Cookie, tracker and similar technologies policy

This policy explains how Skiway uses or does not use cookies, trackers, SDKs, similar technologies and third-party services across its various environments: the showcase website, the B2B dashboard and the Skiway mobile app.

This page clearly distinguishes:

the showcase website accessible at skiway.app;
the B2B dashboard accessible at dashboard.skiway.app;
the Skiway mobile app;
the technical providers used for analytics, errors, maps, emails, payments and authentication.

Last updated: June 15, 2026

1. Status of the skiway.app showcase website

The skiway.app showcase website, on which Skiway's legal information pages can in particular be viewed, does not place cookies and does not use analytics, advertising, audience-measurement or behavioural tracking trackers.

As a result, no cookie consent banner is displayed on the showcase website when it does not actually place any cookie or tracker subject to consent.

If cookies, trackers or measurement tools are added later on the showcase website, this policy will be updated and, where the regulations require it, a consent mechanism will be put in place before any non-essential placement or reading.

Service	Domain	Technology	Purpose	Consent	Retention
Skiway showcase website	skiway.app	No non-essential cookie or tracker	Viewing of public pages, in particular the legal information pages.	Not applicable	No cookie placed by the showcase website.

2. What is a cookie or a tracker?

A cookie is a small file or identifier that may be saved on the user's device when they browse a website or use an online service.

The term "tracker" more broadly refers to technologies that allow information to be read from or written to the user's device, or that track certain usage events. These may be cookies, local storage, technical identifiers, pixels, tags, mobile SDKs, technical logs or analytics events.

In a mobile app, tracking technologies do not always take the form of browser cookies. They may be embedded in third-party SDKs or services used for product analytics, error fixing, mapping, authentication or payments.

3. Technologies used in the B2B dashboard and the mobile app

Unlike the showcase website, the Skiway B2B dashboard and mobile app may use SDKs, third-party services, analysis tools or technical providers necessary for the operation, improvement, security or monetisation of the service.

The main services currently used or planned are as follows:

Service	Environment	Technology	Purpose	Data concerned	Consent / basis for processing
Sentry	Skiway mobile app	Diagnostic and error-tracking SDK	Detection, analysis and correction of errors, crashes, technical problems and malfunctions of the app.	Technical data, error logs, device information, execution context, app version, error-related events. The data sent must be limited to what is strictly necessary.	Generally not required where the processing is strictly necessary for the security, technical diagnosis and stability of the service. To be re-assessed if unnecessary data or sensitive information is collected.
PostHog	Skiway B2B dashboard and mobile app	Product analytics and analysis tool	Understanding the use of the service, measuring the features used, improving the product, analysing journeys and prioritising developments.	Usage events, technical or user identifiers, session information, account or organisation properties, interactions with certain features.	To be assessed depending on the configuration. Product analytics that are not strictly necessary may require consent or a clear objection mechanism, depending on the data collected, the B2B/mobile context and the exact purposes.
Mapbox	Skiway mobile app	Mapping SDK and services	Displaying maps, generating map data, location- and navigation-related features.	Technical data, map requests, map information, location data or data associated with the use of maps depending on the SDK configuration.	Access to location requires explicit permission from the mobile system. Processing that is not strictly necessary or telemetry must be clearly explained and, where required, subject to the user's choice.
Resend	Email services and newsletters	Email sending provider	Sending transactional emails, service communications, newsletters and account- or product-related messages.	Email address, message content, sending metadata, delivery status, opens or clicks if tracking is enabled.	Consent is required for marketing newsletters. Transactional emails strictly necessary to the service may rely on performance of the contract or legitimate interest as the case may be.
Stripe	Payments and subscriptions	Payment provider	Processing payments, subscriptions, billing, fraud prevention, refund management and accounting obligations.	Payment data, billing identity, email address, transaction history, card information processed by Stripe, anti-fraud data.	The processing is generally necessary for the performance of the contract or compliance with legal obligations. Some Stripe cookies or mechanisms may be necessary for payment or fraud prevention.
Google OAuth	Skiway mobile app	Sign-in via Google account	Authentication of the user via their Google account.	Google ID, email address, surname, first name, avatar or other information authorised by the user depending on the permissions requested.	The user voluntarily chooses this sign-in method and approves the permissions presented by Google. Skiway must limit the permissions requested to what is strictly necessary.
Facebook OAuth	Skiway mobile app	Sign-in via Facebook account	Authentication of the user via their Facebook account.	Facebook ID, email address, surname, first name, avatar or other information authorised by the user depending on the permissions requested.	The user voluntarily chooses this sign-in method and approves the permissions presented by Facebook. Skiway must limit the permissions requested to what is strictly necessary.

4. Sentry: error tracking and technical diagnosis

Skiway uses Sentry in the mobile app to detect errors, crashes, slowdowns or technical malfunctions.

The purpose of this processing is to ensure the stability, security and technical quality of the service. The data sent to Sentry must be limited to what is strictly necessary and must not intentionally contain sensitive information, private content or payment data.

Skiway takes care to configure Sentry so as to reduce the data collected, filter sensitive information and limit the retention of technical events to the periods necessary for diagnosis.

5. PostHog: product analytics

Skiway uses PostHog in the B2B dashboard and in the mobile app to understand the actual use of the service, improve the user experience, measure feature usage and prioritise product development.

The events collected may relate to interactions with the service, the features used, journeys within the interface, technical session information and certain account or organisation identifiers.

Skiway must configure PostHog according to a data-minimisation approach. The most intrusive features, such as session recording, overly broad autocapture or the collection of unnecessary properties, must only be enabled where they are necessary, documented and compliant with the user's choices.

Where PostHog trackers or events are not strictly necessary to the operation of the service, Skiway puts in place a mechanism allowing the user to refuse or disable product analytics, where the regulations require it.

6. Mapbox: maps and location

Skiway uses Mapbox to provide mapping features in the mobile app, in particular displaying maps, generating maps, navigation or certain location-related features.

Using location features requires specific permission from the mobile system. The user can accept, refuse or withdraw this permission from their device settings.

The accuracy of the location depends on the terminal, the operating system, the GPS, the network, the field conditions and the technical services used. Skiway does not guarantee the permanent accuracy of the displayed location.

The user must not use Skiway as their only means of orientation, safety or rescue in the mountains.

7. Resend: emails and newsletters

Skiway uses Resend to send emails, in particular service emails, transactional emails, confirmations, notifications, account-related communications and newsletters.

Newsletters or marketing communications are only sent where the user has consented or where the regulations allow communication within an existing relationship, according to the applicable conditions.

The user can unsubscribe from newsletters at any time using the unsubscribe link in the relevant emails or by contacting Skiway.

If open or click tracking of emails is enabled, this information must be stated to the user in the privacy policy. Skiway must avoid any unnecessary or excessive tracking.

8. Stripe: payments and subscriptions

Skiway uses Stripe to process payments, subscriptions, invoices, refunds, payment methods and fraud prevention measures.

Payment data is processed by Stripe. Skiway must not directly store full bank card numbers when payment is handled via Stripe.

Some cookies, trackers or technical mechanisms used by Stripe may be necessary for the operation of the payment, security or fraud prevention.

The conditions applicable to payments, subscriptions, refunds and cancellations are specified in the terms of use or the applicable commercial conditions.

9. OAuth sign-in with Google and Facebook

The Skiway mobile app may offer sign-in via Google OAuth or Facebook OAuth.

When the user chooses this sign-in method, they are redirected to the relevant service in order to authenticate and authorise the sharing of certain information with Skiway.

Skiway undertakes to limit the permissions requested to what is strictly necessary to create or connect the user account. The information that may be received may include, depending on the provider and the permissions approved, the account identifier, the email address, the surname, the first name and the profile picture.

Using Google or Facebook to sign in is optional. The user can choose another sign-in method where one is offered by Skiway.

10. Managing consent and preferences

On the skiway.app showcase website, no cookie consent module is necessary as long as no cookie or tracker subject to consent is used.

On the B2B dashboard and in the mobile app, Skiway puts in place the appropriate mechanisms where certain trackers, SDKs or processing require consent or a possibility to object.

Depending on the features concerned, the user can manage certain choices:

from the mobile app settings;
from the device's privacy settings;
from the mobile system's location settings;
from the B2B dashboard where preferences are offered;
from the unsubscribe links in the newsletters;
by contacting Skiway at the address shown at the bottom of the page.

11. Mobile permissions

Certain features of the mobile app may require specific permissions, in particular access to location.

The user can grant, refuse or withdraw these permissions from their device settings. Refusing or withdrawing a permission may prevent certain features from working correctly, in particular features related to the map, navigation, position tracking or groups.

Skiway must explain the purpose of each permission requested and must not request permissions without a direct link to the features offered.

12. Retention periods

Retention periods vary depending on the technologies used and the purposes pursued.

Technical diagnostic data is retained for a limited period necessary to identify and fix errors.
Product analytics events are retained for a period proportionate to improving the service and measuring usage.
Newsletter-related data is retained until consent is withdrawn, unsubscription, or the expiry of the period needed to prove consent.
Payment- and billing-related data may be retained for the periods imposed by accounting, tax and legal obligations.
Authentication-related data is retained for the lifetime of the account, unless deleted, or where a legal obligation or security need applies.

The exact periods applicable to personal data are specified in the Privacy policy .

13. Transfers outside the European Union

Some providers used by Skiway may be located outside the European Union or process data from third countries, in particular in the context of analytics, technical diagnosis, mapping, email, payment or authentication services.

Where transfers of personal data outside the European Union take place, Skiway ensures that they are governed by appropriate safeguards in accordance with the applicable regulations.

Skiway may, in particular, rely on standard contractual clauses, data processing agreements, the data-location settings available from the providers, or any other mechanism recognised by the applicable regulations.

14. Personal data

Some services mentioned in this policy may involve the processing of personal data, in particular technical data, usage data, account data, location data, email data, payment data or authentication data.

This policy supplements the Privacy policy , which more broadly describes the personal data processing carried out by Skiway, its purposes, its legal bases, its retention periods, its recipients and users' rights.

15. Updates to this policy

This policy may be updated to reflect changes in the showcase website, the B2B dashboard, the mobile app, the tools used, the technical providers or legal obligations.

If cookies or trackers subject to consent are added on the showcase website, or in the event of a substantial change to the technologies used in the dashboard or the mobile app, Skiway may update this policy and request a new choice from the user where this is necessary.

16. Contact

For any question relating to this policy, cookies, trackers, SDKs, third-party services or the management of preferences, the user may contact Skiway at the following address:

mathieu@skiway.app