Privacy

Last updated: 10 November 2026 · applies to the Neuschnee app, the website neuschnee-app.at and the Instagram profile @neuschneeapp

In short

• No account, no cookies, no advertising, no tracking, no third-party analytics services.
• The app reports individual events to our server without any identifier; they are turned into totals (see Usage counts).
• The app does not send your location to us. If you open the map, Apple sees roughly where you are.
• Our server does not log the IP addresses of the app and the website (since 2 October 2026, see Server).
• For the powder alert, the server stores your device’s notification address, your favourites and your settings. For statistics, it only counts totals from them.

Controller

Kilian Tronnier
Holzweg 3
38536 Meinersen
Germany
info@neuschnee-app.at

Server

The website and the app data are hosted on a server of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen) in Nuremberg, Germany. Hetzner processes the data on our behalf (Art. 28 GDPR).

With every request, whether from the website or from the app, the server technically receives your IP address. It uses it to respond and, for the powder alert, also to protect against abuse (see Powder alert), and does not write it to the log. For each request, the log contains the time, method, requested address (for counting requests including the details listed under Usage counts), result, amount of data and duration, but no IP address and no information about your device or browser. The daily counts are created from it (see Usage counts); the server deletes the log lines themselves after 14 days at the latest. Server error messages, also without IP addresses, remain in the system log for up to six weeks. The legal basis is our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR).

To fend off attacks, the server’s system log records login attempts on its remote access with the IP address and deletes them after six weeks at the latest. The app and the website do not use this access. Until 2 October 2026, the firewall also recorded rejected connections with IP addresses, including attempts by the app and by browsers via HTTP/3; these entries are deleted by early November 2026 at the latest (Art. 6(1)(f) GDPR).

Website

The website sets no cookies, does not measure visits and loads nothing from other servers: images and styles come from our server, fonts from your device.

The exception is the QR codes on our stickers: they lead to neuschnee-app.at/?s=bar or ?s=uni, and from there the server forwards to the App Store. How often this happens per sticker is counted from the log as a daily total, without IP address, identifier or time of day. This shows us where stickers work (Art. 6(1)(f) GDPR).

App

Measurements, weather, avalanche danger levels

The app loads measurements and danger levels from our server. If the server cannot be reached or lacks a file, the app fetches it directly from the sources: the avalanche warning services of Tyrol, Salzburg, Carinthia, Styria, Lower Austria, Upper Austria and Vorarlberg, ÖBB Infrastruktur and Lawinen.report (EAWS). The app always fetches the day’s weather directly from GeoSphere Austria: for the ski area you open and, for the sky above the list, for your first favourite or, without favourites, for the nearest ski area. In doing so, these parties technically receive your IP address, the app version and common details of your iPhone such as the language setting. The app asks for the location of the station, not for yours. It neither accepts nor sends cookies in doing so (Art. 6(1)(f) GDPR).

Location

Only if you allow it and only while you are using the app. The app requests only an approximate location (accurate to about one kilometre), uses it to sort the ski areas by distance and starts the map around your location. Apple Maps draws your position on the map as precisely as you allow in iOS. The app does not send your location to us and does not store it. Without permission, it sorts from Innsbruck.

Map

The map comes from Apple (Apple Maps). Apple delivers the map images for the area shown and receives your IP address and that area. If you have allowed location access, the map starts around your location, so Apple sees roughly where you are. More under Apple.

Usage counts

For certain events, the app notifies our server: app opened, ski area or map opened, period or station changed, favourite added or removed, search without results, notification opened, ski area shared. Only the event, the ski area, where relevant the period, station or search term, and the app version are sent. For a share, the kind (link, image or story) and where it went are added, as one of twelve fixed groups such as WhatsApp, Instagram, Messages or “other”; never the content and never the recipient. No device identifier, no location.

From these, daily counts are created that are not linked to you, such as how often a ski area was opened, plus search terms without results (30 characters at most). The daily counts are kept without a time limit; the server deletes the log lines after 14 days at the latest. This shows us which ski areas and features are used and lets us show partners how much the app is used, only as totals (Art. 6(1)(f) GDPR).

Powder alert

Only if you switch it on and allow notifications. Our server then stores:

• your device’s notification address (push token, issued by Apple),
• the threshold, morning and daytime alerts on or off, the time of the morning alert, the app language (German or English) in which the notifications arrive, your favourites with the chosen station, the app version, whether it is a development or a published version, and the day of the last update,
• for up to four days, which ski areas were reported to you and when, with which station and snow depth, so that nothing arrives twice.

Your name, location or IP address are not part of this. The notifications are delivered via the Apple Push Notification service: Apple receives the notification address and the text of the notification for this (see Apple). The legal basis is your consent, which you can withdraw at any time by switching the alert off (Art. 6(1)(a) GDPR).

Everything relating to your device is deleted as soon as you switch the alert off; the next time you open the app after you have disallowed notifications in the iOS settings; at the next delivery if Apple reports that the notification address is no longer valid (for example after the app has been deleted); just over a week after the app last reported in if you have no favourites or both alerts are off; and in any case no later than 401 days after the last update.

For statistics, the server counts the active alerts every day, without notification addresses: how many there are, with which threshold, which alerts and which time, and how often each ski area is a favourite. These figures are kept without a time limit (Art. 6(1)(f) GDPR).

To protect against abuse, the server limits requests per IP address (per 10 minutes, and per day for new devices). For this, it keeps the address only in memory, as a check value with a random key that is created anew at every restart, and writes it nowhere (Art. 6(1)(f) GDPR).

On your iPhone

The app stores favourites, chosen stations, sorting, the alert settings and the notification address last reported to the server on your iPhone. There it also counts how often you opened it from a notification: this decides when it asks you for a rating through Apple’s dialog. That number never leaves your iPhone. They are included in your iPhone backup but are not synced via iCloud. Storing them is necessary for the features you use (Section 25(2) TDDDG).

Sharing and avalanche report

You share a ski area as a link, an image or a story; you decide where to send it. Image and story are created on your iPhone and carry the website’s address. The link (neuschnee-app.at/s/…) contains only the ski area and the period, no identifier of yours. Whoever taps it and has the app lands on the ski area there; without the app, our server redirects to the App Store. If you save an image to your photos, iOS asks you first; the app can only add there, not read anything. That a share was completed is counted by the usage counts.

Tapping the danger level opens the avalanche report on avalanche.report (the English address of Lawinen.report) in your browser, where their privacy policy applies.

Email

If you write to us, we use your address and message only to reply and delete them once the matter is settled. The emails are stored with iCloud Mail (Apple, see Apple). The legal basis is our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Instagram

We have a profile on Instagram (@neuschneeapp). In the European Economic Area, Instagram is operated by Meta Platforms Ireland Limited (Ireland). If you visit the profile, follow it, comment or message us there, Meta processes your data under Instagram’s privacy policy, also in the USA. We have no influence on this.

Meta shows us aggregated statistics about the profile (Insights), such as how many people saw a post, without names. For these statistics we are joint controllers with Meta (Art. 26 GDPR); the tasks are set out in Meta’s addendum, and Meta has primary responsibility. It is best to exercise your rights directly with Meta, but you can also contact us.

We read comments and messages to us in order to reply. The legal basis is our legitimate interest in making the app known and answering questions (Art. 6(1)(f) GDPR).

Apple

The map, notifications and email run on Apple services. Apple Distribution International Limited (Ireland) is responsible for data from the European Economic Area. Apple generally stores data with Apple Inc. in the USA; transfers there are governed by standard contractual clauses (Art. 46 GDPR). Apple’s privacy policy applies to this.

Your rights

You have the right of access, rectification, erasure and restriction of processing, the right to data portability and the right to object to processing based on legitimate interest (Arts. 15 to 21 GDPR). You can withdraw consent at any time. To do so, write to info@neuschnee-app.at.

You do not have to provide anything: without your location, the app sorts from Innsbruck; without notifications, there is no powder alert.

As we have no accounts and do not log the IP addresses of the app and the website, we usually cannot link data to a person (Art. 11 GDPR). For the powder alert, it is enough to switch it off in the app: the server then deletes everything relating to your device.

You can lodge a complaint with a data protection supervisory authority, for example the one responsible for us in Lower Saxony (LfD Niedersachsen).