Privacy Policy
Effective August 21, 2026. This Policy explains how Snowpack Labs handles personal information when you use our websites, maps, accounts, Memberships and support channels.
1. Scope and responsible organization
This Policy applies to Snowpack Labs services that link to it (the "Service"). Snowpack Labs is responsible for the personal information described here. It does not cover third-party sites, services or data sources that have their own privacy notices.
Snowpack is a trip-planning information service, not a health-care provider, emergency service or rescue-tracking system. Do not submit medical records or use the Service to communicate an emergency.
2. Notice at collection: information we collect
The categories below describe what the current Service collects and why.
Account and identity information
If you create an account, we collect your email address, optional display name, account identifier, sign-in provider, verification status and account timestamps. Supabase processes authentication and stores your password in protected form; Snowpack does not receive a readable copy. If you choose Google sign-in, Google and Supabase process the credential needed to authenticate you.
Locations, routes and requests
We process map points, longitude and latitude, selected regions, dates, model layers, search queries, route names and route coordinates when you inspect conditions or request route analysis. A GPX file you import is read in your browser; its derived coordinates are sent to Snowpack for analysis. If you save a place, home region or tour while signed in, its name and coordinates are stored with your account.
These are precise map locations you choose and can reveal places that interest you. The current Service does not request your device’s live location through the browser geolocation API, continuously track you, or infer that a selected point is your current physical location.
Membership and transaction information
For Memberships, we receive Stripe customer and subscription identifiers, product and price identifiers, subscription status, billing-period dates, cancellation status and payment-event status. Stripe collects payment-card and billing details directly; Snowpack does not store full card numbers or card security codes.
Communications and submitted content
We collect messages and material you send to support or as forecast and field feedback, which can include contact details, coordinates, photographs, screenshots, trip details and file metadata. Please remove unnecessary personal information and obtain permission before identifying another person or their sensitive location.
Device, network and service-use information
Our servers and service providers automatically process IP address, request date and time, requested URL, referring page, browser or device type, operating system, authentication and security events, response status, and diagnostic information. The Service also processes interactions needed to return requested map tiles, searches, forecasts and route analysis. We do not currently use third-party behavioral advertising or product analytics trackers.
Consent and browser-storage information
For public, no-account access, your browser stores the versions of the Terms and Privacy Policy you accepted and the acceptance time. This prevents the click-through from reappearing on that browser until the documents materially change. Clearing site data, using private browsing, changing browsers or changing devices removes that local record and causes the notice to appear again. Account creation and paid subscription acceptance records are also stored server-side for compliance and dispute resolution.
3. Sources of information
We collect information from you, your browser or device, and service providers involved in authentication, maps, email, payments and hosting. If you sign in with Google, we receive the identity information you authorize Google to provide. We also use public and licensed environmental data to produce forecasts, but those scientific inputs are generally not personal information about Service users.
4. How we use information
- provide maps, model output, searches, route analysis, saved items, accounts and Membership features;
- authenticate users, maintain sessions and protect accounts;
- process subscriptions, prevent duplicate founding claims, provide receipts and manage cancellation;
- respond to support, safety, privacy and legal requests;
- debug, secure, maintain and measure the reliability of the Service;
- test and improve models and product features, including with de-identified or aggregated feedback;
- enforce our Terms, prevent abuse and comply with law; and
- send service, security, legal and Membership communications. We will request any consent required before sending marketing email.
6. When we disclose information
We disclose information only as reasonably necessary to the following recipients:
- Supabase for authentication, account data, saved places and saved tours;
- Stripe for payment, subscriptions, receipts, fraud prevention and billing management;
- MapTiler and its map-data providers for map tiles and geocoding; searches or selected coordinates are sent when you use those features;
- Google if you choose Google sign-in;
- Resend and email infrastructure for account and support email;
- hosting, security and technical vendors that operate and protect the Service;
- professional advisers and authorities when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or establish or defend legal claims; and
- a successor organization in a merger, financing, reorganization, bankruptcy or transfer of all or part of the business, subject to appropriate confidentiality and notice.
We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising and do not use it for targeted advertising as of the effective date. We do not knowingly sell or share personal information of people under 18.
7. Retention
We retain information only as long as reasonably necessary for the purposes described above, including:
- account profiles and saved items while the account is active, until you delete the item or account;
- transient point and route-analysis requests only as needed to return the result, except where captured in short-lived security or server logs;
- billing, transaction and acceptance records for the period required by tax, accounting, automatic-renewal, fraud and dispute laws;
- support and field-feedback records while needed to respond and improve the Service;
- security and request logs for a limited period based on operational and security needs; and
- backup copies until overwritten through the ordinary backup cycle.
Retention may be extended for a legal hold, active dispute or legal obligation. De-identified or aggregated information that cannot reasonably identify you may be retained for model evaluation and research. Before launch, Snowpack will document exact internal schedules for each production system.
8. Your choices and privacy rights
Account Settings lets you update a display name and email, change authentication settings, delete saved items and request account deletion. Stripe’s billing portal lets you manage payment details and cancel a Membership. You can clear Snowpack site data in your browser to remove the no-account acceptance record and cached content.
Depending on where you live and subject to legal exceptions, you may have rights to know or access personal information, obtain a portable copy, correct it, delete it, opt out of sale, sharing, targeted advertising or certain profiling, limit certain uses of sensitive information, withdraw consent, and appeal a denied request. You may also use an authorized agent where law allows. We will not discriminate against you for exercising a privacy right.
Submit a request to privacy@snowpacklabs.com. Describe your request and the email associated with your account, if any. We will verify requests proportionately and may ask for information needed to protect you from fraudulent requests. If a law requires another request method, appeal process or response period, we will provide it. Because Snowpack does not currently sell or share personal information for targeted advertising, there is no sale or advertising opt-out needed for current practices.
9. Security
We use administrative, technical and organizational safeguards designed for the nature of the information, including managed authentication, encrypted network connections, access controls, row-level database security, server-held billing secrets and signed payment webhooks. No system is perfectly secure, and we cannot guarantee absolute security.
10. United States processing
Snowpack and its providers process information in the United States and potentially other countries where providers operate. Those locations may have different privacy laws from your home jurisdiction. The Service is currently intended for the United States; international launch requires additional legal review and transfer safeguards.
11. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Users under the age of majority must use the Service with a parent or legal guardian as described in the Terms. If you believe a child under 13 has provided personal information, contact us so we can investigate and delete it as required. Parents or guardians may contact us at the address below.
12. Third-party services
Avalanche centers, government data sources, MapTiler, Google, Stripe and other linked services control their own sites and privacy practices. Review their notices before providing information directly to them. Snowpack’s display of third-party information or links does not make Snowpack responsible for those practices.
13. Changes to this Policy
We may update this Policy as the Service or law changes. We will update the effective date and provide additional notice for material changes, such as an email, in-product message or renewed click-through. We will not apply a materially broader use to previously collected information without notice or consent where required.
14. Contact
Privacy requests and questions: privacy@snowpacklabs.com.
General support: support@snowpacklabs.com.
Legal entity and postal address: [add before production launch].