Privacy

What Skiboard records, why, and what you can choose. Short version: no account needed, no advertising, and no identifier that recognises you on your next visit unless you choose “Agree”.

What Skiboard records itself

Which origin, day, transport mode and filters a search used, which resort links were opened, and the country a visit came from, as our content delivery network reports it. Each visit gets a random identifier that is discarded when you close the tab. No IP address, no device fingerprint, no name or email unless you give one. These records are kept for 13 months.

Partner links: when you open a booking or partner link, Skiboard shares no data with the partner. The partner only sees the click itself, which happens in your browser, like any visit from a link.

Google Analytics

Skiboard counts every visit with Google Analytics, at one of two levels you choose in the banner or here. Neither level uses advertising features, and the product is identical either way. Google may process this data outside Switzerland, for example in the USA.

“Only the essentials”, the default until you choose: Google Analytics receives the page address and title, the page you came from, your screen size, language, browser and operating system, and an approximate location Google derives from your IP address (Google says Google Analytics 4 does not store IP addresses). The words you type into the resort search go to it too, unless they look like an email address or a phone number. It also gets a random identifier that is kept only in this tab's storage and deleted when you close the tab, so your next visit counts as a new visitor. No cookie is set.

“Agree” adds Google Analytics' cookies (_ga and _ga_…), which keep that random identifier on your device for up to two years, so a returning visit is recognised. Switching back to “Only the essentials” deletes them.

Weekend picks email

If you sign up for the weekend picks, Skiboard stores your email address, the city you start from, whether you travel by train or car, the topics you want and up to five favourite areas, the language of the page and which sign-up box you used, together with the time of sign-up, confirmation and your last change, the version of the sign-up text you saw and the date of the last weekly email we sent you. Nothing else: no name, no street address and no IP address. To stop the same connection from signing up addresses over and over, a pseudonymised hash of the IP address (computed with a secret key) is kept for one hour, never the address itself.

Sign-up is double opt-in: you are only subscribed once you click the link in the confirmation email. An address that is not confirmed within 48 hours is deleted.

The addresses are stored in a table of their own in Amazon DynamoDB (skiboard-prod-subscribers) and the emails are sent through Amazon Simple Email Service (SES), both run for us by Amazon Web Services (AWS) in its Europe (Frankfurt) region, eu-central-1, in Germany. They are used only to send you the weekend picks, and a confirmed address is kept until you unsubscribe. The emails carry no tracking pixel, and their links say only that a visit came from the email, never who clicked.

Every email has a link to unsubscribe in one click. Unsubscribing deletes your address and preferences at once; backups of the list are kept for up to 35 days and then overwritten. You can also ask us to delete or show your data by email to hello@skiboard.ch.

Accounts

An account is optional. If you create one, Skiboard stores your email address, a salted hash of your password (scrypt; the password itself is never stored), the city you start from, whether you travel by train or car, up to five favourite areas, your language, the version of the text you agreed to, and when the account was created and last changed. Nothing else: no name and no street address.

An address nobody finishes registering is deleted 48 hours after our last email to it. While you are logged in, your browser keeps one strictly necessary cookie that holds a random session key, and a note that you are logged in; neither is used for analytics, and the session ends after 90 days without a visit. We store only a hash of the key. To stop guessing and repeated emails, a pseudonymised hash of the IP address and of the email address (computed with a secret key) is kept for up to a day. Our logs count registrations and logins without saying whose.

Accounts are stored in a table of their own in Amazon DynamoDB (skiboard-prod-accounts) and the emails are sent through Amazon Simple Email Service (SES), both run for us by Amazon Web Services (AWS) in its Europe (Frankfurt) region, eu-central-1, in Germany. If you also take the weekend picks, the account and your subscription share your address and preferences, and the section above applies to the subscription.

You can see and change your data on your account page. Deleting your account there removes it and your weekend-picks subscription at once; backups are kept for up to 35 days and then overwritten. You can also ask us to delete or show your data by email to hello@skiboard.ch.

Group plans

If you start or join a group plan, Skiboard stores the plan’s day and, for each person, the first name they type, their city (one of the app’s starting points), train or car, and the areas they say they are in for. No email, no address, no location. Anyone with the plan’s link can see it, so type only a first name or a nickname. A random key kept in your browser is what lets you change or remove your own entry.

Plans are stored in a table of their own in Amazon DynamoDB (skiboard-prod-plans), run for us by Amazon Web Services (AWS) in its Europe (Frankfurt) region, eu-central-1, in Germany, and deleted automatically three days after their ski day. No IP address is stored: to limit how many plans one connection can start, a pseudonymised hash of it (computed with a secret key) is kept for one hour. Our own records count that a plan was started or joined and how many people it holds, never the names.

Your entry goes as soon as you choose “Leave the plan”. To have a whole plan deleted sooner, write to hello@skiboard.ch.

Where the data comes from

Ski-area facts come from OpenSkiMap and OpenStreetMap under ODbL. Piste maps come from the skimap.org archive and from the operators, who own them, credited on each resort. How steep the pistes are is measured on swisstopo’s swissALTI3D terrain model. Snow depth comes from SLF measuring stations and the weather forecast from MeteoSwiss. Day-pass prices are read each morning from the operator’s own ticket shop or tariff page, where it publishes one. Crowds have no source yet.

Imprint

Skiboard
aksüyek GmbH, Zürich, Schweiz
Contact: hello@skiboard.ch

Datenschutz und Impressum · Confidentialité et mentions légales · Privacy e colophon