Privacy Policy

Draft for legal review. This policy has not yet been approved for publication.

Effective date: [Needs confirmation: effective date]

This Privacy Policy explains how Where2Ski ("we," "us") collects, uses and shares information when you use the Where2Ski website at where2ski.org (the "site"). Where2Ski is operated by [Needs confirmation: legal entity name]. Where2Ski is a privately operated website, not a nonprofit or a governing body for skiing.

Summary

You can browse the ski directory, search listings, save ski areas and homes on your device, and read guides without an account.
If you create an account, we store your email address, a securely hashed password, and the ski areas, homes and searches you save.
If you turn on email alerts, we send them by email. We do not send text messages or push notifications.
If you contact a listing agent through the site, your contact details and message go only to that listing's agent or brokerage.
If you submit a ski place, suggest a correction or claim a ski area, we use what you send to review it.
The only cookie we set keeps you signed in. There are no advertising cookies, and no analytics service is installed.
We do not sell your personal information.
You can download your data or delete your account at any time in your account settings.

Information we collect

Information you give us

Account information. Your email address and a password, and your name if you choose to give it. We store passwords only in hashed form. If you turn on two-factor authentication, we store the information needed to check your codes.
Saved ski areas, homes and searches. If you are signed in, we store the ski areas you save, the homes you save and the searches you save with your account so you can use them on any device.
Alert preferences. Which searches you want alerts for, which changes you want to hear about, and how often.
Inquiries to listing agents. What you enter in a listing's contact form: your name, email address, optional phone number, message and any tour times you suggest. We also record the listing, who the inquiry was routed to, the consent statement you agreed to, and when you sent it.
Problem reports. When you use the report form, we collect your report and, if you choose to give it, your email address.
Directory submissions and corrections. When you submit a ski place or suggest a correction, we collect the details you send and, if you choose to give it, your email address.
Ski area claims. When you claim a ski area, we collect your name, email address, your role at the place, an optional work phone number, and the information you give us to verify that you represent it.
Newsletter. If you sign up, your email address and a record of your consent.
Messages to us. What you send through the contact page.

Information stored on your device

Saved lists without an account. If you save ski areas, homes or comparisons without signing in, the lists are kept in your browser's local storage on that device. They are not sent to us unless you sign in, at which point we add them to your account.
Tool entries. Figures you enter in the trip planner, ownership budget, mortgage calculator and checklist stay in your browser and are not sent to us.
Page state. The site may keep small, temporary values in your browser so pages work as expected.

Location

"Near me." If you choose to share your location, your browser asks your permission first. We round the location to about two decimal places (roughly a kilometer) and put it in the page address to show nearby results. We do not store it with your account.
Typed places. If you type a town or ZIP code instead, we look it up on our own server using public U.S. Census place data. We do not send it to an outside service, and we do not store it.

Page addresses, including a rounded location, can appear in your browser history and in standard server logs.

Information collected automatically

Sign-in cookie. If you sign in, we set one cookie to keep you signed in. See "Cookies" below.
Analytics. The site doesn't currently use an analytics service. If we add one, it will be a privacy-focused tool without advertising cookies, and we'll update this notice first.
Links to official ski area sites. When you follow a link from a directory entry to a ski area's official website, we count the click with only the ski area, the kind of link and the time. We do not record who clicked, and the link does not pass your search or location to the ski area's site.
Server logs. Our servers record technical information such as IP address, browser type and pages requested, for security and troubleshooting. We also use limited technical information to prevent spam and repeated form submissions.

How we use information

We use information to:

Provide the site, including the directory, search, saved lists, saved searches and alerts
Send your inquiry to the listing agent or brokerage shown on the form
Send email alerts and account emails, such as email verification and password resets
Send the newsletter, if you signed up
Review problem reports, directory submissions, corrections and ski area claims, and contact you about them if you gave an email address
Respond to messages you send us
Keep the site secure and prevent abuse

Directory submissions and claims are used only for review. We don't contact ski areas or anyone else on your behalf.

With listing agents and brokerages

When you submit the contact form on a listing, the form shows who will receive your inquiry before you send it. We send your contact details and message to that listing's agent, using the email address on file in the MyStateMLS roster. If no agent email is on file, it goes to the listing brokerage. If the brokerage has no email on file either, our staff forward it to the listing brokerage.

Your inquiry goes only to that recipient, and we don't sell it. Once the agent or brokerage receives your information, their use of it is governed by their own policies and applicable law.

With service providers

We use service providers to run the site. These are expected to include:

Hosting and database providers (Vercel and Turso) to store and serve the site and your account data
A transactional email provider (Resend) to send alerts, account emails, the newsletter and your inquiries to listing agents

Email delivery is not yet set up. Until it is, inquiries and alerts are saved and visible to our staff but are not emailed. [Needs confirmation: email provider configured before launch]

These providers process information on our behalf.

Map tiles

Maps load tiles from OpenFreeMap, which uses OpenStreetMap data. When a map loads, your browser requests tiles from that service, which receives standard request information such as your IP address and the map area being viewed.

Weather information

Our servers request forecasts and alerts from the National Weather Service for a ski area's mapped point. Your browser does not contact the National Weather Service for this, and we do not send any personal information with these requests.

Listing data

Listing information comes from MyStateMLS and its participating brokerages. We do not send your personal information to MyStateMLS as part of displaying listings.

Legal and safety reasons

We may disclose information if required by law, or to protect the rights, safety or property of our users, the public or Where2Ski.

We do not sell personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Cookies

We use one cookie, and only if you sign in:

Sign-in session, so you stay signed in

We do not use advertising or cross-site tracking cookies. You can block or delete cookies in your browser, but if you do, signing in will not work. You can still browse and save lists on your device.

You choose which searches send alerts, what changes they cover, and how often. Every alert and newsletter email includes a way to unsubscribe, and you can change or turn off alerts in your account settings at any time.

Your choices and rights

Access and correction. View and update your account information in your account settings.
Download. Download a copy of your data from your account settings, including your account details, saved ski areas, saved homes, saved searches and inquiries you sent while signed in.
Deletion. Delete your account in your account settings. This removes your saved lists, saved searches and alert settings. Inquiries you already sent to listing agents remain with those agents.
Other requests. To ask about the information we hold about you, including directory submissions or claims, contact us through the contact page. We may need to verify your identity.

Depending on where you live, you may have additional rights under state law. [Needs confirmation: state-specific rights sections required by counsel]

Data retention

We keep account information while your account is active. After you delete your account, we delete or de-identify your information within a reasonable period, except where we need to keep it for legal, security or backup purposes. Directory submissions, corrections and claims are kept as part of the record of how an entry was reviewed. [Needs confirmation: retention periods]

Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections and hashed passwords. No system is completely secure, so we cannot promise absolute security.

Children

The site is not intended for children, and we do not knowingly collect personal information from children under 13. [Needs confirmation: minimum age for accounts]

Changes to this policy

If we make material changes, we will update the effective date and, where appropriate, notify account holders by email.

Contact

For privacy questions or requests, contact us through the contact page.