Fall Line

Draft: pending review. This document hasn’t been reviewed by a lawyer yet and isn’t final. Highlighted items in [brackets] still need to be filled in.

Legal

Privacy Policy

Last updated: October 2026

This explains what Fall Line collects when you use it, what other people can see, and the choices you have. The short version: we collect what the features need, your location stays on your device unless you choose to verify a tracked day or share where you are with people you pick, your pass value is private, and we don’t sell your data.

1. What we collect and why

You can use most of Fall Line (maps, trail stats, conditions, poll results, the trip planner) without an account. If you create one, we collect:

  • Account details: your email address and a password, or just your email if you sign in with an emailed link. We use these to sign you in and to send sign-in and account emails. Passwords are handled by our account provider (Supabase) and stored hashed; we never see them. If you continue with Google instead, Google tells us your email address, your name and a link to your Google profile picture. We use the name only to suggest a display name when you set up your profile, and we never see your Google password.
  • Profile: your handle, display name, a short bio, a profile photo, your home mountain, your level, whether you ski, snowboard or both, what you love to ride (steeps, glades and so on), and favorite mountain and trail. These are all optional apart from your handle.
  • What you post: photos, YouTube links and captions; tips, comments, questions and answers; conditions reports and trail open/closed updates; polls you create and your poll votes; mountain and trail ratings; and reports you send us about other content.
  • Your ski log and plans: mountains and trails you mark as skied (your passport), your bucket list and goals, trips you plan, who you follow, and the badges you’ve earned.
  • Pass value: the season passes you add, what you paid, and the days you log, so we can work out your cost per day.

We use this to run the features you’re using: showing your profile and posts, counting votes and ratings, working out badges and pass value, and keeping the community safe. We don’t sell your personal information, and we don’t use it for advertising.

Photos: before a photo is uploaded, your browser resizes it and saves it as a new image. That drops the hidden data many cameras attach (such as GPS coordinates and camera details). Videos aren’t uploaded to Fall Line: you post a YouTube link instead.

2. What’s public and what’s private

Fall Line is a community, so most of what you post is public. Anyone, including people without an account, can see:

  • your profile (handle, display name, bio, photo, home mountain, level, what you ride and love, favorites) and your badges
  • your clips, photos, tips, comments, questions, answers, conditions reports and trail updates, with your handle on them
  • polls you create; your mountain passport, skied trails and bucket list; who you follow and who follows you

Poll votes are private: other riders only ever see the totals, never how you voted. Mountain and trail ratings are shown as averages.

You choose who sees each trip: only you, friends (riders you follow who follow you back), or everyone.

Your pass value data (passes, prices and logged days) is private: only you can see it. Your email address is never shown on your profile.

3. Your location

“Near me.” To sort mountains by distance and work out drive times, you can let your browser share your location or type a US ZIP code. We round a shared location to about 1 km and keep it, or the place your ZIP points to, in your browser’s local storage on that device only. It isn’t sent to Fall Line’s servers, isn’t saved to your account and is never put in a page link. Distances are worked out in your browser. You can clear it at any time from the location box, and we stop asking once you say no or clear it.

When you enter a ZIP code, your browser looks it up with Zippopotam.us, a free postal-code service, which receives the ZIP code (and, like any website, your IP address).

“Are you at the mountain?” When you post a conditions report or a trail update, we may ask your browser for your location once to check you’re at (or within about 3 km of) that mountain. Only the answer, yes or no, is saved with your report. Your coordinates are not stored or sent to us.

Tracking a ski day (Android app). When you tap Start in the Fall Line app, it records your phone’s GPS position about once a second until you pause or finish, and shows a notification the whole time. It only tracks while the app is open or that notification is showing; it never tracks in the background otherwise. The points are kept on your phone, where they’re turned into lift rides, runs and trails skied. You can delete a day from the phone at any time.

If you choose Save to my profile, the passport stamp, the trails skied and the ski day are saved to your account. To mark them as verified, the app also sends that day’s points to Fall Line’s server once, where the same analysis is re-run to check the day is real (at that mountain, on its lifts and trails). The points are used only for that check and are not stored; only the result (verified or not, and the trails) is saved.

Stats and leaderboards. A saved day also stores its totals (runs, vertical, distance, top speed and how long you were out), never where you went. You choose who sees them in the app’s Settings: only you, friends (riders who follow each other) or everyone. That choice also decides whether you appear on the friends or public leaderboards.

Sharing your location. Only if you turn it on: you pick specific people and a time limit, and while you’re tracking a day the app sends your latest position (about every 20 seconds) so those people can see it on a map. We keep only the latest position, never a history, and delete it when sharing ends. You can stop sharing with anyone at any time, and the Tracker shows when sharing is on.

You can turn location access off at any time in your browser or device settings. Everything else keeps working.

4. Cookies and local storage

We don’t use advertising or cross-site tracking cookies. We use your browser’s local storage for things that make the site work:

  • keeping you signed in (your sign-in session)
  • your “near me” place, or a note that you’d rather not be asked
  • preferences such as map view settings, panel width, trip planner answers and polls you’ve skipped

Clearing your browser’s site data removes all of these and signs you out.

Some features load content from other services (see below), and those services may set or read their own cookies under their own policies. The lodging map is the main example.

5. Services we use

We use a small number of outside services to run Fall Line. Each receives only what it needs, and, like any website you load, your IP address:

  • Supabase: accounts and sign-in, our database, and storage for uploaded photos. Holds the account and content data described above.
  • [EMAIL PROVIDER, e.g. Resend]: delivers sign-up, sign-in and account emails for us. It receives your email address and the message.
  • Cloudflare: hosts the website and the live trail status feed.
  • Cloudflare Web Analytics: counts page visits without cookies and without tracking you across other sites.
  • Sentry: error reporting. If something breaks, a crash report is sent so we can fix it. It includes the page address (without any search terms), your browser and device type, and technical details of the error. We set it up not to attach your account, your email address or a recording of your session. The Android app does the same: a crash report has the app version, your phone model and Android version and the technical details, never your account, location, screenshots or IP address.
  • Google Fonts: the site’s typefaces are loaded from Google’s servers.
  • Open-Meteo: weather forecasts. Your browser asks Open-Meteo for the forecast at the mountain’s location (not yours).
  • Map services: map tiles come from OpenFreeMap, and terrain (elevation) tiles from an Amazon Web Services public dataset. Your browser requests the map area you’re looking at.
  • Zippopotam.us: ZIP code lookups, as described above.
  • YouTube: video clips are YouTube videos. We show a thumbnail image from YouTube, and the video player loads (in YouTube’s privacy-enhanced mode) only when you press play.
  • Stay22: the “Where to stay” lodging map on mountain pages, described below.
  • Google sign-in: if you choose “Continue with Google”, Google confirms who you are and shares the details above with us, under Google’s privacy policy.
  • Google Maps: the Directions button opens Google Maps with the mountain’s location as the destination. Nothing is sent to Google unless you press it, and then Google’s own privacy policy applies.

These services may process data in the United States and other countries.

Our trail maps and data come from open sources such as OpenStreetMap and the USGS; see where our data comes from. Those sources don’t receive anything about you.

6. Affiliate links

The “Where to stay” map on mountain pages is provided by Stay22, which compares places to stay from sites such as Booking.com, Expedia and Vrbo. If you book through it, Fall Line may earn a commission, at no extra cost to you. The map runs inside a frame from Stay22, so Stay22 and the booking sites you visit through it may use cookies and collect information under their own privacy policies. We don’t send them your account details.

7. Keeping and deleting your data

We keep your account and content for as long as your account is open. You can edit your profile and delete your own posts at any time. Content you delete is removed from the site, though copies may stay in backups for a limited time before they’re overwritten.

You can delete your account yourself at any time: open the account menu (your picture, top right) and choose Delete my account. That deletes your sign-in, your profile and everything linked to it, including your photos, comments, votes, lists, trips and pass log. To ask for a copy of your data or a correction, email us at [CONTACT EMAIL] from the address on your account. We may keep a small amount of information where we need it to prevent abuse, resolve disputes or meet legal obligations (for example, a record that an account was suspended).

We may keep anonymous totals (such as vote counts) that no longer identify you.

8. Your rights and choices

Wherever you live, you can:

  • see and change most of your information yourself, on your profile and in the account menu;
  • delete your posts, or your whole account, yourself at any time (see above);
  • ask us for a copy of your information, to correct something you can’t change yourself, or to delete something, by emailing [CONTACT EMAIL] from the address on your account.

We’ll answer within 30 days. We may need to confirm it’s really you first. We won’t treat you differently for asking.

We don’t sell your personal information or share it for targeted advertising, so there’s nothing to opt out of. Depending on where you live (for example California, other US states, the UK or the EU), you may have further rights under local law, such as to object to some uses of your information or to complain to a data protection authority. Contact us and we’ll help.

9. Children

Fall Line isn’t for children under 13, and we don’t knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us at [CONTACT EMAIL] and we’ll delete it.

10. Security

The site is served only over encrypted connections (HTTPS). Database rules limit each account to its own private data, and passwords are stored hashed by our account provider. No system is perfectly secure, so please use a password you don’t use anywhere else. If we learn of a breach that affects your personal information, we’ll let you know as the law requires.

11. Changes to this policy

If we change this policy, we’ll update the date at the top of this page. If a change is significant, we’ll also give notice on the site or by email before it takes effect.

12. Contact

Fall Line is operated by [LEGAL NAME OF OPERATOR]. Questions about privacy or your data: [CONTACT EMAIL], or by mail at [MAILING ADDRESS].