Privacy policy
Last updated November 3, 2026.
Wavetrain is run by one person in Colorado. This page explains, in plain words, what the site stores about you and who can see it. Questions or requests: hello@thewavetrain.com.
If you just browse
You can read rivers, snowpack, permits and every community board without an account. We do not use advertising or tracking cookies, and we do not sell or share information about visitors. Our host, Vercel, keeps standard server logs (such as IP address and pages requested) for security and to keep the site running. The site loads its fonts from Google Fonts, which receives your IP address when it sends them. We count visits with Vercel Web Analytics, which uses no cookies and reports only totals, such as page views and which sites sent visitors.
If you create an account
We store your email address, your display name and a password that is kept in hashed form (we cannot read it). Your sign-in session is kept in your browser's local storage so you stay signed in; signing out removes it.
What you post, and who can see it
- Public to everyone: your display name and what you post on the forum, trip reports, meetups, gear listings, jobs and permit-spot listings, including photos. Photos are resized in your browser before upload, which removes location data from the file.
- Signed-in members only: the contact details you add to a gear listing or a job.
- Only you and the permit holder: a permit-spot application, including party size, experience, your message and your contact details.
- Only you, the host and our moderators: your RSVP to a meetup.
- Only you and our moderators: reports you file about content.
- Never shown publicly: your email address.
Who helps us run the site
These services handle data on our behalf and only to run Wavetrain: Supabase (accounts, the community database and photo storage), Vercel (hosting), Resend (account and password emails) and ImprovMX (forwards mail sent to our address). River flows and snowpack come from USGS and NRCS and involve no personal data.
We email you to confirm your account and reset your password. If you sign up for permit reminders or other updates, we email you about those only, and every message has a way to stop them.
Keeping and deleting your information
You can delete your own posts, listings and photos at any time. To delete your whole account and everything posted under it, email hello@thewavetrain.com from the address on the account and we will do it within 30 days. We keep your information until you delete it or ask us to.
Children
Wavetrain is for people 18 and older. We do not knowingly collect information from anyone younger; if you think we have, tell us and we will delete it.
Changes
If this policy changes, we will update the date at the top of this page, and tell members by email if the change is significant.
About Wavetrain · Community rules · Privacy · Terms · hello@thewavetrain.com
Wavetrain is an early build. Flow readings are USGS provisional data and may be revised. Runnable ranges and run details are drafts for paddlers to review. Permit dates and rules come from the agency pages linked on each permit and can change. Snowpack figures come from NRCS SNOTEL stations, are provisional, and are grouped into basins by watershed, so they may differ from official NRCS basin reports. Nothing here replaces scouting, local knowledge or a conversation with a nearby outfitter.