Privacy Policy

Effective August 21, 2026

Campatible is a notification service that watches campsite reservation systems on your behalf and alerts you when a spot opens up. We collect the minimum information needed to do that, we do not sell your data, and we use a small number of trusted vendors to deliver your alerts. This page explains the details.

Information we collect

When you create an account, we collect:

Email address: used to create and access your account, send one-time sign-in codes when you choose email sign-in, and send email alerts.
Phone number (optional, E.164 format): collected when you choose text alerts. It is used to send a one-time verification code and SMS alerts you opt in to. You can change your phone number at any time from your account settings.

When you use the service, we also collect:

Scans you create: the facility, date range, and delivery channel for each scan you set up.
Search inputs: when you search by location, your query and the map area you are viewing are sent to our server to return results. They are retained with the usage-measurement record described below, but are not tied to your account or used to build an advertising profile.
Operational logs: basic server logs (IP address, request path, timestamp) used to debug issues and rate-limit abuse. Their retention follows the settings of the services that generate them.
Session security records: when you sign in, we store the IP address and browser details that created the session. We use them to protect your account and investigate abuse. The session credential remains valid for up to 60 days after your last use and never more than one year from creation. Expired records are removed by a recurring cleanup job.
SMS consent records: when you opt in to text alerts, we store the IP address and browser details with your phone number, consent time, and the version of the disclosure you accepted. This is our consent audit trail. We keep it while your account remains active, including after you revoke consent, and delete it with your account.
Usage measurement: we record which pages are visited, what is searched for, and how many results a search returned, so we can see which campgrounds people want and which regions to add next. These records identify a visitor with a random UUIDv4 stored in the first-party campatible_visitor cookie for 12 months. The cookie is HttpOnly, Secure, SameSite=Lax, and available on every Campatible path. For historical continuity, we also retain a one-way fingerprint built from the IP address, the browser identifier, and a secret we hold. We do not store the IP address itself, and the fingerprint cannot be turned back into one. No third party receives this data, and we do not combine it with anything bought from a data broker. Page visits, searches, and facility views are not linked to your account. Some events in signed-in flows, such as starting checkout, include your account ID.
Billing information: if you subscribe to a paid plan, our payments processor (Stripe) collects and stores your payment details. We never receive or store your full card number; we keep only a Stripe customer reference, your plan, and your subscription status so we can give you paid features and manage your subscription.

How we use your information

To run your scans and deliver alerts by email and SMS when matching availability appears.
To send a one-time code when you use email sign-in, and to verify your phone number when you opt in to text alerts or change it.
To keep you signed in via a server-side session cookie (see our Cookie Notice).
To investigate abuse, debug problems, and improve reliability of the service.
To process subscription payments and give you access to paid features, through our payments processor (Stripe), if you subscribe to a paid plan.

We do not sell your information. We do not share it with advertisers. We do not build advertising or marketing profiles.

Service providers we use

We use a small number of vendors (“subprocessors”) to operate the service:

Resend: delivers transactional and alert emails. Receives your email address and the alert content.
Twilio: delivers verification codes and SMS alerts. Receives your phone number and the alert content.
Stripe: processes subscription payments. Receives your payment details and email address and handles your card data on its own PCI-compliant systems. We do not receive or store your full card number.
Cloud hosting: runs our application servers and database, encrypted at rest and in transit.

These vendors are contractually limited to processing your data only for the purposes above. We do not authorize them to use your data for their own marketing.

Data retention

We retain your account information until you request account deletion. Deleting your account removes its scans, alert history, phone number, sessions, and SMS consent records from the application database. Operational logs follow the retention settings of the services that generate them. Usage measurement events are append-only and currently have no automatic retention cutoff. If you delete your account, its account ID is removed from those events, but the event details and visitor fingerprint remain for aggregate reporting. The random visitor identifier also remains. If you have made a payment, we and Stripe may keep a limited record of the transaction for as long as tax and accounting law requires, even after your account is deleted.

Your rights

You can, at any time:

Sign in and update your email or phone number.
Pause or delete any scan from your scans page.
Reply STOP to any SMS to unsubscribe from SMS alerts immediately.
Delete your account from the application. The Data retention section explains which records remain after deletion.

California residents have additional rights under the CCPA, including the right to know what personal information we hold about you, the right to request deletion, and the right to opt out of the “sale” of personal information. Because we do not sell personal information, the opt-out right does not apply in practice, but the access and deletion rights do. To exercise these rights, email privacy@campatible.app from the address on your account, or use the Delete Account button in your account settings.

Children

Campatible is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has provided us information, email privacy@campatible.app and we will delete it.

Cookies

We use three first-party cookies. The session cookie keeps you signed in. The cg_search_prefs cookie remembers search preferences for logged-out visitors for up to one year. At login, we merge those preferences into your account when appropriate and then delete the cookie. The campatible_visitor cookie stores a random UUIDv4 for 12 months so we can count repeat visits on Campatible. We do not use third-party tracking cookies or marketing pixels. See the Cookie Notice for details.

Changes to this policy

If we make a material change to this policy, we will update the effective date at the top of this page and, where appropriate, notify you by email. Continued use of Campatible after a change means you accept the updated policy.

Contact

Questions about this policy or our practices? Email privacy@campatible.app.