Privacy policy

Last updated 5 November 2026

The short version

• Snomo stores what you add to it: your profile, holidays, riding days, notes, friends and shared trips.
• Your email address and password are handled by our sign-in provider, Auth0. Snomo’s own servers don’t store them.
• Your notes and riding days are private. Friends see only your totals, countries and chosen sports.
• No ads, no analytics or tracking tools, and we never sell your data.
• Your data is stored on a server in Germany and backed up every day.
• Email snomo@nathparnell.com to get a copy of your data or to delete your account.

Who runs Snomo

Snomo is an iPhone app built and run by Nathan Parnell, an independent developer. In this policy, “we” and “us” mean Snomo. The app is in an early beta. We’ll update this policy when features that affect your data are added, such as photos or GPS imports.

Signing in

Snomo uses Auth0 (part of Okta) for sign-up and sign-in. You enter your email address and password on Auth0’s secure sign-in page, not in Snomo itself, and password recovery also happens there. Our servers never receive your password.

When you sign in, Auth0 gives the app your basic profile (your name and email address). The app uses these on your phone to suggest a display name, but doesn’t send your email address to Snomo’s servers. Our servers identify you only by Auth0’s internal account identifier, which is how your passport stays linked to your login.

Auth0’s handling of your sign-in details is covered by Okta’s privacy policy. Snomo’s Auth0 account is hosted in Auth0’s US region.

Your profile

When you first open Snomo, you set up your profile. We store:

• Display name (required). This is how friends find you and how you appear on shared holidays. It starts as your sign-in name, and you can change it at any time. If your sign-in name is your email address, change it before continuing, because display names can be searched by other Snomo members.
• Date of birth (required for new accounts). Your age is calculated from it and shown only on your own profile. Your date of birth is never shown to other people.
• Winter sports (optional), for example snowboarding or skiing.
• When your account and profile were created and last changed, plus an internal account ID.

Your passport

Snomo stores the journal you build:

• Holidays: the town or village, the dates (or no dates for a trip you only half remember), and optional accommodation, ski area and private notes.
• Days: whether each day was a riding, travel, rest or unrecorded day, the sports you did, where you rode, and optional private notes.
• Places ridden: skiing locations and, for places that cross a border, which country you rode in.
• When each record was created and last changed.

Snomo doesn’t access your phone’s location, photos or contacts. Planned holidays and calendar dates are never counted as riding days unless you record them.

Friends and shared holidays

Friends

• Any signed-in Snomo member can search for other members by display name. Results show only display names, plus an internal ID the app uses to send a request.
• Friend requests must be accepted. We store who sent each request, who received it, when, and whether it was accepted, declined, cancelled or later removed.
• Accepted friends can see a summary: your lifetime riding days, places and countries ridden, and your chosen winter sports. They can’t see your trips, dates, notes, date of birth, email address or other friends.

Shared holidays

• An organiser can invite people with a link or invite friends directly. Joining always needs your confirmation.
• Everyone on a shared holiday sees its place, dates, accommodation and the display names of the people on it. Each person’s riding days, places ridden and notes stay private to them.
• Invitation links expire after seven days and can be revoked. Anyone who has a valid link can ask to join, so only share it with people you mean to invite. We store only a scrambled (hashed) form of each link’s secret, not the link itself. Snomo never sends invitations for you. You choose where to share them.
• If you leave or are removed, you keep a personal copy of the trip with your own days and notes.

On your iPhone

• Your sign-in session is kept in the iPhone’s secure storage (the Keychain) so you stay signed in.
• An invitation link you open is kept in secure storage on the phone for up to seven days, until you join or dismiss it.
• Your passport is held in memory while the app is open. It isn’t saved as a separate offline copy on the phone.

Adding a holiday to your calendar

“Add to calendar” opens Apple’s own event editor with the holiday’s place and dates filled in. You choose the calendar and whether to save. This happens entirely on your phone. Snomo doesn’t ask for permission to read your calendars and doesn’t send anything to our servers. To avoid duplicates, the app keeps a small on-device note that you’ve already added that holiday. If your calendar syncs through iCloud or another service, that service’s own privacy terms apply to the saved event.

Maps and place data

The map is drawn with MapLibre, using map tiles from OpenFreeMap. To show the map, your phone downloads tiles directly from OpenFreeMap. Like any website, OpenFreeMap can see your IP address and which part of the map you’re looking at. No account details or passport data are sent to OpenFreeMap.

Piste maps are links to each resort’s official website. They open in your browser, and that website’s own privacy policy applies.

Map and place data are credited as follows, and the credits are also shown in the app:

• Map tiles: OpenFreeMap, © OpenMapTiles, data © OpenStreetMap contributors.
• Place data: GeoNames (CC BY 4.0).
• Ski-area data: OpenSkiData / OpenSkiMap.org, © OpenStreetMap contributors (ODbL), Skimap.org, Who’s On First, © Mapterhorn.

Where data is stored

Snomo’s API and its PostgreSQL database run on a server rented from Hetzner in Falkenstein, Germany. The app connects to it over HTTPS (api.snomo.nathparnell.com). The database can’t be reached directly from the internet. The API connects to it with an account that can read and write data but can’t change the database structure.

The database is backed up automatically every day. Backups are stored on the same server, with access limited to the server administrator, and are deleted after 14 days. A one-off copy of the database from when Snomo moved to this server in November 2026 is also kept, on the server and on the developer’s computer.

The nathparnell.com domain uses Cloudflare for DNS only. App traffic goes straight to the server and doesn’t pass through Cloudflare.

What the server logs

The API keeps short technical logs so problems can be fixed. For each request, it logs:

• the type of request and which feature it used (the route pattern, for example /api/holidays/{id}, not the address you actually requested)
• the result status, how long it took, and a random trace ID that links an error message to its log line
• for changes, your internal account ID and the ID of the record that changed
• for rejected sign-ins, only the type of failure

The API is deliberately built not to log sign-in tokens, email addresses, dates of birth, names, notes, search text, query strings or the contents of requests and responses. It doesn’t log IP addresses, and the web server in front of it has no access log for the Snomo API. Logs are rotated automatically and kept only up to a small fixed size (30 MB), so older entries are overwritten.

Who else is involved

We use a small number of service providers to run Snomo:

Snomo has no advertising, no analytics or crash-reporting tools, and no tracking. We never sell your data or share it with advertisers or data brokers. We’ll share data only if the law requires it.

How long data is kept

• Your profile and passport are kept for as long as your account exists.
• Deleting a holiday hides it straight away for everyone on it. The record and its days and notes are currently still kept in the database, so a holiday you delete can still be fully removed later if you ask. Records of ended friendships, expired invitations and past holiday memberships are also kept so they can’t be reactivated by mistake.
• Daily backups are deleted after 14 days. The one-off transfer copy described above is kept until it’s no longer needed for recovery.
• Server logs are overwritten automatically, as described above.

Access, correction and deletion

• Correct: you can change your display name, date of birth and winter sports with Edit profile, and edit or delete your holidays and days in the app.
• Access: email us and we’ll send you a copy of the data Snomo holds about you.
• Delete your account: the app doesn’t have a delete-account button yet. Until it does, email snomo@nathparnell.com from the address you sign in with. We’ll delete your Snomo account and data, including deleted holidays, and your Auth0 login. Removed data disappears from backups within 14 days.

We may ask you to confirm the request from your sign-in email address so that nobody else can ask for your data. Depending on where you live, you may have further rights under data protection law, including the right to complain to your local data protection authority.

Children

Snomo asks for a date of birth but doesn’t currently set a minimum age. It isn’t designed for young children. If you’re a parent or guardian and think your child has created an account, contact us and we’ll delete it.

This website

This website is a few static pages. It uses no cookies, analytics, tracking or advertising, no scripts, and nothing loaded from other websites. It’s served from the same Hetzner server as the Snomo API, and the web server keeps no access log for it.

Changes and contact

If we change how Snomo handles your data, we’ll update this page and the “last updated” date above.

Questions or requests: snomo@nathparnell.com.