Legal notice and privacy

Last updated: 31 October 2026

Who we are. This website presents Endless Peaks, a ski game in development, and lets you sign up for its beta. Its owner is also responsible for your data; you'll find their details at the end of this page. Endless Peaks is an independent project and is not affiliated with any ski resort. The videos, images, texts and code of this website may not be reproduced without permission. Spanish law applies.

Your data. When you sign up we save your email, your first name and, as proof of your consent, the date, the language of the page, the version of the text you accepted and, if the link says so, where you came from (for example, Instagram). We don't save your IP address; our hosting provider only processes it to deliver the website. We only use your email and name to send you the beta invite and news about the game's launch (your name, just to greet you), and we don't sell them or share them with anyone for their own purposes. The legal basis is your consent (Article 6.1.a of the GDPR and Article 21 of Spanish Law 34/2002), which you can withdraw at any time. You must be 14 or older to sign up (Article 7 of Spanish Organic Law 3/2018). When you sign up we send you a welcome email. We don't track whether you open our emails or click their links. If you unsubscribe, we delete your data; in any case, we delete it two years after you sign up.

Comments on Instagram. If you comment on a post by @endlesspeaks.game, we send you a single direct message with the beta link, through the private reply that Instagram offers for this (legitimate interest, GDPR art. 6.1.f). To avoid writing to you twice, we keep only your numeric Instagram ID and the date, for one year; if the message fails, also the comment ID for 8 days. Not your username or what you wrote. You can ask us to delete it at the address above.

Providers. Vercel Inc. (United States) hosts the website and runs the sign-up form on servers in Frankfurt; Supabase Pte. Ltd. (Singapore) stores the data on servers in Frankfurt; and Plus Five Five, Inc. (Resend, United States) sends our emails from servers in Ireland and keeps a log of each one in the United States for 30 days. They only process it on our behalf. Transfers outside the European Economic Area are covered by the European Commission's Standard Contractual Clauses (Decision 2021/914).

Your rights. You can access, correct or delete your data, object to or restrict its use, take it with you and withdraw your consent by writing to . Every email we send includes a way to unsubscribe. You can also complain to the Spanish Data Protection Agency (www.aepd.es).

The game. While you play the beta (jugar.endlesspeaks.com), the game sends anonymous usage statistics so we can improve it: how long you play, performance (frames per second, loading time), the device model and graphics chip, your country and what you do in the game (challenges, falls, speed). We don't store your IP address, your email or anything that identifies you, and nothing new is saved on your device. The data is stored in Supabase (Frankfurt) and deleted after two years at most. The legal basis is our legitimate interest in making the game work well on every phone (Article 6.1.f GDPR). If you take part in the ranking (below), these statistics are linked to your ranking ID.

The game ranking. If you enter your @ (Instagram or TikTok) for the beta ranking, we save that @, the network, whether you want to appear publicly or anonymously, a random ID for your browser (the ep_j cookie, a technical cookie without which we can't keep your score) and your XP for each day. We also save your game activity linked to that ID: where your XP comes from (kilometres, combos, jumps, challenges, medals, records and achievements), the challenges you play with their result, medal and time, the credits you earn and spend and what you spend them on, and the equipment you play with (skis and gadget). We use it to run the ranking, to check that nobody cheats, to write to the winner through that network and to improve the game. If you appear publicly, your @ is shown in the daily ranking and in the ranking of each challenge, with your XP or your best result; if you play anonymously, it doesn't appear in any list, although you can see your own position. The legal basis is your consent when you enter your @ (Article 6.1.a GDPR), which you can withdraw at any time by writing to us. Your XP, your games and the detail of each play session are deleted after 6 months; your @, its ID and your best challenge results, after 6 months without playing, or earlier if you ask us.

Cookies. Outside the ski resort map, this website doesn't use cookies or store anything on your device. We count visits to the whole website with Vercel Web Analytics, which doesn't use cookies and only gives us aggregated statistics without identifying you; its temporary identifier is deleted after 24 hours. On the ski resort map (endlesspeaks.com/mapa), and only if you accept it in its notice, we also use Google Analytics 4 to learn which resorts and which parts of the map are used. It sets the cookies _ga and _ga_<code>, which last 13 months, and doesn't store your IP address. It's provided by Google Ireland Limited, which may transfer data to the United States under the EU-US Data Privacy Framework. We don't use it for advertising or combine it with the beta data. The legal basis is your consent (Article 22.2 of Spanish Law 34/2002), and you can change your mind at any time with the «Cookies» link at the bottom of the map. The map also stores your favourite resorts, the country you chose and a copy of the data so it opens offline; they never leave your device. If this text changes, we'll update it here with a new date.

Owner and data controller: Ignacio Fernández García, NIF 53765425G, Calle Fray Bartolomé de las Casas 4, 28660 Boadilla del Monte (Madrid). Contact: .