Privacy policy

At a glance

A summary of what we collect and how we handle it. Each row is explained in full below. In short: we do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Information we collect

• Messages you send on the website — if you use our contact form, the name, email, and message you submit.
• Account and contact details — in the app, your name and email address, and the phone numbers and emergency contacts you add for your household.
• Student details — the names, and where you provide them the ages, skill levels, and program notes, of the skiers you enroll (often your children).
• Waivers and standing — the liability waiver you sign and your membership and enrollment status.
• Payment information — memberships and lessons are billed through our payment processor, Helcim. Card numbers are entered with and stored by Helcim; we keep only the charge records (amount, date, status), not your full card number.
• Sign-in information — if you sign in with Google or Apple, the basic profile they share (see “Signing in with Google or Apple” below).
• Usage and device data — standard server logs (IP address, browser type, pages requested) and, on the marketing website, analytics (see “Cookies and analytics”) that help us keep the service running, secure, and understandable.

We do not intentionally collect more sensitive categories of information than the above, and we do not use or disclose sensitive personal information (such as precise account credentials or a child’s details) for any purpose other than running the programs you sign up for.

Where it comes from

• Directly from you, when you fill in a form, create an account, or sign a waiver.
• From the account holder, about the students they add to a household.
• Automatically from your device and our servers as you use the site or app.
• From our service providers — for example, charge records from our payment processor.
• From Google or Apple, if you choose to sign in with them.

How and why we use it

We use your information to run Metro Slopes, and only for purposes you’d expect:

• Create and secure your account, and sign you in.
• Enroll students in classes, manage memberships, and run check-in.
• Bill for memberships and lessons, and keep a record of those charges.
• Respond to messages you send us through the website.
• Send you account and operational messages — enrollment confirmations, waitlist offers, schedule changes, receipts. Marketing email, if any, is separate and opt-out; every such message carries a one-click unsubscribe.
• Keep the service safe — prevent fraud and abuse, and debug problems.
• Meet our legal, tax, accounting, and safety obligations.

For visitors in the EEA/UK, our legal bases are: performance of our contract with you (accounts, enrollment, billing), compliance with a legal obligation (tax records, waivers), our legitimate interests (security, fraud prevention, keeping the service working), and your consent (any marketing email, which you can withdraw at any time). We do not make decisions about you by solely automated means that produce legal or similarly significant effects.

Who we share it with

We don’t sell your personal information. We share it only with the service providers that run the platform, and only so they can perform that service for us:

• Helcim — payment processing and card storage.
• Resend — sending account and program email.
• Vercel and Neon — application hosting and database.
• Inngest — background job processing.

We may also disclose information if the law requires it, to protect the safety of our members and staff, or as part of a merger, acquisition, or sale of assets (with notice to you where required). We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act. We have not sold or shared personal information — including that of minors — in the preceding 12 months.

Signing in with Google or Apple

If you choose “Continue with Google,” we request only the openid, email, and profile scopes. Through them Google shares your name, email address, and basic profile, which we use solely to create your account or sign you into an existing one.

We do not request or access your Gmail, Google Drive, Calendar, Contacts, or any other Google service, and we don’t read or store data from them. Metro Slopes’ use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, and we do not sell or transfer it to third parties except to provide our service, comply with the law, or in connection with a merger or acquisition. You can revoke our access at any time from your Google Account permissions.

Sign in with Apple works the same way — we receive only your name and email (and, if you use Apple’s private-relay address, that relay address), used only to create or access your account.

Children's information

Metro Slopes accounts are for adults. Parents and guardians create and manage the account and provide the details of the children they enroll — we do not knowingly let children create their own accounts or submit their own information directly. We use a child’s information only to run the program they’re signed up for, and we keep it confidential.

A parent or guardian can review, update, or delete their child’s information at any time from the account, or by emailing info@metroslopes.com. If we learn that a child under 13 has given us information directly without a parent, we will delete it. We do not sell or share the personal information of any consumer, including minors under 16.

How long we keep it, and how we protect it

Connections are encrypted in transit, sessions are cookie-based, and card data is handled by our PCI-compliant payment processor rather than stored by us. No system is perfectly secure, but we use reasonable administrative and technical safeguards to protect your information.

We keep information only as long as we need it:

• Account and household details — while your account is active.
• Charge and receipt records — as long as tax and accounting law requires.
• Signed waivers — for the period relevant to liability and legal claims.
• Contact-form messages — until your inquiry is resolved, then a short window.
• Server logs — a short operational retention period.

When you close your account, we delete or de-identify what we no longer need to keep for the reasons above.

Cookies and analytics

The app uses essential cookies to keep you signed in — without them, sign-in doesn’t work. The marketing website uses Google Analytics to understand aggregate traffic (which pages are visited, roughly where visitors come from) so we can improve the site; this is only enabled on our production site. You can block cookies in your browser, and we honor browser-based opt-out preference signals such as the Global Privacy Control (GPC). Because we do not sell or share personal information, no additional opt-out is necessary.

Your California privacy rights

If you’re a California resident, the CCPA/CPRA gives you the right to:

• Know and access the personal information we’ve collected about you, including the categories, sources, purposes, and who we disclosed it to.
• Delete personal information we hold about you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information — though we do neither.
• Limit the use of sensitive personal information — we already use it only as needed to run your programs.
• Not be discriminated against for exercising any of these rights.

To exercise a right, email info@metroslopes.com or use the tools in your account settings — you don’t need an account to make a request. We’ll respond within 45 days (extendable to 90 with notice) and may need to verify your identity first. An authorized agent may submit a request on your behalf with proof of authorization.

Your rights in the EEA and UK

If you’re in the European Economic Area or the UK, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent at any time (without affecting processing already carried out). You also have the right to lodge a complaint with your local data protection supervisory authority. To exercise any of these, email info@metroslopes.com.

We are based in the United States, so using Metro Slopes involves transferring your information to the US. Where required for EEA/UK data, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Changes to this policy

If we change how we handle your information, we’ll update this page and move the “last updated” date. For material changes, we’ll give you a heads-up by email or an in-app notice, and where the law requires it, we’ll ask for your consent again.

Contact us

Metro Slopes LLC
50 Broderick Road, Burlingame, CA 94010
info@metroslopes.com

For privacy requests, please put “Privacy” in the subject line so we can route it quickly.