Privacy Policy

1. Who we are

Snowdesk is operated by Henri Tamboral, an individual based in London, UK. Snowdesk is a free service that displays Swiss avalanche bulletins published by the WSL Institute for Snow and Avalanche Research (SLF). There are no employees; all operations are carried out by the sole operator.

Questions about this policy? Email: privacy@snowdesk.info

2. What data we collect

2a. Subscriptions

If you subscribe to bulletin email notifications, we collect your email address. That is the only personal data we ever ask for. We collect it only when you actively sign up — we never collect it passively.

2b. Location

The interactive map can use your browser's optional geolocation to centre the map on your current position. This happens entirely in your browser — your location is never transmitted to or stored by Snowdesk.

2c. Session data

We use a session cookie that is strictly necessary for the site to function. It contains no personal information and expires when you close your browser. No consent is required for this cookie under UK PECR.

2d. Server logs

Our server automatically records standard technical information when you visit: your IP address, the page you requested, and the time of the request. We use this only to keep the service running and to investigate errors. Logs are retained for 14 days and then deleted.

3. Why we use your data

We process your data under the following legal bases (UK GDPR):

• Email address — consent. You gave it to us voluntarily when you subscribed, and you can withdraw it at any time by unsubscribing.
• Session data and server logs — legitimate interest. We need these to keep the service secure and operational.

4. How long we keep your data

• Email address — kept for as long as your subscription is active. Deleted within 30 days of unsubscribing or on request.
• Location — never stored.
• Server logs — 14 days.

5. Who we share your data with

We do not sell, rent, or trade your personal data with anyone.

We use a small number of trusted service providers to operate Snowdesk:

• Render (render.com) — hosts the Snowdesk servers. Your IP address and request data pass through their infrastructure.
• Resend (resend.com) — sends your bulletin notification emails. They receive your email address for this purpose only.
• Open-Meteo (open-meteo.com) — provides weather data displayed on bulletin pages. No personal data is shared with them.
• SLF / WSL — provides the avalanche bulletin data. No personal data is shared with them.

All providers are contractually required to handle your data in compliance with UK GDPR. We do not use any advertising networks or analytics platforms.

6. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to processing
• Withdraw consent at any time

To exercise any of these rights, email privacy@snowdesk.info. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

7. Children

Snowdesk is a publicly accessible information service. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has subscribed, please contact us at privacy@snowdesk.info and we will delete the data without delay.

8. Cookies

Snowdesk uses one strictly necessary session cookie. It is set automatically when you visit the site, contains no personal information, and expires when you close your browser. Because it is strictly necessary, no consent banner is required under UK PECR. We do not use tracking, analytics, or advertising cookies of any kind.

9. Changes to this policy

If we make material changes to this policy, we will update the effective date at the top and notify subscribers by email. Continued use of Snowdesk after changes constitutes acceptance.