Skip to content

Privacy Policy

Last updated: June 30, 2026

Peakcall is an independent Tahoe ski-trip planner. This policy describes what personal information we collect when you use the site, why we collect it, how it is stored, and what rights you have. We have written it to match what the code actually does — not to be a generic legal template.

1. What we collect

Email address

If you submit the snow-alert sign-up form (the “Get snow alerts” field on the home page and footer), we store your email address and a sourcelabel that records which form on the site you used (for example, “newsletter”). No other information is collected at sign-up time — we do not collect your name, location, or any other profile data.

Email addresses are stored in a Supabase database with row-level security. The table is not accessible from the browser; writes go through a server-side route that validates the address format and enforces a rate limit.

Affiliate click events

When you click a gear or lodging link that carries an affiliate tag, the site sends a background signal to our tracking endpoint. The signal records:

  • Which affiliate platform the link belongs to (Amazon, specialty retailer, or rental)
  • The item slug — a short identifier for the gear item (for example, “ski-helmet”)
  • The surface where you clicked (for example, “gear-page-essentials” or a resort page)
  • Whether the link carries an affiliate tag

We do not store your IP address in the affiliate-click record. The IP is used only server-side to apply a per-IP rate limit (to block automated abuse) and is not written to the database. The click log is anonymous by design.

Analytics events (PostHog)

Peakcall uses PostHog to measure how visitors use the site. When analytics are active we capture:

  • Page views — the URL path you visited and when (fired on every client-side navigation)
  • Trip-planning funnel events — which step of the plan flow you reached, and summary-level trip inputs such as experience level and party size (these are the choices you make in the planning wizard, not form field text you type)

PostHog is configured with autocapture disabled, meaning it does not automatically harvest text from form inputs. The free-text fields in the plan flow (origin city, driving directions) are never sent to PostHog. Session recording is also disabled. PostHog assigns a persistent anonymous identifier (stored in a browser cookie / local storage key) to distinguish unique visitors; we do not attempt to link that identifier to your email address or any other personal information.

2. Why we collect it

  • Email: to send you snow-condition alerts for Tahoe resorts when significant snowfall is forecast. We do not use your email for any other purpose.
  • Affiliate click events: to understand which gear and lodging recommendations are useful, and to attribute commissions when you purchase through affiliate links. This is how Peakcall generates revenue and stays free to use.
  • Analytics: to understand which parts of the trip-planning flow are helpful and where users get stuck, so we can improve the product.

3. Cookies and local storage

Peakcall does not set first-party cookies for advertising or tracking. The only client-side storage we use is PostHog’s anonymous visitor identifier, which PostHog stores in a cookie and/or localStorage key (the exact mechanism depends on your browser settings). This identifier has no connection to your email address or any real-world identity.

Affiliate networks (Amazon Associates, AvantLink, and similar programs) may set their own cookies when you follow an outbound link. Those cookies are governed by the respective affiliate network’s privacy policy, not this one.

4. Third-party data processors

Supabase

Email addresses and affiliate click events are stored in a Supabase database hosted on AWS infrastructure. Supabase acts as a data processor on our behalf. Data is stored in the United States. Supabase’s own privacy and security practices are described at supabase.com/privacy.

PostHog

Analytics events are sent to PostHog, Inc. (US). PostHog stores event data on its own infrastructure. PostHog’s privacy practices are described at posthog.com/privacy.

Pass-through APIs (no user data shared)

Peakcall calls several external APIs to power the trip planner — National Weather Service, Caltrans, Google Places, and OpenRouteService. These APIs receive only the data needed to answer a geographic or weather query (a place name or coordinate). None of your personal information — email address, IP, or analytics identifiers — is forwarded to these services.

Vercel hosts the site and its serverless functions. Request logs (including IP addresses) may be retained by Vercel for a short period in accordance with their infrastructure practices.

5. Data retention

We retain your email address for as long as you remain subscribed. If you unsubscribe or request deletion (see Section 6), your email is removed from our database. Affiliate click events are retained for as long as needed for revenue attribution — they contain no personal information. Analytics event data is retained according to PostHog’s default retention settings for our plan tier.

There is currently no automated deletion schedule for any of the above. We have been honest about this rather than stating a specific retention period that is not enforced in code.

6. Your rights

You have the right to request access to, correction of, or deletion of your personal information. Peakcall is a small independent site and does not currently have a self-serve deletion flow. To exercise any of these rights, please contact us directly:

Email: contact@peak-call.com. We will respond to deletion requests within a reasonable timeframe.

To opt out of PostHog analytics, you can disable JavaScript or use a browser extension that blocks analytics trackers. PostHog also honors opt-out signals in browsers that support the Global Privacy Control (GPC) header.

7. We do not sell your data

Peakcall does not sell, rent, or trade your personal information to any third party. The affiliate programs we participate in (Amazon Associates, AvantLink, and select local partner programs) receive click attribution data only — they do not receive your email address or any other personal identifier we hold.

8. Children’s privacy

Peakcall is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy when we add new features that affect how data is handled. The “Last updated” date at the top of this page reflects when the policy was last revised. We will not make material changes to how we use existing data without providing notice (for example, by email to subscribers).

10. Contact

Questions about this privacy policy? Email us at contact@peak-call.com.