Privacy

The short version

To let you ski with your friends we need to know who you are in the lobby: an email address to sign you in, a handle for the other players to see, and your birth year to check you are old enough. While you are in a lobby we relay where you are on the mountain and what you type. We keep chat for 30 days in case somebody reports it, then it is deleted automatically. Voice is never recorded. We do not sell any of it, and you can delete the lot from your account page.

What we store when you have an account

• Your email address — how you sign in, and the only way we can reach you.
• Your handle and display name — chosen by you, visible to every player in your lobby.
• Your birth year — the year only, never a full date of birth. It settles two questions and nothing else: are you old enough for an account, and are you old enough for voice.
• When you accepted the terms, and when you were last seen online.
• Moderation state — whether you are muted or banned, until when, and why.

What a lobby records

• Joins and leaves — which lobby, which mountain, when you arrived, when you left and why (you left, you were kicked, the lobby closed).
• Chat messages — the lobby, your handle, the text and the time. Kept 30 days, then deleted by a job that runs daily.
• Reports — who reported whom, in which lobby, the reason, and anything they typed to explain it.
• Where you are on the mountain is relayed live to the other players so they can see you ski. It is not stored anywhere afterwards.

Voice is not recorded — not by us, not by the service that carries it. Nobody can replay it later, which is why a voice complaint needs you to mute and report the player rather than send us a clip.

Paying

Stripe handles the money. Your card number goes straight to them and never reaches our servers. We store the Stripe customer and subscription ids, which plan you are on, its status, the billing period and the renewal date — enough to know whether to let you into a lobby, and no more.

This website

Visits to these pages are counted in aggregate, without cookies. Our own event log, where it is switched on, records things like which button you clicked, keyed to a random identifier stored in your browser — never to your name or your email. If Google Analytics is switched on for this site it sets its own cookies under Google’s privacy policy. We run no advertising trackers, and we never ask your browser or your device where you are. Like any website, we and the services that carry our traffic see the IP address a request comes from — that places you around a city, not a street — but our own event records have no field for it.

Who else touches it

• Supabase — the database and the sign-in system: your account, your profile, the lobby and chat records.
• Stripe — payments and subscriptions.
• LiveKit Cloud — carries voice between players while a lobby is running.
• Our relay server — a machine we rent in Dallas, Texas, which passes positions and chat between the players in a lobby.
• Vercel — hosts this site and the game.
• Cloudflare — stores and serves the mountain files your browser downloads.
• Resend — sends your sign-in link.
• Upstash — the rate limiter in front of our own API, which stops one machine flooding it. It is given the IP address a request arrived from, and nothing else about you.
• Sentry — where crashes are reported, when it is switched on. A crash report carries the error and the request that produced it.

These are the parties processing this data for us today, to run the product; if we add another, it goes on this list. We do not sell your data and we do not share it for advertising.

Under-13s, and who gets voice

Nobody under 13 gets an account. We ask for a birth year at sign-up and refuse anyone we cannot be sure has turned 13, rather than run a parental-consent process we are not equipped to run. If we find out a younger player has an account anyway, we delete it. Tell us at hello@xyzski.com if that is your child.

Voice chat needs you to have turned 18 — but we hold your birth year, not your birthday, so we cannot tell which side of it you are on. The check is therefore by year, and it errs against granting voice: it opens on the 1 January after the year you turn 18. If you turned 18 this year, voice is off for you until then.

Everyone from 13 up gets text chat, with the report button and the mute button, and anyone the year check has not cleared gets no voice at all.

How long we keep it

• Chat: 30 days, then deleted automatically.
• Your account and profile: until you delete them.
• Joins, leaves and reports: we keep these while the product runs — they are how a report from last month still makes sense. We have not set an end date for them yet; when we do, it will be written here.
• Payment records: Stripe keeps its own, for as long as its own rules and the tax rules require.

Your rights, and how to use them

Wherever you live, you can ask to see what we hold about you, have it corrected, or have it deleted. If you are in the EU or the UK that is the GDPR; in California it is the CCPA; we do not make you prove which one you are covered by.

Deleting. The delete button on your account page removes your profile, your handle, your birth year and your subscription record, and cancels Pro if it is running. Reports and lobby records that mention you stay, with your id stripped out, so another player’s report keeps its context — after that they no longer point at you. Chat older than 30 days is already gone.

Stripe. Stripe keeps its own record of a payment as its own controller. Ask us and we will take that side of it up with them by hand.

A copy of your data. There is no download button yet. Ask and we will put together what we hold on you.

Everything above starts with an email to hello@xyzski.com.

Cookies

Signing in sets a session cookie so you stay signed in — it belongs to this site only and does not follow you to xyzski.com. Analytics may set the cookies described above. We use no advertising cookies.

Changes, and how to reach us

When this page changes we post the new version here and change the date at the top. The terms of play sit beside it, and the attribution page credits the map and elevation data the mountains are built from.

Questions, requests, or something that looks wrong: hello@xyzski.com. A human reads it.