Privacy Policy

Who we are

Mountain Passes is operated by Michael Steurer, a private individual based at Via Unterlände 15, 39037 Rio di Pusteria (BZ), Italy. We act as the data controller under the EU General Data Protection Regulation (GDPR) for any personal data collected through this website.

For any privacy-related question or request, contact us at hello@mountainpasses.app.

What this policy covers

This policy describes how we handle personal data collected through mountainpasses.app. It does not yet cover the Mountain Passes iOS app, which will ship with its own in-app privacy notice at launch.

What we collect and why

Waitlist signup

When you submit your email on the waitlist form, we store:

• the email address you provide,
• the site language you were viewing when you signed up,
• the submission timestamp,
• your country (as reported to us by our hosting provider from your IP address — the IP address itself is not stored alongside your email),
• a truncated copy of your browser user-agent and referring page, kept only to help us detect and filter automated abuse.

Legal basis: your consent, given by submitting the form (Art. 6(1)(a) GDPR).

What we use it for: sending you a single launch notification when the Mountain Passes app becomes available, and — if you opt in explicitly later — occasional product updates. We do not sell your data and do not use it for advertising.

Technical logs

Our hosting provider processes standard request metadata such as IP addresses, timestamps, and browser headers to serve pages, prevent abuse, and maintain security. These logs are retained by the provider under their own terms and are not combined with waitlist data.

Legal basis: our legitimate interest in keeping the site available and secure (Art. 6(1)(f) GDPR).

Cookies

We use one first-party cookie: mp_lang. It stores only your chosen site language (for example en, de, it), lasts up to one year, and contains no personal identifier. Under the Italian Garante's June 2021 cookie guidelines it is a "technical cookie" and does not require consent.

We do not use analytics, tracking pixels, or advertising cookies on this site.

Service providers

• Cloudflare, Inc. — hosting, CDN, edge functions, and the key-value store where waitlist entries are kept. Cloudflare processes data in compliance with the EU Standard Contractual Clauses. See cloudflare.com/privacypolicy.

We may, before or at launch, transfer your email address to a dedicated email delivery service (for example Buttondown, Resend, or Mailchimp) solely to send you the launch notification. If we do, we will update this policy with the provider's name and data-protection terms before the transfer.

How long we keep your data

Waitlist entries are retained until the app launches and we have sent you the launch notification, after which they are automatically purged. You can also ask us to delete your email at any time by writing to hello@mountainpasses.app; we will remove it within 30 days.

International transfers

Cloudflare operates a global network, which means your data may be processed on servers outside the European Economic Area. Any such transfer is covered by the EU Standard Contractual Clauses and Cloudflare's own binding commitments.

Your rights under the GDPR

You have the right to:

• access the personal data we hold about you,
• request correction or deletion of your data,
• request restriction of processing, or object to processing,
• receive your data in a portable format (data portability),
• withdraw your consent at any time, and
• lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it).

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, email hello@mountainpasses.app. We respond within 30 days.

Children

This website is intended for a general audience. We do not knowingly collect personal data from children under 14 — the minimum age for digital consent under Italian law (Art. 2-quinquies of the Italian Personal Data Protection Code). If you believe a child has submitted their data, contact us and we will delete it.

Changes to this policy

We may update this policy to reflect changes in the service or the law. Material changes will be indicated by updating the "Last updated" date at the top of the page and, where required, by notifying you directly.