POWFIND FIELD NOTES

Privacy

PowFind stores your email address, selected resorts, alert preferences and session records in Cloudflare D1. Authentication uses a necessary HttpOnly session cookie. Sign-in tokens and session tokens are stored as hashes; sign-in links expire after 15 minutes and sessions after 30 days.

Analytics count daily page views, searches, alert signups and booking-link clicks. They do not store visitor profiles, analytics cookies, raw IP addresses, query strings or precise location histories. A short-lived hash of an IP address is used for rate limits. DNT and Global Privacy Control signals suppress analytics.

When you search, your selected or browser-provided location is sent to the server. Live routing requests send rounded coordinates to OSRM / FOSSGIS (or openrouteservice when configured) and cache routes for up to seven days. These providers may retain request logs under their own policies. Saved driving alerts retain the location until you delete the alert. Search terms are not retained as analytics events.

External booking sites and data providers have their own privacy policies. Sign-in links and subscribed powder alerts are delivered through Cloudflare Email Service. Powder watchlists do not require a starting location or travel prices. We do not sell subscriber mailing lists. Delete alerts from your account; contact the operator for account removal. Expired tokens, sessions and cache entries are pruned by the scheduled job.

Aggregate metrics are retained for up to 400 days. Delivery deduplication records are kept for 90 days. Infrastructure providers may retain operational logs under their own policies. For help or data-removal requests, use our contact page.