ROVE Privacy Policy

1. Scope

This Privacy Policy applies to the ROVE website (rove-ski.com), the ROVE Ski iOS app, and the ROVE Snow Forecast Model Context Protocol (MCP) server and AI connectors (https://rove-ski.com/mcp).

2. Information We Collect

• Web and Authenticated MCP Requests: Read-only forecast pages are public. MCP tool calls require a free ROVE account with OAuth 2.1 or a personal API key. For operational security and abuse prevention, our edge infrastructure processes transient request metadata including client IP address (used for operational security; authenticated MCP access is limited to 600 requests per minute), HTTP user-agent, requested resort slug or query parameters, and timestamp.
• Optional Account Information: If you sign in on rove-ski.com or authorize an OAuth 2.1 client with the mcp:read scope, we process the account identifiers supplied by your sign-in method, email address where provided, saved resorts, and authorization credentials needed to operate the service. Account features may also store the profile and content you choose to submit.
• Optional Approximate Location: If you grant location permission to sort nearby ski resorts, coordinates are used to compute distance. If you choose to record a ski day, precise location is used during recording and a ski-day summary and simplified route are saved.
• Diagnostics and Analytics: On public web pages, we use Google Analytics 4 to measure aggregate page views and feature usage. Embedded widgets (/embed/*) and MCP API endpoints (/mcp) run zero third-party analytics trackers.

3. How ROVE Handles AI Connector and MCP Data

• Read-Only Tool Execution: All ROVE MCP tools are strictly read-only queries against ROVE's ski resort catalog, weather forecasts, and station-verified accuracy records. ROVE MCP tools do not modify user accounts, process payments, or write external data.
• No Training on Prompts: ROVE does not store full conversational histories from AI assistants and never uses MCP tool arguments or OAuth account data to train machine learning models.
• OAuth 2.1 Tokens and Dynamic Client Registration: When you connect via OAuth 2.1 (scope mcp:read), ROVE issues scoped tokens solely to authenticate higher-rate API requests on your behalf. You may revoke access at any time from your AI client or by contacting us.

4. How We Use Information

We use the information described above solely to:

• Deliver ski resort weather forecasts, snow conditions, and accuracy metrics;
• Synchronize saved resorts and preferences across your signed-in devices;
• Enforce fair-use rate limits, prevent automated abuse, and maintain service reliability;
• Respond to support, privacy, and data deletion requests.

5. Data Sharing and Subprocessors

We do not sell, rent, or trade your personal information. We rely on infrastructure providers strictly to host and operate ROVE:

• Netlify (edge hosting, serverless MCP execution, and transient request logs);
• Tencent CloudBase (optional accounts, saved resorts, and user-submitted content);
• Google Firebase (website sign-in), Resend (email sign-in codes), and Google Analytics (website and app usage statistics);
• These providers may process information internationally under their own service terms and privacy policies.
• Public Weather and Snowpack Sources: Weather model inputs and station observations are fetched server-side from Open-Meteo, USDA NRCS SNOTEL, NOAA, and Environment Canada without transmitting end-user identifiers.

6. Data Retention and Deletion

• Transient rate-limit counters expire automatically within minutes. Hosting providers process operational logs according to their service settings and policies.
• Optional account records and saved resorts are retained until you delete your account.
• You can delete your account directly inside the ROVE Ski iOS app (Me -> Account -> Delete Account) or request assistance by emailing login@rove-ski.com. Account deletion removes your profile, ski records, follows, and alerts; previously submitted posts and comments may remain anonymized. Optional integrations may require separate account deletion.

7. Your Privacy Rights

Depending on your jurisdiction (including California CCPA/CPRA, Virginia, Colorado, the European Economic Area, and the United Kingdom), you have the right to access, correct, export, or delete personal information we hold about you, and to withdraw consent at any time without discrimination.

8. Children's Privacy

ROVE is a general-audience weather information service and does not knowingly collect personal information from children under 13.

9. Contact Us

For privacy inquiries, OAuth token revocation, or data deletion requests, contact ROVE at login@rove-ski.com.