Privacy notice

This service, auth.usss.pro, is how you sign in to U.S. Ski & Snowboard applications with one account. This notice explains what the service keeps about you, why, and who receives it. It adds to the U.S. Ski & Snowboard Privacy Policy, which covers our websites generally and describes your privacy rights. Each application you sign in to tells you what it does with your information.

What we keep

• Your account: your name, your email address and whether you've confirmed it, and a username we assign. If you use a password, we store only a one-way hash of it, never the password itself.
• Google, Apple or Microsoft: if you sign in with one of them, your account identifier there, the name and email address it shares (and, from Google, a link to your profile picture), and the tokens it issues for the sign-in. We ask these providers only for your basic profile and email address, not for your mail, files or contacts.
• Membership: your U.S. Ski & Snowboard member number, if you add one or it's recorded for you, and the athletes you are a parent or guardian of.
• Organizations: the clubs and other organizations you belong to here, your role in each, and invitations sent to you.
• Sign-in activity: for each sign-in, your IP address, your browser and device type, and the approximate location our hosting provider derives from the IP address (city, region, country, time zone and approximate coordinates).
• Pictures you upload, if an application lets you upload one through this service.

Cookies

We use only the cookies needed to sign you in, keep you signed in and complete a sign-in with another provider safely. There are no advertising or analytics cookies, and these pages load nothing from other websites.

How we use it

• To sign you in, keep you signed in, and tell the applications you use who you are and what you may access.
• To email you about your account: confirming your address, resetting your password, invitations, and requests to confirm a membership.
• To keep the service and your account secure and to investigate misuse.

This service doesn't send marketing email and doesn't sell your information.

Who receives it

• Applications you sign in to receive what they ask for and are allowed: an identifier for you, your name, email address and username, and, depending on the application, your member number, your organizations and roles, and the athletes you're a guardian of. When an application asks for your approval, it shows you what it's requesting first.
• Systems we set up accounts in. When you're given access to a system that keeps its own accounts, such as our data platform, we create your account there with your username, name and email address, keep its access up to date, and suspend or remove it when your account here is suspended or deleted.
• Your organizations. The owners and administrators of an organization you belong to see your name, email address and role in it.
• Parents and guardians. When you ask to link your account to a member number, that member's parents or guardians receive your name and email address so they can confirm the request.
• U.S. Ski & Snowboard administrators can see and manage accounts, for example to approve a membership link or suspend an account.
• Our service providers, who run the service for us: Cloudflare (hosting, email delivery and logs) and PlanetScale (the database).
• Google, Apple or Microsoft, when you choose to sign in with one of them, learn that you signed in to U.S. Ski & Snowboard.

We may also disclose information when the law requires it, as the U.S. Ski & Snowboard Privacy Policy describes.

How long we keep it

We keep your account information while your account exists. When an account is deleted, its login, sign-in methods, sessions and application access go with it, and the accounts we created for you in other systems are removed. Your membership record (your name and member number) stays part of U.S. Ski & Snowboard's membership records. The service's operational logs are kept for a few days.

Your choices

• Signing out ends your session in that browser.
• To see, correct or delete the information we keep about you, contact us (below). We'll confirm it's you before we act, for example by email to your address.
• The U.S. Ski & Snowboard Privacy Policy describes the further rights you may have under state law.

Children

Parents and guardians can act for the athletes in their care through their own accounts, so a child doesn't need one. If you're under 18, ask a parent or guardian before you create an account.

Security

Connections to the service are encrypted, passwords are stored only as one-way hashes, and the keys that sign our tokens are encrypted where they're stored.

Changes

When the service changes what it keeps or shares, we update this notice and the date at the top.

Contact

Send questions and requests about your information to informationtechnology@usskiandsnowboard.org, or by mail to:

U.S. Ski & Snowboard
1 Victory Lane
Park City, UT 84060
USA