Privacy Policy

• Account & sign-in. When you sign in with Google, Apple, or Facebook, we receive your name, email address, and profile picture from that provider, plus a stable account identifier. We store these to create and recognize your account. We never receive or store your provider password.
• Content you create. Saved sites, trips and itineraries, reviews and ratings, private site notes, trip reports, and any photos you upload.
• Usage analytics. We use a self-hosted, privacy-friendly analytics tool (Umami) that records aggregate page views without cookies and without cross-site tracking.
• Technical & security logs. Our web server records standard request data (such as IP address and browser user-agent) to operate the service and prevent abuse.

• Provide and personalize the service — your account, saves, trips, and reviews.
• Authenticate you and keep your session secure.
• Display content you choose to publish (e.g. reviews and community photos) with your name and avatar.
• Screen uploaded photos for prohibited content before they are published.
• Maintain security, prevent abuse, and debug problems.

We do not sell your personal information, and we do not use it for third-party advertising.

We share data only with the providers needed to run the service:

• Sign-in: Google, Apple, and Meta (Facebook) — only when you choose to sign in with them.
• Photo storage: Cloudflare R2 (stores community photos you upload).
• Photo moderation: Sightengine (automated screening of uploaded photos).
• Maps & data: Mapbox (maps), the National Weather Service (forecasts), and public datasets (NPS, RIDB, USFS, BLM, FCC) used to display places — these generally do not receive your personal information.
• Transactional email: our email provider, used to send service messages you request.

We use a single, essential session cookie to keep you signed in. Our analytics are cookieless. We do not use advertising or cross-site tracking cookies.

We keep your account and content while your account is active. If you delete your account, we delete your profile and associated content (saves, trips, reviews, notes, reports, and photos), except where we must retain limited records to comply with legal obligations or prevent abuse. Security logs are retained only as long as needed for that purpose.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise these rights at any time — see Data & Account Deletion or email us at privacy@roaming.camp.

Roaming.Camp is not directed to children, and we do not knowingly collect personal information from children under the age required by your local law. If you believe a child has provided us information, contact us and we will delete it.

Our service is operated from the United States, and your information may be processed there. By using the service you understand your information may be transferred to and stored in the U.S.

We may update this policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you.

Questions about this policy or your data? Email privacy@roaming.camp.