Legal & privacy

Cookie Policy

The cookies we set, what each one does, and how to change your choice

Last updated: 18 October 2026Manage cookie preferences

Your choice comes first

Essential storage keeps the site secure and working. Functional, analytics, marketing and AI & chatbot storage stay switched off until you turn them on, and you can change your mind at any time.

1. What Are Cookies?

Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently, provide a better browsing experience, and give website owners useful information.

2. How We Use Cookies

Find a Ski School uses cookies and similar technologies for the following purposes:

Essential Cookies

These cookies are necessary for the website to function properly. They enable core functionality such as:

  • Authentication: Keeping you signed in to your account during your session (session cookie, JWT-based).
  • Security: Protecting your account and preventing fraudulent activity, including CSRF protection.
  • Session management: Remembering your preferences within a single browsing session.
  • Cookie Consent: Remembering your cookie consent preferences so we do not ask you repeatedly.
  • Assistant preview and demo access: An Admin-issued private preview link provides access in one browser for at most 72 hours. Its one-time redemption sets the signed HttpOnly fass_assistant_preview cookie. It grants no extra account or data permissions and bypasses neither AI consent nor credits, rates or safeguards. Server grant records contain hashes, labels and timestamps, not the raw link token; expired or revoked grants are removed after 24 hours by maintenance. Existing authorised QA demos use the signed HttpOnly fass_assistant_demo_scope cookie for at most 3 hours, a fixed fictional school and a separate Admin setting. These requested access/security cookies do not themselves permit optional AI processing or create a self-service temporary account.

These cookies cannot be disabled as they are essential for the website to operate.

Functional Cookies

These cookies remember your settings and preferences to enhance your experience:

  • Language preference: Remembering your language preference. The site is currently published in English; additional site languages are planned.
  • Theme preference: Remembering whether you prefer light or dark mode.
  • Search preferences: Storing your recent search filters and resort preferences.
  • Recently Viewed: Storing which schools and resorts you have recently viewed so we can show them for quick access on the homepage.
  • Measurement Units: Remembering your preference for imperial or metric units when displaying altitude, distances, and other measurements.

Analytics Cookies

We use analytics tools to understand how visitors interact with our website. This helps us improve the user experience. Analytics cookies collect information such as:

  • Pages visited and time spent on each page
  • How you arrived at our website (search engine, direct link, referral)
  • General geographic location (country/region level)
  • Device type and browser information
  • Interaction with sponsored placements (anonymised impression and click counts)

We use analytics to understand how the site is used. Cloudflare Web Analytics provides aggregate reports. Google Analytics uses a random cookie identifier to recognise a returning browser. We do not send account names or contact details as analytics fields; browser identifiers and related usage data can still be personal data.

Cloudflare Web Analytics counts page views and measures page load times without cookies or browser storage; Cloudflare states that it does not fingerprint visitors. Because this measurement uses no cookies or browser storage, it is not part of the analytics category. Google Analytics 4 sets cookies for usage measurement. Browser Sentry sends error reports to help diagnose failures. These Google Analytics and browser Sentry scripts are not loaded until you accept the analytics category; withdrawing that consent stops their browser reporting. Server-side operational error reporting is separate and does not depend on browser analytics consent; see the Privacy Policy.

With Analytics consent, eligible public homepage visitors may see title A, B or C for the assistant orb. Testing is paused until Admin starts it; without Analytics consent you see A or the chosen winner, with no experiment identifier or metrics. A random browser identifier in local storage lasts 30 days and is cleared when Analytics consent is withdrawn. First-party server records retain its hash, experiment run, variant, language and assignment/event timestamps for visible impressions, clicks and successful text replies or voice connections for up to 90 days. They contain no IP address, account ID, profile, messages, transcripts or audio. Private previews, demos, administrators and impersonation sessions are excluded. This visual test does not require AI consent; actual chatting still does. The body and button stay the same, and Admin chooses a winner manually. Withdrawing Analytics stops new measurement; existing server records expire under this retention schedule.

Marketing Cookies

We do not set any marketing cookies. No advertising, retargeting or campaign-measurement vendor is loaded on this site today. The category is in the banner so that your answer is already on record if that ever changes — adding a vendor later does not switch anything on for you.

AI & Chatbot

Our AI features — including the live assistant, AI Concierge, AI finders, and a school’s chatbot — send your question to the third-party AI provider configured for that feature. The live assistant uses OpenAI and sends microphone audio while voice mode is connected. Its conversation stays in the current page's memory; our application does not store raw voice audio. Provider processing and retention terms still apply. Other features and fallback routes may differ; see the Privacy Policy and AI Transparency page. Storage differs by feature:

  • Live voice and text assistant: Full live history stays in current page memory, not browser local storage or the application database. Reset, reload, account change or withdrawing AI consent clears it. A local download is your copy and contains no audio. After assistant consent/start, an HTTP-only pseudonymous guest cookie (up to 90 days) and keyed network identifiers enforce free allowances and prevent abuse. Server usage/quota and credit receipts contain timestamps, durations, counts and charges, not full transcripts or raw audio; operational records are retained up to 90 days. Security flags contain keyed hashes, categories, counts and expiry, not raw IP or prompts; they expire after 24 hours and are removed by maintenance. Action previews expire after ten minutes, are scrubbed after execution and purged after 24 hours. Minimal audit and required financial records follow their separate retention rules. Account export/erasure includes account-linked operational data. Consent preferences are stored separately. OpenAI processing and retention remain governed by the applicable provider terms. Daily keyed network-quota records are retained for up to two days.
  • AI Concierge and AI finders: AI Concierge history stays in your browser and clears 24 hours after your last message. AI School and Resort Finder queries are logged on our servers with generated summaries, result counts, IP addresses, and signed-in user IDs; saved searches also persist with your account. These server records have different retention rules; see sections 3.5 and 8 of the Privacy Policy.
  • A school's own chatbot: stored for up to 12 months so the school can review the conversation. This is the retention period published in section 8 of the Privacy Policy.

Declining this category leaves the AI features unavailable rather than degraded. FASS does not train AI models on your inputs. An AI provider’s use and retention of inputs and outputs depends on the active service, settings, and contractual terms; the Privacy Policy explains how to ask which recipients and terms apply.

Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages:

  • Stripe: Our payment processor uses cookies to process payments securely and prevent fraud. These cookies are essential when making a booking.
  • Google Maps: When viewing resort or school locations on maps, Google may set cookies to provide the mapping service.
  • Open-Meteo: Our weather data provider may set cookies when weather information is loaded for resort pages.

3. Local Storage and Service Workers

In addition to cookies, we use other browser storage technologies:

  • Local Storage: We store your language preference, theme preference (light/dark mode), recently viewed items, measurement unit preference, and cookie consent status in your browser's local storage. This data never leaves your device.
  • Service Worker Cache: Our service worker caches static assets (images, stylesheets, scripts) to improve page load times and enable limited offline functionality. Cached data is stored on your device and can be cleared by unregistering the service worker or clearing your browser's site data.
  • AI Concierge chat history: Your AI Concierge chat history is kept in your browser’s local storage and clears itself 24 hours after your last message. Closing the tab or browser does not erase it — clear your browser’s site data if you want it gone sooner. Your messages do pass through our servers to reach the AI provider, but we do not store those conversations: nothing is written to our database. Technical usage records contain the feature, provider, model, token counts, timing, and success or error details rather than conversation content. These logs are separate from School and Resort Finder query logs and saved searches, which can retain query text, summaries, account references, and IP addresses. We do not describe the overall AI data flow as anonymous. A school’s own chatbot also stores conversations; see sections 3.5 and 8 of the Privacy Policy.

6. Managing Cookies

You can control and manage cookies in several ways:

  • Browser settings: Most web browsers allow you to control cookies through their settings. You can set your browser to block or delete cookies. Note that blocking essential cookies may prevent parts of the website from functioning correctly.
  • Clearing cookies: You can delete all cookies stored on your device through your browser settings. This will sign you out and reset your preferences.
  • Service Worker: To clear cached data from the service worker, go to your browser's site settings and choose "Unregister service workers" or clear all site data.

For more information about managing cookies in your specific browser, visit your browser's help documentation:

7. Do Not Track

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. We respect DNT signals where technically feasible.

8. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our business practices. Any updates will be posted on this page with a revised date.

9. Contact Us

If you have questions about our use of cookies, please contact us.