Privacy policy

Updated 3 November 2026

1. In short

Tunturissa is used without an account. Your location and your fell days stay on your phone unless you turn on group location sharing or the season leaderboard yourself. The app has no ads, analytics, or tracking of its own.

2. Controller

Cavalier Venues Oy (business ID 3649639-4, VAT FI36496394, Lönnrotinkatu 40, 00180 Helsinki, Finland). Contact: tietosuoja@ccode.fi.

3. What data we process

• On your phone: your location, if you give permission (your position on the map, your coordinates in the safety view, and recognising your fell days; on Android, optional background day collection displays a persistent notification), your fell days, selected ski resort, downloaded offline topographic maps, settings, and the latest loaded information. They do not leave your phone, except in the optional features below.
• The app server and map downloads: requests for slope, weather, event, and news information as well as offline topographic map downloads include your phone's IP address and the app and operating system version. The server is run by our processor Vercel Inc. and map delivery by GitHub, Inc., and logs are deleted within 24 hours.
• Fell Pass (optional one-time purchase): purchases are processed directly by Apple App Store (StoreKit 2) or Google Play Store (Google Play Billing). Cavalier Venues Oy does not receive or store payment card or personal billing data.
• Group and season leaderboard (optional): when you create a group or join one with a code, the group members see the name and age group you give, the names of children with you, the guardian's name for a child under 13, your location in the selected ski resort area, battery level, quick messages, the meeting point, and your season counts. The group creator can remove a member and lock the group to new members; a removed phone's random identifier is kept until the group expires so it cannot rejoin. The season leaderboard stores the nickname given by the app and your season counts, which are visible to everyone who uses the leaderboard. The data is tied to a random identifier created on your phone and stored in a database run by our processor Databricks, Inc. (Neon). To prevent abuse, the server tracks repeated failed requests and request rates using a hash of the IP address.
• Images directly from the sources: road camera images from Fintraffic, event images from regional tourism websites, and the live slope camera image from YouTube (Google). The source sees your IP address as with any image on the web.
• Slope camera stream: the app uses YouTube API Services. When you tap Play, the YouTube player loads from YouTube, which may use cookies and show ads. The cookies are cleared when you close the stream. YouTube's processing is governed by the Google Privacy Policy.
• Links: the web shop and other websites open in the in-app browser, and their operators are responsible for their data processing.

4. Retention and deletion

You can delete your fell days in the app (Days → Delete day history), which also resets your counts on the leaderboard and in the group, and all app data by deleting the app. Server logs are deleted within 24 hours. Group data is deleted when the group expires (at most 24 hours) or when you leave it, and your leaderboard row when you leave the leaderboard or have not opened the app for 30 days. Deleted data may remain in database backups for up to 24 hours.

5. Legal bases and transfers

Using your location is based on your permission, which you can withdraw in your phone's settings. Processing requests on the server is based on our legitimate interest in delivering the information you ask for and keeping the service working and secure. The group and the season leaderboard are based on your consent: you turn them on yourself and can stop at any time. A child under 13 participating on their own phone requires a guardian's consent. Vercel, GitHub, and Databricks are US companies; transfers rely on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

6. Website and messages

This website does not use cookies or analytics, and the pages are served by Vercel Inc. If you send us email, we process your address and message to reply to you, and keep messages for 12 months.

7. Your rights

You have the right to be informed of the processing, to ask for your data to be corrected or deleted and to object to processing: tietosuoja@ccode.fi. You can lodge a complaint with the Office of the Data Protection Ombudsman, tietosuoja.fi.

8. Changes

When this policy changes, the date at the top of the page is updated.