SKIPRI

Privacy policy

1. Data controller

skipri.com is published by TneXa. For any question about your personal data, use our contact form.

2. Data we collect

  • Browsing: you do not need an account to use the price comparison service. Technical logs, including IP address, date and requested pages, are produced by our AWS hosting provider.
  • Contact form: the name, email address and message you enter. An invisible Cloudflare Turnstile anti-spam check analyses technical signals from your browser to distinguish a person from a bot, without asking you to solve a challenge. Its operation is governed by the Cloudflare Turnstile Privacy Addendum.
  • Account and authentication: if you create an account, your email address and a technical identifier are managed by AWS Cognito. Your password is sent to the authentication service and is not stored in Skipri’s database.
  • Profile: information you choose to save, including your surname, first name, date of birth, postal address, town or city, postcode and telephone number.
  • Preferences and use of the service: activities, ski level, piste preferences, declared passes or memberships, favourite resorts and ski areas, declared visits, and saved comparison settings and results.
  • Participants: if you add other skiers, their first name, date of birth, activities, level, piste preferences and passes or memberships. You must inform them that this information is being saved and must be authorised to provide it to us. If a participant is a minor, you confirm that you are their parent or legal representative, or that you have permission from that person.
  • Payments: Stripe processes the payment and payment-method data. Skipri retains the order and payment references, plan, amount, currency, status and activation dates. Skipri does not store the full card number or security code. Stripe may assess technical signals to prevent fraud and refund abuse.
  • Audience measurement: Google Analytics cookies, only after you agree through the cookie banner.

3. Purposes and legal bases

  • Responding to contact messages: legitimate interests and steps taken before entering into a contract.
  • Creating and securing your account, saving your profile, preferences, favourites, participants and comparisons, and personalising results: performance of the service you request.
  • Processing purchases, activating access, managing withdrawals and refunds, keeping accounting records and preventing fraud: performance of the contract, legal obligations and legitimate interests in protecting the service.
  • Improving the service and producing aggregated, anonymised statistics about use and preferences: Skipri’s legitimate interest in understanding use of its service, without making decisions about an individual from those statistics.
  • Measuring the audience and improving the website: your consent.
  • Securing the website and preventing spam: legitimate interests.

4. Pinterest integration

Skipri publishes its own content, including piste images, ski-pass prices and advice, on its professional Pinterest account, @skipri_france, through the Pinterest API.

  • API access is authorised only by Skipri’s publisher using Skipri’s Pinterest account. Website visitors do not need to connect their Pinterest accounts, and Skipri does not receive, read or store any data from those accounts.
  • Skipri uses this access only to publish Pins on its own account. To choose where to publish, Skipri may read the list of its own boards. No third party’s personal data is collected or stored in this way.
  • Skipri’s Pinterest access token is stored securely on the server and is never exposed to visitors. It can be revoked at any time in the Pinterest account settings.
  • This data is not sold, used for profiling, disclosed to third parties or used to train AI models.
  • If you select a Pin or a link to Pinterest, Pinterest processes your data under its own policy: policy.pinterest.com/en/privacy-policy.

5. YouTube integration (YouTube API Services)

Skipri publishes its own videos, including piste previews, ski-pass prices and advice, on its official YouTube channel through YouTube API Services (YouTube Data API v3). When using this service, Skipri is subject to the YouTube Terms of Service and the Google Privacy Policy.

  • Who authorises access: only Skipri’s publisher, using the Google account that owns Skipri’s YouTube channel. Website visitors do not need to connect their Google or YouTube accounts; Skipri does not receive, read or store any data from those accounts.
  • Data concerned: Skipri requests only the youtube.upload permission to upload videos to its own channel. The data handled consists of the video files, titles, descriptions and tags published by Skipri itself, and the video identifier returned by YouTube. Skipri does not read third-party videos, subscribers, comments or personal information.
  • Use: these permissions are used only to publish videos on Skipri’s channel. Data obtained through the API is not sold, used for advertising or profiling, disclosed to third parties or used to train AI models.
  • Storage: the access token or refresh token supplied by Google is stored securely on the publisher’s computer and is never exposed to visitors or in the website’s source code.
  • Revoking access: permission may be withdrawn at any time from the Google security settings. Once revoked, the token can no longer be used. For any request, use our contact form.
  • Skipri’s use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

5a. TikTok integration

Skipri publishes its own videos, including piste previews, ski-pass prices and advice, on its official TikTok account through the TikTok for Developers APIs. When using them, Skipri is subject to the TikTok Terms of Service and its Privacy Policy.

  • Access is authorised only by Skipri’s publisher using Skipri’s TikTok account. Website visitors do not need to connect their TikTok accounts; Skipri does not receive, read or store any data from those accounts.
  • The data handled consists of videos, captions and publication settings created by Skipri itself. No third party’s personal data is collected.
  • The access token is stored securely on the server, is never exposed to visitors and can be revoked at any time in the TikTok account settings.
  • This data is not sold, used for profiling, disclosed to third parties or used to train AI models.

6. Use and sharing of data

Skipri does not sell or disclose to partners acting for their own purposes data that directly identifies you, including your surname, first name, email address, postal address, telephone number and date of birth.

Information about use of the service, such as activities, ski level, piste preferences, passes held and favourite resorts or ski areas, may be used to produce statistics and trend analyses. Only aggregated and effectively anonymised results, with no stable identifier or combination that could reasonably identify or re-identify a person, may be disclosed to partners, including resorts, ski areas, tourist organisations and ski-pass sellers.

Pseudonymised data remains personal data. If Skipri were to consider disclosing individual or pseudonymised data to a partner for that partner’s own purposes in the future, the people concerned would be informed in advance and an appropriate legal basis, including consent where required, would be put in place before any disclosure.

7. Recipients and processors

  • Authorised people within Skipri and its publisher, solely to the extent required by their duties.
  • Amazon Web Services for hosting, database services and Cognito authentication: European Union, Frankfurt.
  • Resend for emails sent from the contact form, including the contact details entered.
  • Cloudflare for the contact form’s Turnstile anti-spam check; see the Cloudflare Turnstile Privacy Addendum.
  • Google Analytics for audience measurement, only with your consent.
  • Stripe for payment, strong customer authentication and fraud prevention.

8. Retention periods

  • Contact messages: no more than 12 months after the last exchange.
  • Skipri account data, profile, preferences, favourites, participants, visits and comparisons: until you delete them or remove the Skipri data from the account. Saved comparisons are limited to the latest three with the Discovery plan and the latest thirty with SkiPri+.
  • SkiPri+ data, including favourites, participants and comparisons beyond the Discovery limits, favourite restaurants and SKI PLANNER trips: 12 months after SkiPri+ access ends through expiry, cancellation or withdrawal, then deleted unless SkiPri+ is reactivated first. Other Skipri data is retained as described above.
  • Email address and Cognito authentication data: for the lifetime of the shared TneVa account. Removing Skipri data does not automatically delete this account if it is used by other TneVa applications.
  • Orders, invoices and accounting records: 10 years. This retention is separate from the usage profile and is not interrupted when Skipri data is removed. Other evidence or fraud-prevention data is limited to the period required for its purpose, as documented by Skipri.
  • Technical logs: for the period required for security, incident diagnosis and proper hosting operation.
  • Audience measurement cookies: no more than 13 months.
  • Effectively anonymised statistics that can no longer identify a person may be retained for longer to monitor changes in use.

9. Your rights

Under the GDPR and the French Data Protection Act, you have rights of access, rectification, erasure, objection, restriction and portability, and the right to withdraw consent at any time using the Cookies link at the bottom of the page.

Requests are handled manually. Contact us through the contact form. We respond as soon as possible and within one month for a straightforward request. Proof of identity is requested only where there is reasonable doubt. You may also lodge a complaint with the French data protection authority, the CNIL ( cnil.fr).

10. Changes

This policy may change. Last updated: 15 October 2026.