Privacy policy

Effective date: November 4, 2026
Last updated: November 4, 2026

This Privacy Policy explains how TREKA LLC, a Washington limited liability company doing business as Stoke ("Stoke," "we," "us," or "our") collects, uses, shares, and protects information when you use stokeday.com, the Stoke web and mobile apps, our emails and text messages, and related services (the "Service"). It also explains your choices and rights.

Short version: we collect what we need to give you condition picks and alerts for your sports, pass, and home area; we do not sell your personal information; location data is used only to give you picks and, if you opt in, aggregated crowd estimates; you can unsubscribe, opt out of texts, and delete your account at any time.

1. Information we collect

Information you give us

• Account and waitlist details: email address, optional first name and city, password or sign-in provider (we support email magic links and Google sign-in; we never see your Google password).
• Preferences: the sports you choose, your pass (for example Ikon, Epic, Indy), your home city or approximate home location, the days you usually get out, saved spots, alert settings, and skill or preference answers.
• Phone number, if you opt in to text message alerts.
• Payment information: processed by Stripe. We receive your name, email, billing country or postal code, card brand, last four digits, and transaction status. We do not store your full card number.
• User content: condition ratings, check-ins, "I went" logs, tags, comments, photos, predictions, crew names and votes, and messages you send to Ask Stoke.
• Referral and creator details: your referral code, who referred you, referral activity, and, for approved creators, payout details and tax forms.
• Support messages you send us.

Information collected automatically

• Device and usage data: IP address, browser and device type, operating system, language, pages and screens viewed, features used, links clicked, email opens and clicks, crash reports, and timestamps.
• Approximate location derived from your IP address or the home city you provide, to show nearby spots and drive times.
• Approximate device location, only if you tap "Use my location" (see Section 4).
• Cookies and similar technologies (see Section 8).

Information from others

• Sign-in providers (such as Google): your name, email, and profile image if you choose that sign-in method.
• Payment processor (Stripe): payment status and fraud signals.
• Referral sources: when someone joins through your link, we record that the referral happened.
• Public data providers: weather, snowpack, road, and river data about places, not about you.

We do not knowingly collect sensitive categories such as health conditions, biometric data, or government ID numbers, and we ask that you not submit them.

2. How we use information

We use information to:

• Provide the Service: compute your scores, picks, Stoke meter, alerts, trip plans, season log, and crew features.
• Send alerts, the weekly picks email, and transactional messages (confirmations, receipts, renewal reminders, security notices).
• Process payments, manage subscriptions, referral pricing, trials, and refunds.
• Run referral, waitlist, crew, and prediction programs, including detecting abuse.
• Personalize the Service, including learning your preferences from your ratings and activity.
• Improve our models and the Service. We use condition ratings, check-ins, outcomes, and usage in aggregate to measure accuracy and improve scoring. We may use de-identified or aggregated data for any purpose.
• Provide customer support and respond to you.
• Protect the Service: prevent fraud, abuse, scraping, and security incidents; enforce our Terms.
• Comply with law and legal process.
• With your consent, for any other purpose we describe at the time.

AI features. Ask Stoke and written summaries use third-party AI model providers (currently Anthropic). We send them the content needed to answer your question, such as your message, the relevant condition data, and non-identifying preference context (for example, your pass and home city). We do not send your email, name, phone number, or payment details to AI providers. Our agreements with AI providers do not allow them to use your content to train their models. In the iPhone app, we ask your permission before your first question is sent.

3. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

• Service providers who process data on our behalf under contracts that limit their use: hosting and databases (Vercel, Supabase), payments (Stripe), email (Resend), text messaging (Twilio), AI models (Anthropic), analytics and error monitoring, customer support tools, and tax or payout services for creators.
• Resorts and partners, in aggregate only. We may share aggregated or de-identified statistics (for example, estimated crowd levels or how many Stoke users rated a day "great") with resorts, partners, or the public. These do not identify you.
• Other users, as you choose: your first name and city if you opt in to leaderboards; your name and votes to members of a crew you join; on a Crew plan, your name and email to the crew owner, and your name and a shortened email to other members; a shared plan or card you choose to send.
• Creators: approved creators can see counts of signups and paying members from their code, never names or emails.
• Legal and safety: to comply with law, subpoenas, or government requests; to enforce our Terms; or to protect the rights, safety, or property of Stoke, our users, or others.
• Business transfers: in connection with a merger, financing, acquisition, or sale of assets, where the recipient agrees to honor this policy. SMS opt-in data and consent are never shared, as described in Section 5.
• With your direction or consent.

4. Location information

• Home location. We store the home city or approximate coordinates you provide to compute drive times and nearby picks. You can change it any time.
• "Use my location" (app and website, opt-in only). If you tap "Use my location", we ask your device for your approximate location while you use Stoke (never in the background), round it to about 1 km, and send it with requests for your home screen to show resorts open and opening near you. On the website it is kept in a cookie in your browser for up to 3 days; in the app it is kept on your phone. We don't save it to your account, and may only see it in short-lived server logs.
• Precise location (future features, separate opt-in). If we later offer features such as ski-day tracking, automatic "I went" logging, or crowd and lift-wait estimates, we will ask separately before using precise or background location, and only for those features.
• How we use it. Precise location is used to provide those features to you and to produce aggregated, de-identified crowd and wait-time estimates. We do not show your individual location to other users, and we do not sell or license individual location data to anyone.
• Retention. Raw precise-location points are deleted or irreversibly aggregated within 30 days, except for the summary of your own logged days, which you control.
• Your controls. You can turn location permissions off in your device settings at any time. Features that depend on location will stop working.

5. Email, text messages, and marketing

• Transactional email (confirmations, receipts, renewal reminders, security notices, alerts you configure) is sent as part of the Service and cannot be unsubscribed from while you have an account.
• Marketing and informational email, such as the weekly picks email, product updates, and partner offers, can be unsubscribed from using the link in any such email or in your settings. We comply with the CAN-SPAM Act; every marketing email includes our mailing address and an opt-out.
• Text messages. We send SMS only to numbers that have opted in. Message frequency depends on your alert settings and conditions. Message and data rates may apply. Reply STOP to opt out at any time and HELP for help. We keep a record of your opt-in (number, date, time, and source) as required by carrier and legal rules. We do not share your phone number or SMS opt-in consent with third parties for their own marketing purposes. Our SMS provider (Twilio) processes messages on our behalf only. Alert texts may include a picture of the forecast (MMS). We don't send texts between 9 PM and 6 AM in the local time of the spot, and we send at most 3 alert texts a day.
• Push notifications (mobile app or installed web app) can be turned off in your device or browser settings.
• Waitlist. Joining the Stoke waitlist means you agree to receive emails about Stoke's launch and product updates. Every one of these emails has an unsubscribe link.

Text messaging (SMS) program

• Program: Stoke Alerts, operated by TREKA LLC (doing business as Stoke). Program details and the opt-in form: stokeday.com/sms. Texts are condition alerts you set up (for example, "Snowbird tomorrow: 88") and, if you follow a zone, official avalanche danger changes, plus one-time verification codes.
• How you opt in: you add your mobile number in Settings or Alerts, check the box agreeing to receive texts, and confirm the number with a one-time code. Consent is not a condition of any purchase.
• Frequency and cost: message frequency varies with your alert settings and conditions, up to 3 alert texts a day. Message and data rates may apply.
• Opt out and help: reply STOP to any text to cancel; you'll get one confirmation and no more texts. Reply START to opt back in, or HELP for help. You can also turn texts off in Settings or email support@stokeday.com.
• Your mobile information: we use your phone number only to send the texts you asked for and to verify your number. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all of the sharing described in this policy and will not be shared with any third parties, except our SMS provider (Twilio), which sends the messages on our behalf.
• Carriers are not liable for delayed or undelivered messages.

6. Your choices and rights

• Access, correct, export, delete. You can view and update your profile and preferences in settings. You may request a copy of your personal information or deletion of your account by emailing privacy@stokeday.com. You can also delete your account yourself at any time in Settings → Delete account, on the web or in the app; this cancels any Pro subscription bought on our website. We will verify your identity and respond within 45 days (extendable as permitted by law). Deletion removes your account and personal information except where we must keep it for legal, security, billing, or dispute reasons, or where it has been de-identified or aggregated.
• Opt-outs. Unsubscribe from marketing emails, reply STOP to texts, and disable push or location permissions on your device.
• Leaderboards and sharing are opt-in and can be turned off in settings.
• Do Not Track. We do not respond to browser "Do Not Track" signals because there is no common standard. We do honor Global Privacy Control signals as an opt-out of any sale or sharing, to the extent applicable.

U.S. state privacy rights. Depending on where you live (including Washington, Utah, California, Colorado, Connecticut, Virginia, Texas, Oregon, and other states with privacy laws), you may have rights to access, correct, delete, or obtain a copy of your personal data, to opt out of its sale, targeted advertising, or certain profiling, and to not be discriminated against for exercising these rights. We do not sell personal data or use it for targeted advertising. To exercise rights, contact privacy@stokeday.com. If we deny a request, you may appeal by replying to our decision; we will respond to appeals within the time required by your state's law. Utah residents may also contact the Utah Division of Consumer Protection; California residents may contact the California Privacy Protection Agency.

California notice. In the preceding 12 months we have collected the categories of personal information described in Section 1 (identifiers, commercial information, internet activity, geolocation, user content, inferences from preferences) for the purposes in Section 2, and shared them with the categories of recipients in Section 3. We do not sell or share personal information as defined by the CCPA, and we have no actual knowledge of selling or sharing the personal information of consumers under 16.

Outside the United States. The Service is operated from the United States and intended for U.S. users. If you use it from elsewhere, your information will be transferred to and processed in the United States, where laws may differ from those in your country.

7. Data retention

We keep personal information for as long as your account is active and as needed for the purposes above. Typical periods: account and preference data for the life of your account; billing records for 7 years as required for tax and accounting; SMS consent records for at least 4 years after opt-out; precise location points up to 30 days (Section 4); analytics logs up to 24 months; support messages up to 3 years. Aggregated or de-identified data, including accuracy and model-training datasets derived from check-ins, may be kept indefinitely.

8. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember preferences (such as your referral code or last viewed sport), measure how the Service is used, and protect against fraud. We use privacy-respecting product analytics and error monitoring. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service from working. Our emails may contain a pixel that tells us whether an email was opened; you can block images in your email client to prevent this.

9. Security

We use reasonable administrative, technical, and physical safeguards, including encryption in transit and at rest, access controls, row-level database security, and payment processing by a PCI-compliant provider. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you and regulators as required by law.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Users under 18 may use free features only with parental permission. If you believe a child under 13 has given us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy. If a change is material, we will notify you by email or a notice in the Service before it takes effect. The "Last updated" date at the top shows the current version.

12. Contact us

TREKA LLC (doing business as Stoke)
Washington State, USA
privacy@stokeday.com