Legal

Privacy Policy

Last updated September 10, 2026.

This is a plain-language description of our data practices, written for a small, early-stage product rather than reviewed by a lawyer. If you need a legal opinion about data protection law as it applies to you, please consult your own counsel.

1. What we collect

When you create an account, we collect your email address and password (stored securely by our authentication provider, never in plain text). You can also add a username, display name, avatar, home resort, and bio to your profile.

When you use the Service, we store the content you create: ski session logs (resort, date, vertical, run count, duration, conditions, notes), summit ascent logs (route, date, elevation gained, conditions, partners), community posts and comments, photos you upload, trip plans and itineraries, trip checklist items, direct messages, and follows between users.

We do not track your location in the background, and location data never reaches our servers. A few features — like sorting resorts or summits by distance from you — ask your browser or device for your current location, one time, only when you use them; that location is used right there in your browser and is never sent to us or stored. Other location-style features, such as route replays, work from data you enter yourself, not from your device's location.

We automatically collect basic technical information needed to operate the Service — things like access timestamps and error logs — through our hosting and database providers.

Anonymous page views. To understand which pages are useful we record one anonymous event per page load: the page path, the referring site's domain (if any), a device class (phone / tablet / desktop) and a timestamp. No cookies, no IP address, no user ID and no fingerprinting are stored, and we honour your browser's Do Not Track setting.

Reports. If you report a Community post we store the post, the reason you chose and — if you were signed in — your account, so we can act on it and prevent abuse of the reporting tool.

2. How we use it

We use your information to operate the Service: to run your account, display your content to you and to other users as the relevant feature requires (a trip you're a member of, a community feed, a public profile), power trophies and progress tracking, and respond to support requests.

If you use Scout, PeakSeeker's concierge feature, your question is sent to a third-party AI provider (Anthropic) to generate an answer grounded in our resort and summit data. We don't use your account content to train third-party AI models.

3. Who we share it with

We don't sell your personal information. We share it only as needed to run the Service:

  • Other users — content you post to a trip, community post, comment, direct message, or public profile is visible to the people that feature is designed to show it to.
  • Supabase — our database and authentication provider, which stores your account and content data.
  • Netlify — our hosting provider, which serves the site and may log basic request data.
  • Anthropic — powers the Scout concierge feature; receives the text of your question when you use it.
  • Email delivery provider — used to send account-related email (confirmations, trip invitations, notifications).

We may also disclose information if required by law, or to protect the safety of our users or the public.

4. Data retention

We keep your account and content data for as long as your account is active. If you delete your account, we delete your personal data within a reasonable period, except where we're required to keep it longer for legal reasons or where it's embedded in another user's content (for example, a message you sent someone else, or a comment on a post that isn't yours).

5. Your choices

You can edit or delete your profile information, session logs, ascent logs, posts, and trip content directly in the app. You can request a copy of your data or full account deletion at any time by contacting us.

6. Security

We use industry-standard practices — including encrypted connections and row-level access controls in our database — to protect your data. No online service can guarantee perfect security, so we can't promise that data will never be exposed, but we take reasonable steps to prevent that.

7. Children's privacy

PeakSeeker isn't directed at children, and you must be at least 13 to create an account. We don't knowingly collect data from anyone younger.

8. Changes to this policy

We may update this policy as the Service evolves. We'll update the date at the top of this page when we do, and for significant changes, we'll try to let you know directly.

9. Contact

Questions about this policy, or want to access, correct, or delete your data? Reach us at support@peakseeker.app.