, or Twitch, then link your game account through Google's or Apple's official sign-in pages, the same ones the Marvel Snap app uses. Your collection, matches, and cosmetics sync to Supabase servers hosted on AWS in the US, and you can unlink the game account or wipe everything from Settings whenever you want. This page covers what gets stored, who can see it, and how to delete it.


What Gets Stored on Our Servers

Signing in and syncing moves a defined set of data off your device into your Supabase account:

Data What It Is Why It's Stored
Owned cards, variants, avatars, titles, emotes, card backs The items your game account shows you own Powers your collection tracker, leaderboards, and completion timeline
Splits, mastery, boosters Per-card progression values from the game Per-card leaderboards and split/mastery rankings
Currency balances Gold, Credits, Tokens, Boosters Feeds the completion timeline and bundle rankings
Matches (if enabled) Deck, opponent, cube result, turn-by-turn replay Powers your match history and personal deck stats
Your email and display name From the provider you signed in with Account identification
Settings and preferences Filter defaults, wishlist, planned purchases, UI preferences Syncs your choices across devices

Collection data leaves your device only if you sign in. Use SnapComplete signed out and everything stays in your browser's localStorage, never touching our servers.


What We Never Store

Not stored Why
Your Marvel Snap password You sign in through Google or Apple; we only see the authorization token
Your Google or Apple account password Same reason, we never see it
Credit card numbers Stripe handles all payment details. SnapComplete sees subscription status, not card numbers
Private messages, friends list, or anything outside your collection We only read your collection and game data and store nothing else from your game account
Location tracking beyond country/region Analytics logs your country but not your address or GPS

The Privacy Policy documents every data source in more detail, including what PostHog (our analytics provider) collects.


How Sign-In Works

Two separate sign-ins do different jobs. The first identifies your SnapComplete account:

That sign-in does not touch your game collection. To sync it, you link a separate game provider:

Linking runs the same OAuth flow the game uses. You land on Google's or Apple's standard sign-in page, enter your credentials with them rather than us, and they hand back an authentication token. SnapComplete stores that token and uses it only to read your game data: we never see your game password or your Google or Apple password.

Unlink the game account any time from Settings > Account. Unlinking deletes the stored token and stops all future syncs.


Who Can See Your Data

Nobody sees your personal data by default. Every page that shows owned cards, splits, matches, or currency balances is scoped to your account. Other players cannot view your collection.

A few things surface across the site, but always as aggregates or opt-in:

Your match history, replays, and collection stay private unless you deliberately share a replay link. A replay link is the only user-generated URL anyone can open, and you choose which matches get one.


Deleting Your Data

Three options, ordered by how much you keep:

  1. Clear local only: Sign out and clear your browser's localStorage. Everything resets and the cloud stays untouched.
  2. Unlink game account: Removes the stored authentication token and stops all future syncs. Your SnapComplete account and history stay; no new game data gets pulled.
  3. Delete account: Email us or use the in-app deletion flow. We permanently remove your profile, match history, and collection data from Supabase within 30 days, and purge the analytics data tied to your user ID.

We can't recall match data already shared with partner sites, but the moment you disable tracking or delete the account, we stop sharing new matches.


How We Protect the Servers

Supabase runs the database layer with encryption at rest, encrypted connections, and row-level security that lets your account read only its own rows. Payments go through Stripe Checkout, so card numbers never reach our servers. Analytics runs on PostHog US cloud servers.

We don't sell data, set advertising cookies, or run third-party ad networks. The optional $5/mo Premium subscription is how we keep the site running.


Questions We Get Asked

Is SnapComplete affiliated with Second Dinner? No. SnapComplete is an independent fan site not affiliated with, endorsed, sponsored, or specifically approved by Second Dinner or Marvel Entertainment. We read Marvel Snap data through the same official sync endpoints the game app uses, but we operate independently.

Can you modify my game account? SnapComplete never modifies your game account. It only ever reads your data and writes nothing back to the game, and there is no code anywhere in the app that spends currency, opens packs, changes cosmetics, or deletes anything.

We reworded this answer. The previous version called the sign-in token read-only. The reality is that Marvel Snap does not publish official documentation for its game API, so we cannot verify everything the sign-in token could do. Therefore rather than claim a limit we cannot confirm, we describe exactly what SnapComplete does with it: read your data, and nothing else.

What happens if I never sign in? Everything stays local. Your collection, filters, wishlist, and completion planner all run in your browser, and closing the tab leaves nothing behind on our end. The trade-off: no cross-device sync, no match tracking, no leaderboards.

Do you share my data with third parties? Only match data with opt-in partner sites (see Privacy Policy), Stripe for payment processing, PostHog for analytics, and Supabase for hosting. Those are documented in full on /privacy. We do not sell data to advertisers or resellers.