Shredlytics · Privacy
Privacy Policy
Effective October 30, 2026
Shredlytics is developed and operated by Shredlytics LLC, a New Hampshire limited liability company (“Shredlytics”, “we”). This policy covers the Shredlytics iPhone app and shredlytics.com. The app is in development; this policy describes its implemented data flows and will be updated as those flows change.
Tracking and scoring are processed on your phone. Recorded route points and replays are not uploaded to our servers as session history. Account information, session summaries and content you submit are stored on our servers. Map services receive their own requests, and a map correction you choose to send can include coordinates. We do not sell personal data or share it for advertising.
Information processed on your phone
- Location and motion during recording. GPS, altitude, accelerometer and gyroscope samples support run and lift detection, speed and vertical estimates, and experimental movement scores. Recorded routes and replays are stored in the app’s local storage rather than synced as session history.
- Imported sessions. A GPX file you select is read to create session history. The imported file is not retained by the app; route points stay in local storage and supported session summaries can sync to your account.
- Compass heading, for the “Around you” skyline feature.
- Camera access, for scanning a friend’s QR code. This feature does not capture or store a photo or video.
Map display and SDK telemetry are separate from our session-history sync, as described below. Sharing or exporting a route yourself also sends it to the destination you choose.
Information stored on our servers
| Information | Use and visibility |
|---|---|
| Account email and sign-in method | Authentication and account administration. Not displayed to other riders. |
| Profile: Shredder Tag, optional name, avatar, stance, units, height, passes, gear locker and settings | Your tag and avatar appear in public community features. Your optional name is shown to friends. Height, passes and gear locker are private account fields. |
| Session and run summaries: times, resort, matched trail and lift identifiers, distance, vertical, speed estimates, scores, jump counts, imported-session flag and gear/setup identifiers | History, experimental insights, and community features. Friends and leaderboards can see information exposed by those features and your settings. Recorded route points are not included in this sync. |
| Friends, requests and invitations | Connecting accounts and managing invitations. |
| Reviews, votes, condition reports and flags | Community content and moderation. Reviews, ratings and conditions can appear publicly in the app and on our website, associated with your Shredder Tag. |
| Private notes | Your own notes about resorts, trails and places. Not published to other riders. |
| Map correction submissions | The proposed change, note, resort or feature identifiers, app version, and any line or pin you choose to submit. A drawn line or pin contains coordinates. These submissions are reviewed by Shredlytics and are not displayed as your public activity. |
| Tag-change history and operational records | Account administration, abuse prevention and service operation. |
A matched resort, trail or lift and a session timestamp can reveal where and when you rode, even without a recorded route. They should be treated as location-related information.
How we use information
We use information to authenticate accounts, restore supported session summaries, provide history and community features, review map corrections, respond to support requests, and operate and protect the service. Typical lift-wait estimates are derived from recorded activity; we do not promise that each estimate represents a minimum number of distinct riders.
We send sign-in emails and respond to messages you send us. We do not add you to a marketing list simply because you contact support. We do not use advertising networks or cross-app advertising identifiers.
Service providers
| Provider | Information involved and purpose |
|---|---|
| Supabase, hosted in the United States | Account data, session summaries and submitted content; database, authentication and backend services. |
| Apple | Sign in with Apple when used, and App Store or TestFlight distribution. |
| Google, if Google sign-in is offered in your build | The sign-in interaction and account information you authorize for authentication. |
| Amazon Web Services SES, United States | Email address and sign-in email content for email delivery. |
| Mapbox | Map requests and related network/device information. The iPhone Maps SDK also has telemetry that can include location and usage information under Mapbox’s policy. The app’s map information menu provides Mapbox’s telemetry choice. |
| Google Firebase Hosting | Website delivery and related network and request information. |
Mapbox processes map and telemetry data under its own privacy policy and explains mobile telemetry and opt-out. Disabling telemetry does not stop the network requests needed to load online maps. Weather requests made by our backend use resort coordinates rather than your recorded route.
Service providers process information to deliver their services. We may also disclose information when legally required or where necessary to protect the service and people’s rights and safety.
Your choices and account deletion
- Friend sharing. “Share my day with friends” controls whether friends can see your resort activity and matched lift or trail. This is location-related information even though a live GPS coordinate is not shared through this feature.
- Leaderboards. Account settings let you limit leaderboard participation to friends. Reviews and other public community posts have separate visibility.
- Delete your account. Use Account › Delete Account while connected to the internet. The app asks you to confirm; Apple sign-in accounts also use a fresh Apple authorization. When the server confirms deletion, linked account data is removed from the live database and the app clears that account’s local storage. If the request fails, the app reports the failure so you can retry. Deletion is not a two-tap or offline operation.
- Unable to sign in? Email support@shredlytics.com from your account address. We verify the request and handle account deletion requests within 30 days. An email request does not remotely erase a copy already stored on another device.
- Access and export. Contact the same address to request your account data. Recorded routes that were never synced are available only from the device that holds them; the app supports GPX export for locally recorded days and runs.
The server retains a deletion-event record without your account ID, email or Shredder Tag. Existing provider backups may contain older copies until those backups expire. Their retention depends on the configured service plan; deleting an account does not immediately erase existing backups.
Retention and security
Account-linked data is generally kept while your account exists, unless you remove supported content earlier. Invitations and authentication links expire. Signing out removes the active sign-in session but keeps that account’s locally stored days and routes for its next sign-in on the same phone.
Data is transmitted over HTTPS. Authentication and database access controls separate private account data from public community content. No system can guarantee absolute security.
This website
You do not need an account to browse shredlytics.com. We do not run advertising or site analytics scripts.
- Browser storage. Resort filters, selected passes, sort order and map appearance are saved in your browser’s local storage. You can clear them through your browser’s site-data controls.
- Near me. If you choose a location-based resort filter and allow browser location access, the page uses your coordinates in the browser to calculate distances. Our resort-search code does not send those coordinates to our server.
- Maps and resort requests. Interactive maps load resources from Mapbox. Public resort data, status and community content are fetched from our backend. These requests expose normal network information, such as your IP address, to the provider receiving them.
- Hosting. Firebase Hosting and its infrastructure process network and request information to deliver and protect the site. If you email us, we receive your email address and the information in your message.
Children and international users
Shredlytics is not directed to children under 13. You must be at least 13 to create an account. If you believe a child under 13 has provided personal information, contact us so we can investigate and remove it.
Our backend is hosted in the United States. Depending on where you live, you may have rights to access, correct, delete or obtain a copy of your data, or object to certain processing. Contact us to make a request.
Changes and contact
We will publish changes here with an updated effective date. Material changes will also be communicated through the app when applicable.
Shredlytics LLC