Privacy policy – mountainsnow.ski

Last updated 7 October 2026

Who we are and what this covers

Mountainsnow AS is responsible for the personal data described here. We are a Norwegian company, organisation number 931 068 229, at Strandgata 6, 4790 Lillesand, Norway.

This policy covers every product and service we provide:

mountainsnow.ski, our company website.
Skida (skida.app), the ski touring app for iOS, Android and the web, including Skida Premium.
Skida PRO (skida.pro), our licensed product for guides, guiding companies and course providers.
Data & APIs: the Avalanche Forecast API, Mountain Observations, Terrain Analysis, Route Classification, the Ski Touring Database and Alpine Autorouting.
Terrain Studio, Digital Avalanche Training and custom projects.

Where a product has its own terms, those terms and this policy apply together. Questions about this policy go to privacy@mountainsnow.ski.

What we collect

We collect what you give us, what our services record when you use them, and a little from others. Which data we hold depends on which products you use.

Where	What we collect
Skida and Skida PRO accounts	Name, email address, password (stored encrypted), profile picture, knowledge level, birth year or age, gender, country of residence, language, and your subscription or licence status
Using Skida and Skida PRO	Location and GPS tracks when you allow it, planned and saved routes, trips, favourites, and the settings you choose
Observations you report	Snow profiles, snow layers, avalanches, weather and conditions, with their position, time, text and any photos you attach
Social features	What you choose to show other users: name, profile picture, knowledge level, trips and location in feeds, leaderboards or maps
Customers, partners and API users	Name, role, company, email, phone, contracts, invoices, API keys and API usage logs (time, endpoint, volume)
Contact with us	What you write when you email us, book a demo, answer a survey or contact support
mountainsnow.ski and skida.app	Pages viewed, links and buttons clicked, device and browser type, approximate location from your IP address, and where you came from. Analytics and advertising data are only collected if you accept them (see Cookies)
Technical data, all services	IP address, device model, operating system, app version, crash reports and error logs
From others	Payment confirmations from the App Store and Google Play (we never see your card details), and sign-in data from Apple or Google if you log in with them

We do not ask for sensitive data such as health information. Please don't include it in observations or messages.

Why we use it, and on what legal basis

We only use personal data for a stated purpose and with a legal basis under the GDPR.

Purpose	Legal basis
Running your account, the app, your subscription or PRO licence, and our APIs	Contract (Art. 6(1)(b))
Showing your position, recording GPS tracks and giving route advice	Consent, through your device's location permission (Art. 6(1)(a)). You can turn it off at any time
Answering enquiries, demos, support and partner talks	Contract, or our legitimate interest in replying to business contacts (Art. 6(1)(b) and (f))
Fixing bugs, keeping services secure, preventing fraud and abuse	Legitimate interest (Art. 6(1)(f))
Improving and developing our products, using aggregated or de-identified data where we can	Legitimate interest (Art. 6(1)(f))
Sharing observations with avalanche forecasting services	Legitimate interest in better avalanche forecasts and safety in the mountains (Art. 6(1)(f))
Avalanche safety research	Consent, or legitimate interest with de-identified data (Art. 6(1)(a) or (f))
Website analytics and advertising measurement	Consent through the cookie banner (Art. 6(1)(a))
Newsletters, offers and personalised ads	Consent (Art. 6(1)(a)), or for existing customers our legitimate interest in telling you about similar products. You can unsubscribe in every email
Using your photos or quotes in our marketing	Consent (Art. 6(1)(a)), asked for each time
Bookkeeping, tax and other legal duties	Legal obligation (Art. 6(1)(c))

Where we rely on legitimate interest, you can object (see Your rights).

Who we share it with

We never sell personal data. We share it only in the cases below.

Service providers (data processors). They work for us under a data processing agreement and may only use the data to deliver their service to us.

Provider	What for
Google Cloud and Firebase	Hosting, databases, file storage, sign-in and crash reports
Google Workspace	Email and documents
Mapbox	Maps, terrain and route display
Google Analytics and Google Tag Manager	Website and app analytics, only with consent
Google Ads and Meta (Facebook, Instagram)	Advertising measurement and reaching new users, only with consent
Apple App Store and Google Play	Selling and managing subscriptions; they handle payments as independent controllers
Our accounting and invoicing providers	Invoices and bookkeeping for PRO, API and project customers

Avalanche forecasting services. Observations you report (snow, avalanche and weather data, position, time and photos) are shared with public avalanche forecasting services so they can improve their bulletins. We don't share your name or contact details with them.

Research. We share de-identified data such as GPS tracks, knowledge level, age group, gender and country with avalanche safety researchers, for example the Center for Avalanche Research and Education (CARE) at UiT The Arctic University of Norway. Researchers may only use it for research.

Other users. If you use social features, what you choose to show is visible to other Skida users. If you are part of a Skida PRO organisation, your guide or company can see the trips and routes shared with them.

Partners. We only share your personal data with commercial partners, such as resorts, shops or media, if you have said yes to it.

Authorities and business transfers. We share data when the law requires it, to protect our rights, or with a buyer if the company or a product is sold, under this policy.

Transfers outside the EEA

We aim to store data in the EEA. Some providers, such as Google and Meta, may process data in the USA. Those transfers are covered by the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.

Cookies

Our websites use necessary cookies to work, and analytics and advertising cookies only if you accept them. Until you choose, only necessary cookies are set. You can change your choice any time under “Cookie settings” at the bottom of every page.

Cookie	Provider	Type	Purpose	Lasts
Consent choice	Mountainsnow	Necessary	Remembers your cookie choice	12 months
`_ga`, `_ga_*`	Google Analytics	Analytics	Counts visits and shows how the site is used	2 years
`_gcl_au`	Google Ads	Advertising	Measures which ads lead to visits and enquiries	3 months
`_fbp`	Meta	Advertising	Measures our ads on Facebook and Instagram and shows relevant ads	3 months

The Skida app does not use cookies, but it uses similar technology for analytics and crash reports, which you can control in the app's settings and your device's privacy settings.

How long we keep it

We keep personal data only as long as we need it for the purpose it was collected for, then delete or anonymise it.

Data	Kept for
Skida and Skida PRO accounts, tracks and routes	Until you delete your account
Observations	Kept as part of the shared avalanche record; your name is removed when you delete your account
Customer, partner and API contracts and logs	For the contract period, then as long as needed for follow-up
Invoices and accounting records	5 years, as Norwegian bookkeeping law requires
Website analytics (Google Analytics)	14 months
Support and sales emails	As long as needed to handle the matter and follow up the customer relationship

How we keep it safe

Data is encrypted in transit (TLS) and at rest, stored with established cloud providers, and only accessible to employees and contractors who need it and are bound by confidentiality. We monitor our systems for vulnerabilities and breaches. No system is completely secure, and we will tell you and the Norwegian Data Protection Authority if a breach puts your data at risk.

Your rights

You have the right to:

see the data we hold about you and get a copy of it
have wrong data corrected
have your data deleted
restrict or object to how we use it, including for marketing
take data you gave us with you in a machine-readable format
withdraw consent at any time, without affecting what was done before

You can delete your Skida account in the app. For everything else, email privacy@mountainsnow.ski. We answer within 30 days. Sometimes we must keep some data, for example invoices, even after a deletion request.

Children

Our services are not aimed at children under 13, and we don't knowingly collect their data. If you think a child under 13 has given us data, contact us and we will delete it.

Changes to this policy

We will update this policy when our services or the law change. We post the new version here with its date, and tell you in the app or by email if the change is significant.

Contact and complaints

Mountainsnow AS, org. no. 931 068 229, Strandgata 6, 4790 Lillesand, Norway. Privacy questions and requests: privacy@mountainsnow.ski. Everything else: hey@mountainsnow.ski.

If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority, Datatilsynet, or the authority where you live in the EEA. We would like to hear from you first so we can put it right.