LEGAL

Privacy Policy

Last updated: 13 May 2026

1. Introduction

SnowySki ("we", "our", "the website") respects your privacy. This Privacy Policy explains what personal data we collect when you use snowyski.com, how we use it, and the choices you have. By using snowyski.com you agree to the practices described here.

2. Data we collect

We only collect data needed to deliver the service. Specifically:

  • Identity data — when you sign in with Google, we receive your Google ID, email address, display name and profile picture.
  • Wishlist data — the resorts, hotels, instructors and shops you save to My Trip.
  • Newsletter data — your email address, preferred language, and the page where you subscribed (if you opt in).
  • Usage analytics — page views and custom events (resort_view, map_pin_click, affiliate_click, etc.) collected via Google Analytics 4 and our internal analytics_events log.
  • Browser storage — language preference (snowyski_lang) and locally-cached wishlist in localStorage; snow data, homepage version and affiliate link config in sessionStorage.

3. How we use your data

We use your data to (a) authenticate you and keep your wishlist synced across devices; (b) send the newsletter you signed up for; (c) measure how the site is used so we can improve it; (d) detect abuse and keep the service secure. We do not sell your personal data and we do not use it for automated decision-making.

4. Cookies & tracking

We use first-party cookies for sign-in (httpOnly access + refresh tokens) and Google Analytics for traffic measurement. Affiliate partners (Agoda, Booking.com, Klook, Trip.com, KKday, Rakuten — via Involve Asia) set their own tracking cookies when you click an affiliate link so that any resulting booking can be attributed to SnowySki. You can disable cookies in your browser settings; sign-in will not work without them.

5. Third-party services

SnowySki shares strictly the data needed to run these services:

  • Google — Google (OAuth + Maps + Analytics 4) — receives the sign-in request and aggregated usage analytics.
  • Open-Meteo — Open-Meteo — receives resort coordinates only (no personal data) for snow and weather data.
  • Involve Asia — Involve Asia & affiliate partners — receive the click event with a tracking sub-ID when you follow an affiliate link.
  • Railway / MongoDB Atlas — Railway & MongoDB Atlas — host our API and database.
  • Firebase Hosting — Firebase Hosting — serves the website.

6. Your rights (PDPA)

Under Thailand's Personal Data Protection Act (PDPA) you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectify — ask us to correct inaccurate data.
  • Delete — ask us to delete your account and associated data.
  • Object — opt out of marketing emails at any time via the unsubscribe link.
  • Portability — receive your data in a structured, machine-readable format.
  • Withdraw consent — revoke consent for processing at any time.

To exercise any of these rights, contact us using the details in Section 8 below. We will respond within 30 days.

7. Data retention

We keep account and wishlist data for as long as your account is active. If you delete your account, we remove personal data within 30 days, except where we are legally required to retain it. Newsletter subscriptions are kept until you unsubscribe. Analytics data is anonymised after 14 months.

8. Contact

Questions about this Privacy Policy or requests to exercise your PDPA rights can be sent through the contact form on snowyski.com. We will reply within 30 days. We may update this policy from time to time; the "Last updated" date at the top of the page reflects the most recent change.