PawPass privacy policy
Last updated: 1 November 2026
Who I am
PawPass is a personal project by Liam Stoddard, in Vancouver, BC. It’s free, it has no ads, and it isn’t sold.
What I collect, and why
- Name and email address, from the sign-up form, to identify your account and sign you in.
- Password, from the sign-up form. It’s stored only as a salted hash by Better Auth, the sign-in library, and never in plain text.
- IP address and browser user agent, recorded automatically by Better Auth when you sign in. They’re stored with that session’s record, and PawPass doesn’t use them for anything else.
- Your settings: pass days, Baker days, season and opening dates, terrain, visibility, dog floor, penalties, the optional Baker ticket price, and whether you’ve finished the walkthrough. I use these to compute your calls.
- Logged ski days (date and hill) and starred weekends, to count your days left and pin weekends.
What I don’t collect
There are no analytics, ads, tracking pixels or third-party scripts. Nothing is sold or shared for marketing. PawPass sends no email: there’s no verification email and no newsletter. Fonts are served by PawPass itself, not loaded from Google when you view a page.
Cookies
PawPass sets one cookie: a sign-in session cookie from Better Auth, needed to keep you signed in. It lasts 7 days and renews while you use the app. There are no other cookies, which is why there’s no cookie banner.
Demo accounts
“Try the demo” creates an account with a random made-up email address and no personal details. That account and everything entered in it (settings, logged days, starred weekends and sessions) are deleted automatically 24 hours after it was created.
Where your data is stored
Your data is stored in an SQLite database on one DigitalOcean server in Toronto, Canada. The site is served over HTTPS, with a certificate from Let’s Encrypt, which receives no user data. The server has no backups.
Server logs
The web server (nginx) logs each request’s IP address, time, the address requested and the browser user agent, for security and troubleshooting. These logs rotate daily and are deleted after 14 days. The app’s own logs record errors and system events, not what you enter.
Other services
Weather data comes from Open-Meteo, fetched by the server on a schedule. None of your data is sent to Open-Meteo or anyone else. The code is hosted on GitHub, which never receives app data.
How long I keep it
I keep your account data until you ask me to delete it. Session records stay with your account until you sign out or the account is deleted.
Your choices
- See or change your data: your settings, logged days and starred weekends are all visible and editable in the app.
- Get a copy, or have your account deleted: email lstodd@protonmail.com from the address you signed up with. I’ll reply and act within 30 days. There’s no delete button in the app.
- Questions about this policy: open an issue on GitHub at github.com/lstod/pawpass/issues. Issues are public, so don’t put your email address or other personal details in one. Email me about anything to do with your own account.
- Complaints: you can also contact the Office of the Information and Privacy Commissioner for British Columbia at oipc.bc.ca.
Children
PawPass isn’t meant for children under 13.
Changes
The date at the top shows when this policy last changed, and every change is visible in the project’s history on GitHub.