1. Introduction

Ski Manager ("we", "our", "us") operates skimanager.net (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and online game.

Ski Manager is the data controller responsible for processing personal information under this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your username, email address, and password (stored in hashed form using industry-standard algorithms). If you sign in with Google, we receive your name, email address, and Google account identifier. We do not receive or store your Google password.

2.2 Game Data

We store all game-related data associated with your account, including resort statistics, financial transactions, staff records, equipment, achievements, notifications, and activity logs. This data is necessary to provide the game experience.

2.3 Automatically Collected Information

When you access the Service, we automatically collect certain information including your IP address, browser type and version, operating system, device type, screen resolution, referring URLs, pages visited, session duration, and timestamps. This information is collected through server logs and analytics tools.

2.4 Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences (such as theme and unit system), and analyze site usage. You can control cookie preferences through our consent banner, which offers three options: Accept All, Analytics Only, or Reject All. You can change your preference at any time from the Settings page. For full details, see our Cookie Policy.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the game
Create and manage your account
Save your game progress, preferences, and settings
Display leaderboards and public rankings (username and resort stats only)
Communicate with you about your account or the Service
Monitor and analyze usage patterns to improve the Service
Display advertisements via Google AdSense
Detect, prevent, and address technical issues, abuse, and cheating
Enforce login rate limiting for security purposes
Comply with legal obligations

4. Third-Party Services

We use the following third-party services that may collect information:

Google Analytics 4 — Website usage analytics including page views, session duration, and user interactions. Subject to Google's Privacy Policy. We use Google Consent Mode v2 to respect your cookie preferences.
Google Tag Manager — Tag management for analytics and advertising scripts.
Google AdSense — Advertising. Google may use cookies to serve ads based on your browsing history. You can opt out of personalized ads at Google Ads Settings.
Google Sign-In — Optional authentication. We receive basic profile information (name, email) when you choose to sign in with Google.
Cloudflare — CDN, DNS, security, and performance optimization. Cloudflare may process connection data per their Privacy Policy.

Some third-party services, particularly Google Analytics and AdSense, may collect information directly through cookies and similar technologies in accordance with their own privacy policies.

Sentry — Error tracking and performance monitoring. Collects technical error data to help us fix bugs.

5. Google Consent Mode

We implement Google Consent Mode v2, which adjusts how Google tags behave based on your cookie preferences. When you choose "Analytics Only," advertising cookies are blocked while analytics continue. When you choose "Reject All," all non-essential Google tracking is disabled. Google may still use cookieless modeling to estimate aggregate trends where permitted.

6. Legal Bases for Processing (GDPR)

For users in the EU/EEA, we process personal data based on one or more of the following legal bases:

Performance of a contract — providing and maintaining the game Service
Legitimate interests — security, fraud prevention, analytics, and service improvement
Consent — cookies, optional features, and marketing communications
Compliance with legal obligations — where required by applicable law

14. Data Sharing

We do not sell your personal information. We may share information only in these circumstances:

With your explicit consent
To comply with legal obligations or valid legal processes
To protect our rights, privacy, safety, or property
In connection with a merger, acquisition, or sale of assets (you would be notified)
Publicly visible game data: leaderboard rankings display your username and resort statistics only

14. Data Retention

We retain your account and game data for as long as your account is active. If you delete your account, all associated personal data will be removed within 30 days, except where retention is required by law, security needs, fraud prevention, dispute resolution, or enforcement of our legal rights. Server logs are retained for up to 90 days. Anonymized analytics data may be retained indefinitely for statistical purposes.

14. Data Security

We implement security measures including:

We implement industry-standard security measures including encryption for all connections (HTTPS/TLS), password hashing, cross-site request forgery protection, login rate limiting, secure session management, and CDN-level DDoS protection. We regularly review and update our security practices.

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

14. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and data
Object to or restrict processing of your data
Data portability (receive your data in a structured format)
Withdraw consent at any time (including cookie preferences via Settings)

For EU/EEA users (GDPR): You have the right to lodge a complaint with your local data protection authority.

For California users (CCPA): You have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.

To exercise any rights, submit a privacy request to [email protected] or use the account deletion feature in Settings.

14. Children's Privacy

Ski Manager is not intended for children under 13 years of age (or 16 in the EU/EEA). We do not knowingly collect personal information from children under these ages. If you are a parent and believe your child has provided us with personal information, please contact us and we will promptly delete such data.

14. International Data Transfers

The Service is hosted in the European Union. If you access the Service from outside the EU, your information may be transferred to and processed in the EU. Where required, we rely on appropriate safeguards, including Standard Contractual Clauses or other lawful transfer mechanisms.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, contact us at [email protected].