Privacy Policy
Last Updated: September 17, 20261. Overview & Scope
The Alpental-Snoqualmie Ski Foundation ("TAS Ski Team," "we," "us," or "our") operates the TAS Ski platform (tas.ski) to manage alpine ski racing programs, camps, athlete registrations, coaching rosters, event scheduling, and team communications.
This Privacy Policy explains how we collect, use, store, share, and protect your personal information and your athletes' data when you visit our website, create an account, register for programs, or interact with our services.
2. Cookies and Client-Side Storage
When you use our website, we and our service providers place small data files on your device—including HTTP cookies, HTML5 localStorage, and browser IndexedDB stores. These technologies are used to maintain your authenticated session, secure our forms against automated bot abuse, and analyze aggregate site usage.
Client-Side Storage Keys & Cookies
| Identifier | Type / Technology | Provider | Purpose | Retention |
|---|---|---|---|---|
| _ga | HTTP Cookie | Google Analytics 4 | Distinguishes unique site visitors across browsing sessions for aggregate analytics. | 2 years |
| _ga_XE1WKWKXE4 | HTTP Cookie | Google Analytics 4 | Maintains aggregate session state and interaction count for the TAS website property. | 2 years |
| _grecaptcha | localStorage | Google reCAPTCHA / App Check | Fraud prevention, bot defense, and verification of legitimate user interactions on forms. | 6 months / Persistent |
| firebaseLocalStorageDb | IndexedDB | Firebase Auth | Maintains your signed-in user session, auth token, and permission state. | Session or Persistent (based on "Keep me logged in" preference) |
| firebase-app-check-database | IndexedDB | Firebase App Check | Stores App Check security tokens to ensure all database calls originate from authorized club clients. | Persistent |
| firebase-installations-database | IndexedDB | Firebase SDK | Unique installation identifier used to manage SDK connections and service authentication. | Persistent |
| firebase-heartbeat-database | IndexedDB | Firebase SDK | Internal client telemetry and heartbeat caching for Firebase connection health. | Persistent |
| rememberMe | localStorage | TAS Ski Auth | Records user preference for persistent authentication versus idle inactivity timeout. | Persistent |
| tas_dashboard_mode_{uid} | localStorage | TAS Ski Dashboard | Remembers the signed-in staff member's preferred Parent / Guardian, Coach, or Administrator dashboard view. Contains no family, athlete, or payment data and is checked against the current account role before use. | Persistent until cleared in browser settings |
| sessionActive / Activity Timestamps | sessionStorage | TAS Ski Session Timeout | Tracks cross-tab activity and enforces 30-minute idle session timeout when "Keep me logged in" is unchecked. | Tab session only |
| registrationFormData / registrationActiveStep | sessionStorage / localStorage | TAS Ski Registration | Preserves in-progress registration draft data across multi-step flow. Strictly scoped to authenticated user UID. Cleared immediately on sign-out, session timeout, or registration completion. | Session (default) or Persistent (if "Keep me logged in" checked) |
| tas_latest_registration_confirmation | sessionStorage | TAS Ski Registration | Temporarily caches completed registration summary for graceful page reloads. Strictly bound to authenticated user UID. Cleared immediately on sign-out, session timeout, or expiration (1 hour). | Tab session only (1-hour max TTL) |
Strictly Necessary vs. Analytics: Session storage, Firebase authentication, and App Check / reCAPTCHA security tokens are strictly necessary for the operation, safety, and integrity of the platform. When "Keep me logged in" is unchecked on login or registration forms, session-scoped persistence is utilized and user sessions automatically sign out after 30 minutes of idle inactivity. Checking "Keep me logged in" maintains persistent authentication across browser sessions on trusted private devices. Google Analytics cookies (_ga, _ga_*) collect pseudonymized traffic data. You may block or clear cookies via your web browser settings at any time, though doing so may prevent you from remaining logged into your account.
3. Third-Party Data Processors
We transmit personal data only to trusted service providers bound by contractual obligations to protect your information and use it exclusively for the services they provide to us:
• Google LLC (Google Cloud & Firebase): Cloud infrastructure provider hosting our authentication services (Firebase Auth), application database (Cloud Firestore), serverless endpoints (Cloud Functions), asset storage (Cloud Storage), bot defense (reCAPTCHA Enterprise), Google Analytics, and typography services (Google Fonts).
• Stripe, Inc.: Payment processing platform. All credit card, debit card, and bank transactions are processed directly on Stripe's PCI-DSS compliant infrastructure via Stripe Elements and Stripe Link accelerated checkout. Sensitive primary account numbers (PANs) never touch or reside on TAS Ski Team servers.
• Cloudflare, Inc.: DNS hosting, edge network security, DDoS mitigation, and serverless Cloudflare Workers for secure email intake.
• Amazon Web Services (Amazon SES): Transactional email service provider utilized for sending account verification links, passwordless login emails, registration receipts, and program broadcast communications.
• GitHub, Inc.: Software issue tracking platform used to triage bug reports, feature requests, technical diagnostic metadata submitted through the in-app "Report Issue" modal, and unmatched Stripe payment events. Payment-integrity issues may include a Payment Intent ID, amount, payment method type, customer email and Stripe description when provided by Stripe, timestamp, environment, and reconciliation links; they never include card numbers, CVVs, or expiration dates.
4. Athlete Information & Medical Notes
To safely operate on-snow competitive ski training, races, and travel camps, we collect athlete profile details submitted directly by their parent or legal guardian. This information includes:
• Athlete Identification: Full legal name, date of birth, age, gender, and US Ski & Snowboard (USSS) and/or FIS membership numbers.
• Emergency Contacts: Names, relationships to the athlete, phone numbers, and alternative emergency contacts authorized to make decisions in the event a guardian cannot be reached (designated per athlete emergency contact).
• Medical & Health Information: Guardian-supplied medical notes, allergies, dietary restrictions, chronic conditions, and emergency medical treatment authorizations.
Access Restriction: Athlete health and emergency information is treated with heightened confidentiality. It is segregated within our systems and strictly limited to the athlete's verified guardians, assigned program coaches, and club leadership solely for emergency response, athlete safety, and on-hill supervision.
5. Family Accounts & Co-Guardian Access
The TAS platform organizes athletes under family accounts. A parent or guardian may invite a co-guardian (such as a spouse, co-parent, or legal custodian) to link to their family account.
Shared Visibility: When an invited co-guardian accepts an invitation, they gain visibility into the family's athletes, program registrations, training schedules, emergency contacts, and billing records. Guardians should only extend invitations to authorized family members or trusted custodians.
6. Team Communications & Email Broadcasts
We communicate with families through email and SMS text messaging:
• Essential Operational Communications: Includes sign-in links, payment receipts, registration confirmations, urgent schedule changes, weather alerts, and safety advisories. These communications are necessary to deliver program services and cannot be opted out of while an athlete is actively registered.
• Program Broadcasts & Newsletters: General team announcements, training tips, fundraising events, and club newsletters sent to program families.
• User Feedback & Technical Support: When you submit an issue report via the in-app "Report Issue" dialog, we collect your name and email address (prepopulated if signed in), issue category, browser/device environment context, and optional diagnostic screenshot uploads to diagnose defects and track resolution.
Managing Preferences & Opt-Out: Guardians may opt out of non-essential broadcast emails at any time by clicking the "unsubscribe" link in the footer of any group email, or by visiting our Unsubscribe Page.
7. Protection of Children's Information (COPPA)
We take the privacy of children seriously. For athletes under the age of 13, all registration information, medical details, and contact points must be provided directly by a verified parent or legal guardian. We do not knowingly solicit or collect personal information directly from children under 13. If you believe an athlete under 13 has submitted information directly without parental authorization, please contact us immediately at info@tas.ski so we can delete the information.
8. Data Retention and Security
We implement industry-standard administrative, technical, and physical safeguards—including SSL/TLS transit encryption, firewalls, and role-based database access controls—to protect your personal information against unauthorized access, loss, or misuse.
Account and registration records are retained for the duration of an athlete's active tenure with TAS Ski Team and for a subsequent archive period consistent with athletic governing body (US Ski & Snowboard) rules, liability insurance policies, and statutory recordkeeping requirements.
9. Your Rights & Data Subject Requests
Parents and guardians may review, update, correct, or request the deletion of their personal information and linked athlete profiles at any time through the TAS Family Hub or by contacting us directly.
Upon receiving a verified deletion request, personal identifiers will be removed or anonymized, subject to our obligation to retain certain operational records (such as completed financial transactions and signed liability waivers) where required by law or insurer guidelines.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:
Alpental-Snoqualmie Ski Foundation (TAS Ski Team)
Email: info@tas.ski
Website: tas.ski
Location: Seattle / Snoqualmie Pass, Washington