Privacy Policy

1. Who we are

ShredPlanner is a personal project that helps skiers and snowboarders plan their day at Steamboat Resort and other mountains. The site is operated independently and is not affiliated with Steamboat Ski & Resort Corporation, Alterra Mountain Company, or any ski resort. Questions? Email contact@shredplanner.com.

2. What we collect

We only collect data when you choose to interact with parts of the site that need it:

• Account information. If you sign in with Google, we receive your name, email address, profile picture, and Google account ID. If you create an account with email and password instead, we store your email, a hashed password (we never see the plain text), and any display name you choose.
• Saved content. Ski day route plans, budget plans, and other items you explicitly save. These are tied to your account so you can access them again later.
• Trail notes and votes. If you submit a trail comment or congestion vote, we store the content along with your account so you can edit or delete it later. Notes you mark as "private" are visible only to you; notes you mark as "public" are visible to other site visitors after moderation.
• Standard server logs. Like most websites, our server records IP addresses and request paths for security and debugging. These logs are rotated and not used for tracking or advertising.

You can browse the planner, look at trail data, view restaurants, and read news without an account. Saving anything requires you to sign in.

3. How we use your data

• To create and manage your account.
• To save and retrieve your trip plans, budgets, notes, and votes.
• To moderate public comments before they appear to other users.
• To diagnose bugs and improve the site.

We do not run ads. We do not sell, rent, or share your personal information with third parties for marketing purposes. Ever.

4. Third-party services we use

A few external services help us run ShredPlanner:

• Google Sign-In — for OAuth login. When you sign in with Google, your browser briefly visits Google to authenticate. Google's privacy policy applies during that step: policies.google.com/privacy.
• Mapbox — for map tiles and base map rendering on the planner. Mapbox may receive your IP address and the map area you're viewing. Their privacy policy: mapbox.com/legal/privacy.
• AWS (Amazon Web Services) — hosts the site infrastructure. AWS does not have access to your account data beyond what's required to run the underlying servers.
• OpenStreetMap — the trail and lift geometry data is sourced from OpenStreetMap contributors. We do not send your personal data to OpenStreetMap.

5. Cookies

We use a small number of cookies, all of which are strictly necessary for the site to work: a session cookie that keeps you logged in, and a CSRF cookie that protects forms from cross-site request forgery. We do not use advertising or analytics cookies.

6. How long we keep your data

We keep your account and saved content until you delete them or ask us to delete your account. Server logs are retained for up to 30 days for security and debugging, then rotated out.

7. Your rights

You can, at any time:

• Sign in and view, edit, or delete any of your saved content.
• Request a copy of all data tied to your account.
• Delete your account and have your personal data removed.

For data export or account deletion, email contact@shredplanner.com from the address on your account and we'll handle it within 30 days.

8. Children

ShredPlanner is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please email us and we'll remove it.

9. Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date at the top of the page and, if the change affects how we use existing user data, notify signed-in users by email or with a banner on the site.

10. Contact

Questions about this policy or how we handle your data? Email contact@shredplanner.com.