Privacy Policy

StormDrop is operated by Catalyst Supply Co LLC (“we,” “us,” or “our”), located at 1311 Park St, Ste 517, Alameda, CA 94501. We provide a ski storm forecasting and trip-planning service at stormdrop.co. Questions about this policy? Email us at support@catalystsupply.co.

Account information. When you create an account we collect your email address. If you sign in via Google OAuth, we also receive your name and profile picture from Google.

Preferences. We store settings you configure: home airport, ski pass affiliations, favorite resorts, alert regions, minimum storm level, and budget range.

Billing information. Payments are processed by Stripe. We store your Stripe customer ID, subscription ID, and subscription status. We never store your full card number, CVV, or expiration date — those stay with Stripe.

Usage analytics. We use Google Analytics 4 and Vercel Analytics to understand how the site is used (pages visited, session duration, general geography). These are only active if you consent via our cookie banner.

Marketing pixels. With your consent, we use Meta Pixel and Reddit Pixel to measure ad performance. These tools may set cookies on your device and share data with Meta and Reddit.

Cookies. We use cookies for authentication (Supabase session), analytics, and marketing. See our Cookie Policy for a full list.

• To operate your account and deliver the StormDrop service
• To send storm alert emails when conditions meet your thresholds
• To process subscription payments via Stripe
• To improve the product using aggregated analytics (with consent)
• To measure the effectiveness of our advertising (with consent)
• To respond to support requests

We do not sell your personal information. We do not use your data to build advertising profiles.

We share data with the following services solely to operate StormDrop. Each has its own privacy policy that governs their data use.

• Supabase — authentication and database (US region)
• Stripe — payment processing
• Resend — transactional email delivery
• Mapbox — interactive resort maps
• Google Analytics 4 (measurement ID: G-5DEWVREMJ8) — site analytics. Only active with your consent.
• Meta Pixel (ID: 522420421268984) — ad performance measurement. Only active with your consent.
• Reddit Pixel (ID: a2_iqt3k7xictf1) — ad performance measurement. Only active with your consent.
• Vercel — hosting, edge functions, and Vercel Analytics

We use essential cookies to keep you logged in. With your consent, we also use analytics and marketing cookies. You can review the full list of cookies and adjust your preferences at any time via our Cookie Policy page, or by clicking “Cookie Preferences” in the site footer.

We retain your account data as long as your account is active. If you delete your account, we delete your personal information within 30 days, except where we must retain it for legal or financial compliance purposes (e.g., Stripe billing records).

If you are in the European Economic Area or UK, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your personal data (“right to be forgotten”)
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — you can withdraw cookie consent at any time via the footer link

To exercise these rights, email support@catalystsupply.co. We will respond within 30 days.

California residents have the right to know what personal information we collect, to request deletion, to opt out of the sale of personal information (we do not sell personal information), and to not be discriminated against for exercising these rights. To make a request, email support@catalystsupply.co.

We use HTTPS for all data in transit. Our database is hosted on Supabase with row-level security enabled. We do not store passwords — authentication is handled by Supabase Auth and Google OAuth. No security measure is perfect; please use a strong, unique password for your associated accounts.

StormDrop is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete it.

We may update this policy from time to time. If we make material changes, we will notify you by email and by a prominent notice on the site at least 7 days before the change takes effect. The effective date at the top of this page reflects the most recent update.

Catalyst Supply Co LLC
1311 Park St, Ste 517
Alameda, CA 94501
Email: support@catalystsupply.co