Privacy Policy
Last updated: 2 August 2026
Who we are
Secret Ski Map is an independent, non-commercial ski-resort map and directory for Japan. We are the data controller for the personal data described here. For any privacy question, email hello@secretskimap.com.
What we collect
- Your email address, and an optional name, if you join the mailing list or create a free account.
- Usage data via PostHog analytics — pages viewed, clicks, approximate location from IP. This is cookieless until you consent, and only becomes cookie-based after you accept analytics in the banner.
- Standard server logs (IP address, request time) for security and to keep the site running.
- No payment data. We do not sell anything or process payments.
Why we collect it, and the legal basis
- Mailing list / free account — to send you the newsletter and run your account. Legal basis: your consent.
- Analytics — to understand what people find useful. Legal basis: your consent (analytics only fire after you accept).
- Security and server logs — to protect the site from abuse. Legal basis: our legitimate interest in keeping the service secure.
How long we keep it
- Mailing-list and account data: until you unsubscribe or ask us to delete it.
- Analytics data: per PostHog's default retention.
- Server logs: 90 days, then auto-purged.
Who we share it with
We use a small set of sub-processors to run the site. We do not sell your data to anyone.
| Sub-processor | Purpose | Location / safeguard |
|---|---|---|
| Neon | Database hosting | USA / EU (SCCs) |
| Render | Application hosting | USA (SCCs) |
| PostHog | Analytics | USA / EU (SCCs) |
| Resend | Email delivery (if used) | USA (SCCs) |
| Booking.com, Agoda, Rakuten Travel, Klook | Affiliate partners — set their own cookies when you click through to them | USA / EU (SCCs) |
When you click an affiliate link, that partner becomes responsible for the data it collects under its own privacy policy. See our affiliate disclosure.
Your rights
Under UK GDPR and GDPR you have the right to access, rectification, erasure, portability, and objection, and the right to withdraw consent at any time. To exercise any of these, email hello@secretskimap.com and we will respond within 30 days. You can unsubscribe from any email using the link in it.
Cookies
We keep cookies to a minimum, and analytics cookies only load after you consent. Full detail is in our cookie policy.
Children
This site is not intended for children. The minimum age to join the mailing list or create an account is 16. If you believe a child has given us their data, email us and we will delete it.
International transfers
Some of our sub-processors are outside the UK/EEA. Where data is transferred, it is protected by Standard Contractual Clauses (SCCs) or an equivalent safeguard.
Changes to this policy
If we change how we handle data we will update this page and its date. Material changes affecting consent-based processing will be re-collected via the banner.
Governing law
This policy is governed by the law of England and Wales. It does not override the GDPR rights of users in the EU/EEA.