Privacy Policy

Snowthere ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit snowthere.com.

Controller: Snowthere / Tom Meredith, California, United States. Contact: privacy@snowthere.com

If you are in the EEA, UK, or Switzerland, we process personal data as described below and honor the rights in the GDPR / UK GDPR. If you are a California resident, we also honor the CCPA / CPRA.

Information We Collect

Information You Provide

• Email address — when you subscribe to the newsletter or submit a data-rights request
• Quiz responses — when you use the resort matching quiz (used to rank resorts for you; not used to identify you)
• Messages — when you contact us or report an issue

Information Collected Automatically

• Device and usage data — browser type, operating system, pages viewed, approximate location from IP
• Server logs — IP address, user agent, and request path, retained for security and abuse prevention
• Cookies and similar technologies — only as described in the Cookie Policy below

We do not ask children to create accounts. The site is for adults planning family trips.

Legal Bases (GDPR / UK GDPR)

• Consent (Art. 6(1)(a)) — newsletter emails; Google Analytics; Microsoft Clarity if configured; Pinterest tag
• Legitimate interests (Art. 6(1)(f)) — operating and securing the site, answering support requests, preventing abuse
• Legal obligation (Art. 6(1)(c)) — retaining records needed to handle a rights request or a legal claim

You can withdraw consent at any time without affecting processing that already happened. Withdrawal is as easy as the original choice: use Cookie settings in the footer, unsubscribe from emails, or email privacy@snowthere.com.

How We Use Your Information

• Send the newsletter you asked for
• Show resort matches from the quiz
• Understand, with your consent, which pages help families
• Measure Pinterest Pins, with your consent
• Respond to inquiries and data-rights requests
• Keep the site secure and meet legal duties

Cookie Policy

Optional cookies stay off until you opt in. Choosing Decline optional keeps analytics and marketing off. The preference cookie that stores that choice is essential.

You can change your mind any time with Cookie settings in the footer.

Essential cookies

Required for the site to work, including remembering your cookie choice (snowthere_cookie_consent, 12 months, SameSite=Lax; Secure).

Analytics cookies (Google Analytics 4 and Microsoft Clarity)

Set only after you accept analytics. We enable IP anonymization in Google Analytics. If Microsoft Clarity is configured, it records session replays and heatmaps after the same consent. Google and Microsoft may process data in the United States. See Google's Privacy Policy and Microsoft's Privacy Statement.

Analytics data is kept for 26 months in Google Analytics.

Marketing cookies (Pinterest)

Set only after you accept marketing. This is the Pinterest tag (ID 2613199211710) used to measure Pins and build an audience. Pinterest may process data in the United States. See Pinterest's Privacy Policy.

If your browser sends Global Privacy Control (GPC), we treat it as an opt-out of sale/share and keep marketing cookies off. You can still allow analytics if you want.

We do not load Google Analytics, Microsoft Clarity, or Pinterest until the matching category is on. A "Decline" choice is a real decline.

Third-Party Processors

• Vercel — website hosting and CDN (United States)
• Supabase — database for resort content, newsletter list, and data-rights requests (United States, AWS us-east-2)
• Google Analytics — optional usage analytics (United States)
• Microsoft Clarity — optional session replay and heatmaps (United States; only if configured)
• Pinterest — optional marketing measurement (United States)
• Resend — transactional and newsletter email (United States)

We do not sell your personal information for money.

Sale and Sharing (California / CPRA)

We do not sell personal information. Optional advertising measurement (Pinterest) and, depending on configuration, analytics can count as sharing for cross-context behavioral advertising under the CPRA.

• Opt out of sale/share: Decline optional cookies, open Cookie settings and turn marketing off, or send GPC. We honor GPC as an opt-out of sale/share.
• Do Not Sell or Share My Personal Information: Cookie settings in the footer is that control. You can also email privacy@snowthere.com.
• Sensitive personal information: We do not use or disclose sensitive personal information for purposes that require a Limit Use right.
• Notice at collection: Categories collected are listed above. We collect them to run the site, send requested emails, and — only with consent — measure usage and Pins.

Your Rights (GDPR, UK GDPR, CCPA/CPRA)

Depending on where you live, you may have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Delete your data
• Port your data in a machine-readable format
• Object to or restrict certain processing
• Withdraw consent
• Appeal a denial of a consumer request (California)
• Lodge a complaint with a supervisory authority (EEA / UK). For Germany, that is your state data-protection authority (Art. 77 GDPR)

Exercise your rights

Use the form on this page for access or deletion, or email privacy@snowthere.com. We will respond within 30 days (GDPR) or 45 days (CCPA/CPRA, extendable once as the law allows). We may need to verify your email.

To stop optional tracking without a form, use Cookie settings. To stop newsletter email, use the unsubscribe link in any message.

International Transfers

Our operators and processors are in the United States. When we transfer EEA/UK/Swiss data to the US, we rely on the EU-US Data Privacy Framework where the vendor is certified, and otherwise on Standard Contractual Clauses (Art. 46 GDPR).

Data Retention

• Newsletter subscriptions: until you unsubscribe
• Data-rights requests: until the request is closed, then as long as needed for legal records
• Analytics: 26 months (Google Analytics default), and only if you consented
• Server logs: 30 days
• Cookie preference: 12 months, then the banner asks again

Security

We use HTTPS in transit, access-controlled databases, and least-privilege service keys. No method of transmission is 100% secure.

Children's Privacy

The site is for adults planning family trips. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If you believe we have, contact us and we will delete it.

AI-Generated Content

Resort and guide copy is drafted with AI assistance and reviewed by humans. That process uses publicly available research and our own database. It does not use your quiz answers or email as training input for a public model.

Contact

Email: privacy@snowthere.com

Changes

We may update this policy. The date at the top of the page is the latest version. Material changes to optional tracking will reset or re-prompt consent where required.