Privacy Policy

1. Who we are

ShredPlanner is a personal project that helps skiers and snowboarders plan their day at Steamboat Resort and other mountains. The site is operated independently and is not affiliated with Steamboat Ski & Resort Corporation, Alterra Mountain Company, or any ski resort. Questions? Email contact@shredplanner.com.

2. What we collect

We only collect data when you choose to interact with parts of the site that need it:

• Account information. If you sign in with Google, we receive your name, email address, profile picture, and Google account ID. If you create an account with email and password instead, we store your email, a hashed password (we never see the plain text).
• Your skier profile. The ability level, terrain preferences, and group details you give us, so routes and advice fit how you ski.
• Saved content. Ski day plans (with a picture of the map for each saved plan), drafts we keep automatically while you build a plan, trip budgets, and other items you save. Budgets can include the first names and age groups of the people you add to a trip. All of this is tied to your account and private to you unless you share it.
• Trail notes and votes. If you submit a trail comment or congestion vote, we store the content along with your account so you can edit or delete it later. Notes you mark as "private" are visible only to you. Notes you mark as "public" pass an automatic filter when you post them, then appear to other visitors right away; we remove any that break the rules.
• Invites you send. When you invite someone to a plan or trip, we use their email address to send that one email. We don't add it to any list or email them again.
• Clicks out to retailers and lodging sites. When you follow a gear pick or a lodging link, we record which link, when, and your account (or an anonymous session ID if you're not signed in). We use this to see which recommendations people find useful and to reconcile affiliate referrals. The click is also part of your visit record (below).
• Visits. When you open a page or use a feature (like looking at a run or searching routes), we record what it was, when, the site that sent you, your IP address, your browser and device type, and the approximate location of your IP address (city and region, looked up on our own server with DB-IP's database, so your address isn't sent anywhere). A small script on each page also tells us whether you moved the mouse, tapped, or typed (how we tell people from bots), how long the page was on screen, and how far you scrolled. If you're signed in, your visits are linked to your account. Only we see this; we use it to learn what's useful and to spot bots. It sets no cookies and isn't used for advertising.
• Standard server logs. Like most websites, our server also records IP addresses and request paths for security and debugging. These logs are rotated and not used for tracking or advertising.

You can browse the planner, look at trail data, view restaurants, and read news without an account. You can also start a day plan or a trip budget before signing in: we keep it, including any names you enter for your group, linked to your browser session so it's still there when you sign in to save it. Drafts nobody signs in to claim are deleted after 14 days.

3. The chat guides (Dusty, Hannah, and Jonny)

Our chat guides are AI assistants powered by Claude, a model made by Anthropic. When you send a message, we send it to Anthropic along with the context the guide needs to answer: the conversation so far, your first name, your skier profile, and what's on your screen (for example, the plan you're building or the budget you're viewing).

• We don't store your conversations on our servers. Each guide's conversation is kept in your browser tab and is gone when you close it.
• Anthropic processes your messages to write the reply. Under its commercial terms, Anthropic does not use them to train its models. Its privacy policy: anthropic.com/legal/privacy.
• The short AI summaries on the plan and budget comparison pages send only the plan or trip names and figures, not your account details.
• Please don't type sensitive personal information (health, financial, or ID details) into the chat.

4. How we use your data

• To create and manage your account.
• To save and retrieve your plans, budgets, notes, and votes.
• To tailor routes, plans, and the chat guides' advice to your skier profile.
• To send account emails (like confirming your address or resetting a password) and the invites you ask us to send.
• To filter public notes for abuse and remove ones that break the rules.
• To count clicks out to retailers and lodging sites (see Affiliate links below).
• To understand visits (which pages and features people use, roughly where they're from, and which sites send them) so we know what's useful, and to tell people from bots.
• To diagnose bugs and improve the site.

We do not run ads. We do not sell, rent, or share your personal information with third parties for marketing purposes. Ever.

5. Affiliate links

Some links to gear retailers (for example, Backcountry) and lodging and rental-car sites (Vrbo and Expedia) are affiliate links: if you buy or book after following one, we may earn a commission, at no extra cost to you. When you click one, you leave ShredPlanner, and the retailer or its affiliate network may set its own cookies to credit the referral. Their privacy policies apply from that point. We never pass your name or email to them.

6. Third-party services we use

A few external services help us run ShredPlanner:

• Google Sign-In — for OAuth login. When you sign in with Google, your browser briefly visits Google to authenticate. If you're not signed in, our pages also load Google's sign-in script so you can sign in with one tap; that lets Google see you visited, and Google may set its own cookies. Google's privacy policy applies to that: policies.google.com/privacy.
• Mapbox — for map tiles and base map rendering on the planner. Mapbox may receive your IP address and the map area you're viewing. Their privacy policy: mapbox.com/legal/privacy.
• Anthropic — powers the chat guides and comparison summaries, as described in section 3.
• AWS (Amazon Web Services) — hosts the site, and Amazon SES delivers our emails. AWS does not have access to your account data beyond what's required to run the servers and deliver each email.
• Cloudflare Web Analytics — counts page views: the page, the site that linked to it, and your country and type of browser. It sets no cookies, doesn't identify you, and doesn't follow you to other sites. Their privacy policy: cloudflare.com/privacypolicy.
• Sentry — when something on the site breaks, the technical details (which page, and what went wrong in our code) go to Sentry so we can fix it. We've set it not to send your name, email, IP address or cookies. Their privacy policy: sentry.io/privacy.
• Icons and code libraries — your browser loads icons and open-source scripts from Font Awesome, jsDelivr and unpkg. Like any web request, these see your IP address.
• OpenStreetMap — the trail and lift geometry data is sourced from OpenStreetMap contributors. We do not send your personal data to OpenStreetMap.

7. Cookies and browser storage

We set a small number of cookies, all strictly necessary for the site to work: a session cookie that keeps you logged in, a CSRF cookie that protects forms from cross-site request forgery, and a short-lived messages cookie that carries one-time notices (like "Plan saved") to the next page. We do not use advertising or analytics cookies. Google's sign-in script may set Google's own cookies (see section 6).

We also keep a few things in your browser's own storage: the chat guides' conversations (until you close the tab), a plan you haven't saved yet (so you can pick it up later), and small display preferences. This stays on your device; clearing your browser data removes it. Affiliate cookies are set only by the retailer or network, and only after you click out (see section 5).

8. How long we keep your data

We keep your account and saved content until you delete them or delete your account. Plan drafts stay until you save or delete them; drafts started without an account are deleted after 14 days if nobody signs in to claim them. If you delete your account, your private notes are deleted, public trail notes stay up credited to "Former member," and the click records described above stay with your account removed from them. Visit records are deleted after 90 days (if you delete your account sooner, they stay until then with your account removed from them). Server access logs (IP address and page requested) are kept for about two weeks for security and debugging. Nightly database backups are kept in private, encrypted storage for up to 30 days, so deleted data is gone from backups within a month.

9. Your rights

You can, at any time:

• Sign in and view, edit, or delete any of your saved content.
• Change your skier profile.
• Delete your account yourself from your profile page, which removes your personal data and saved content.
• Request a copy of all data tied to your account.

For a data export, or if you'd rather we delete your account for you, email contact@shredplanner.com from the address on your account and we'll handle it within 30 days.

10. Children

ShredPlanner is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please email us and we'll remove it.

11. Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date at the top of the page and, if the change affects how we use existing user data, notify signed-in users by email or with a banner on the site.

12. Contact

Questions about this policy or how we handle your data? Email contact@shredplanner.com.