Privacy

What we store: your email and display name (from Discord or Google sign-in), the watches and follows you create, and where to send your alerts (a Discord webhook, a web-push subscription, an ntfy topic, and/or an email address). Things you add on purpose are stored too: your friends list, your rigs, blackout dates, a calendar link if you set one up, saved weather locations, the Planning Group trips you're part of, and any invite codes you've issued. We also keep a small anti-abuse log in our database: a one-way hash of your IP address, never the address itself, plus a few rate-limit counters (like how often you're adding watches), so the free service stays hard to script or hammer. The delete list further down doubles as the full inventory; the one optional extra, Planning Group attendee names, is described just below.

Planning Group attendee names (optional): some parks ask for every occupant's name (and sometimes an age) at checkout. In a Planning Group you can choose to enter your own party's attendee names so whoever books your pad has them ready. This is opt-in and needs your acknowledgment that you have those people's OK. These names are visible only to you and to the group member who actually books your pad at go-live, never to the rest of the group. They're the only third-party details we store, and they're automatically deleted after the trip's dates pass (and immediately if you leave or the group is deleted).

Asking for an invite: the request form stores exactly what you type (your email and an optional note), when you sent it, and whether the bot check passed. Requests wait in the queue until they're dealt with, and handled ones are deleted automatically 90 days later. Our database doesn't keep your browser details, and our database never holds your raw IP address; the spam limiter uses only a truncated one-way hash of it.

Location: Search by location uses your device's location only for that one search and never lands in our database. You can name a park or place instead. The short-lived logs described just below do place your requests at roughly a city level, search or no search, because that much comes with any web request.

Diagnostic logs: separate from our database, we keep short-lived diagnostic logs so we can run and troubleshoot the service, and Cloudflare, our host, handles every request to route it and protect the site. Those logs include request details like the page you asked for, your IP address, your browser type, and an approximate location (roughly city or region level), and they age out after a few days. They are operational logs we look at when something breaks, not a profile we build on you, and Cloudflare's own handling is covered by Cloudflare's privacy policy.

What we don't do: no ads, no trackers, no analytics profiles, no selling or sharing your data. Cloudflare's cookieless, privacy-first Web Analytics counts page views with no personal data.

Third parties: sign-in via Discord/Google (their privacy policies apply to the login step); alerts delivered through whichever of Discord, your browser's push service, ntfy (our server or your own), and the email provider we send through. Hosting on Cloudflare. Park locations come from OpenStreetMap. The weather pages show forecast, air-quality and station data from MET Norway, Environment and Climate Change Canada, and Copernicus (CAMS), partly via Open-Meteo, all fetched server-side; your browser never contacts them. Full attribution is on the weather page's own licensing panel.

Your control: delete any watch or follow anytime. You can delete your whole account yourself, from Settings → Account: no email, no waiting on us. It's immediate and it can't be undone.

What a delete removes: your email, name, avatar, sign-in sessions and the Discord/Google link; every watch, follow and alert record; every place we ping you (Discord, push, ntfy, email); your friends, rigs, blackout dates and calendar link; your saved weather locations and their history; your unused invite codes; and the anti-abuse counters we had on you. Planning Groups you organize alone are deleted with you, and you leave the rest. The group is told, exactly as if you'd left by hand, and any attendee names you'd entered go too. If you organize a group other people have joined, we'll ask you to sort that group out first rather than disband it for them behind their backs.

What a delete keeps, and why: one thing. If you ever supported the couch, our accounting record of that support stays: it's append-only, so we don't rewrite history in it. After a delete it holds a number and two dates for you: no name, no email, and nothing left anywhere in our database to connect it back to you. If you're a supporter when you delete, the last thing we write to it is that the support ended. Everything else that stays is about campgrounds, not campers: which sites were open when, and how full a park was.