Privacy Policy

Wynla (operated by Saitarn Care) is an early-stage product built by a solo founder. The service runs at wynla.appand helps US skiers and snowboarders discover resorts and plan multi-stop trips. There's no marketing department or data broker behind it — just one person, this site, and the third parties listed below.

• Your email — when you sign in. We use Supabase magic links, so we never see or store a password.
• Browser location — only if you tap "use my location" and approve the browser prompt. Used in-session to show resorts near you. We don't log or store your coordinates server-side.
• Saved trips, favorites, compare list, snow-alert preferences — what you create while signed in. Stored against your account so you see the same data on every device.
• Push-notification subscription — if you opt in to snow alerts. Your browser hands us a Web Push subscription object (an endpoint and two keys); we store that so we can send the alert. No content of your browsing is attached.
• Subscription state — if you upgrade to Pro, Stripe tells us whether your subscription is active. We store your Stripe customer ID and status, never your card number.
• Reviews you post — visible publicly on the resort page you wrote them for, with the display name you choose.
• Anonymous analytics — Vercel Analytics and Speed Insights track page views and load performance. No cookies, no fingerprinting, no cross-site tracking.

We do not collect facial photos, payment-card numbers, Social Security numbers, government ID, contacts, microphone, or camera input.

• Sign you in and keep you signed in.
• Show your trips, favorites, and alert preferences across devices.
• Send the snow alerts and the weekly digest you opted into (and only those — no marketing blasts).
• Charge your Pro subscription via Stripe and unlock the matching features on your account.
• Understand which pages are slow or broken so we can fix them.

We do notsell, rent, or trade your data. We don't share it for ad targeting. The only parties that touch it are the service providers we use to run the product, listed below.

We may disclose data if compelled by a valid US legal request (subpoena, court order). If that happens and we're permitted to tell you, we will.

These are the services that make Wynla work. Each handles encryption and security on their end — we don't replicate their security stacks, we trust theirs.

• Supabase — authentication and database (hosted in the US).
• Vercel — web hosting, anonymous analytics, performance metrics.
• Stripe — processes Pro subscription payments. Stripe handles card data directly; we never see your card number.
• Mapbox — renders the map. Mapbox sees the tiles your browser requests and your approximate location (from your IP) when you load them.
• Booking.com, Airbnb, lift-ticket vendors — when you click an external booking link from a resort page, you leave Wynla. Those sites set their own cookies and may use affiliate tracking that lets us know a referral converted. We don't pass them your email or account.

We use a small number of cookies for things that have to work:

• A Supabase session cookie that keeps you signed in.
• A preference cookie or two (e.g. distance units, last-used filters) so the app remembers how you like it.

We do not use third-party advertising or cross-site tracking cookies. Vercel Analytics works without cookies.

• Access — email saitarncare@gmail.com and we'll send you a copy of what we have on file.
• Delete — you can delete your account from /account at any time. We remove your profile, trips, favorites, and alert subscriptions within 30 days. Reviews you posted publicly stay up unless you ask us to remove them.
• Export— ask and we'll send your saved trips and favorites as a JSON file.
• Turn off alerts — unsubscribe in /account, or hit unsubscribe in any digest email. Push notifications can also be revoked in your browser settings.
• EU / UK / California residents — we don't have a dedicated data protection officer (we are not big enough yet), but if you have a GDPR or CCPA request, email us and we'll honor it.

We keep your account data while your account is active. If you delete the account, the data is wiped within 30 days, except anything we're legally required to retain (e.g. Stripe keeps payment records for tax law). Anonymous analytics roll up into totals and aren't tied back to you.

Wynla is for users aged 16 and over. We don't knowingly collect data from anyone younger. If you believe a child has created an account, email us and we'll delete it.

Wynla is hosted in the United States. If you use the site from outside the US, your data is transferred to and stored on US servers. By using Wynla you understand and consent to that.

Data in transit is encrypted via HTTPS. Data at rest is stored in Supabase Postgres and protected by Supabase's and Vercel's infrastructure. Payment data is held by Stripe. No system is unbreakable; if we learn of a breach that affects your account, we'll email you.

If we make a meaningful change — for example, adding a new third-party service or starting a new type of data collection — we'll update the "Last updated" date at the top and, for material changes, email registered users.

Questions, requests, complaints, or just curious? Email saitarncare@gmail.com. One person reads that inbox and replies personally.