Privacy Policy

1. Introduction

CampgroundTour ("we," "our," or "us") operates the website located at campgroundtour.com (the "Site"). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy describes the types of information we collect, how we use and safeguard that information, and the choices you have regarding your data.

By accessing or using the Site, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Site.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you interact with the Site, including:

• Account information— If you sign in with Google, we receive your name, email address, and profile photo from Google. We do not collect or store passwords.
• Contact information— When you contact us with questions, feedback, or support requests, we collect the information included in your communication.
• User-generated content— Any reviews, comments, review requests, or other content you submit to the Site.

2.2 Information Collected Automatically

When you visit the Site, we automatically collect certain technical information, including:

• Device and browser data— Your IP address, browser type and version, operating system, device type, and screen resolution.
• Usage data— Pages visited, time spent on pages, referring URLs, click patterns, and navigation paths through the Site.
• Approximate location— Approximate geographic location may be inferred by our analytics provider (Google Analytics) from your IP address. We do not ourselves perform server-side IP geolocation. If you use our interactive map features and grant permission, your browser may share precise geolocation directly with the Site; you may revoke this permission at any time through your browser or device settings.
• Rate-limit identifiers— For abuse-prevention on public endpoints (such as the "request a review" feature), we briefly retain a one-way hash of your IP address. The hash is held in memory for short windows and is not stored in our database alongside other personal information.

2.3 Cookies and Similar Technologies

The Site uses a small number of cookies and similar local-storage technologies. The specific items and their purposes are listed below.

• Session cookies (essential)— Set by our authentication system (NextAuth.js) when you sign in. These keep you signed in for up to 7 days. They are required for the Site to function and cannot be disabled.
• Analytics cookies (optional) — _ga and _ga_* cookies set by Google Analytics 4 to measure aggregate site usage. These are only set after you affirmatively grant analytics consent. You can opt out at any time via Your Privacy Choices; if you opt out, we delete these cookies from your browser.
• Functional local storage (first-party) — Browser localStorage entries used to remember your favorited campgrounds and recently-viewed list. This data stays on your device and is never sent to our servers.

You can manage cookie and analytics preferences at any time through Your Privacy Choices. Browsers also let you block or clear cookies through their settings; doing so may limit some Site features.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Site and its features, including the interactive campground map, search functionality, and campground detail pages.
• To create and manage your account, if you choose to register.
• To personalize your experience, such as displaying campgrounds near your location or remembering your preferences.
• To respond to your inquiries, comments, and support requests.
• To analyze usage trends and improve the Site's content, design, and functionality.
• To detect, prevent, and address technical issues, fraud, or security threats.
• To comply with legal obligations and enforce our Terms of Use.

4. Sharing Your Information

We do not sell your personal information for money. Under California law, the term "share" has a separate meaning that includes the disclosure of personal information to third parties for cross-context behavioral analytics, even without a financial exchange. To the extent our use of Google Analytics qualifies as "sharing" under that definition, you may opt out at any time through Your Privacy Choices. We otherwise share information only in the following limited circumstances:

• Service providers— We share information with third-party vendors who perform services on our behalf, such as website hosting (Microsoft Azure), database storage (Azure Cosmos DB), authentication (Google), and analytics (Google Analytics 4). These providers are contractually obligated to use your information only as necessary to provide services to us.
• Analytics sharing for site improvement— When you grant analytics consent, your usage data is shared with Google for the purpose of measuring and improving the Site. We have configured Google Analytics with IP anonymization on, Google Signals off, and advertising personalization off. You may opt out at any time.
• Legal requirements— We may disclose your information if required to do so by law, regulation, or legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers— In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
• With your consent— We may share your information for any other purpose with your explicit consent.

5. Third-Party Services

The Site integrates with or links to third-party services that have their own privacy policies. These include but are not limited to:

• OpenStreetMap— Our interactive map renders tiles served by OpenStreetMap. Your IP address and approximate location may be visible to OpenStreetMap when tiles are requested.
• YouTube (Google)— Campground video tours are embedded from YouTube using the privacy-enhanced youtube-nocookie.com domain, with thumbnails served from img.youtube.com. The YouTube player is only loaded after you click play. Google's privacy policy governs data collected through these embeds and thumbnails.
• Google Sign-In— If you choose to sign in, your email, name, and profile photo are provided to us by Google through the OAuth flow. Google may also receive metadata about your sign-in activity. Google's privacy policy applies.
• Google Analytics 4— Used to measure aggregate Site usage when you have granted analytics consent. Google may receive your IP address (anonymized), user agent, and pages viewed. Google's privacy policy applies.
• Google Maps directions— Some pages include hyperlinks that open Google Maps for driving directions. These links are activated only when you click them; no data is sent to Google until you do.

We encourage you to review the privacy policies of any third-party services you interact with through our Site. We are not responsible for the privacy practices of these third parties.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention windows include:

• Authentication sessions— up to 7 days from the last sign-in, after which they expire and are deleted.
• Audit logs— 90 days, then automatically deleted by our database time-to-live policy.
• Rate-limit IP hashes— held in memory only, evicted within approximately 10 minutes.
• Google Analytics data— held by Google according to the data retention setting we have configured (14 months or less).
• Functional local storage— held on your device until you clear it through the relevant Site feature or your browser settings.

If you have an account with us, we retain your account information for as long as your account is active. You may request deletion of your account at any time by contacting us.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit using TLS/SSL, secure server infrastructure, and access controls limiting who can view personal data.

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

8. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

• Access— You may request a copy of the personal information we hold about you.
• Correction— You may request that we correct inaccurate or incomplete information.
• Deletion— You may request that we delete your personal information, subject to certain legal exceptions.
• Opt-out of analytics sharing— You may opt out of analytics sharing at any time through Your Privacy Choices.
• Cookie preferences — You may manage cookie preferences through Your Privacy Choices or your browser settings.
• Location data— You may disable geolocation access through your browser or device settings at any time.

To exercise any of these rights, please contact us using the information provided in the Contact section below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

9. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CPRA"), gives you specific rights regarding your personal information. This section supplements the rest of this Privacy Policy.

9.1 Categories of Personal Information We Collect

In the preceding 12 months we have collected the following categories of personal information, as defined by California Civil Code §1798.140:

• Identifiers— name, email address, profile photo URL (when you sign in with Google); IP address (in request headers and rate-limit hashes); cookie identifiers (analytics).
• Internet or other electronic network activity— pages visited, navigation paths, referring URL, browser/device metadata.
• Geolocation data— approximate location inferred by Google Analytics from your IP address; precise location only if you affirmatively grant browser permission for our map features.
• Commercial information— user-generated content such as facility review requests you submit.

We do not knowingly collect biometric, genetic, health, financial-account, social security, immigration status, racial/ethnic, religious, sexual orientation, or precise-geolocation information categorized as "sensitive personal information" under CPRA. We collect personal information directly from you, automatically through your use of the Site, and from authentication and analytics providers identified in Section 5.

9.2 Business and Commercial Purposes

We use personal information for the purposes described in Section 3, including operating the Site, providing requested features, security and fraud prevention, debugging, and short-term transient analytics use.

9.3 Categories of Third Parties

We disclose personal information to the categories of third parties identified in Sections 4 and 5: hosting and database service providers (Microsoft Azure), authentication providers (Google), analytics providers (Google Analytics 4), and map tile providers (OpenStreetMap).

9.4 "Sale" and "Sharing"

We do not "sell" personal information in exchange for monetary consideration. We may "share" personal information for cross-context behavioral analytics purposes via Google Analytics 4 in the manner described in Section 4. You have the right to opt out of this sharing through Your Privacy Choices. We honor Global Privacy Control (GPC) signals as a valid opt-out request.

9.5 Your California Rights

• Right to know what personal information we have collected, used, disclosed, and shared about you, including the categories listed above.
• Right to delete personal information we have collected, subject to exceptions in California law.
• Right to correct inaccurate personal information we maintain about you.
• Right to opt out of sharing for cross-context behavioral analytics. Exercise this right through Your Privacy Choices or by sending a Global Privacy Control signal.
• Right to limit use of sensitive personal information— we do not use sensitive personal information for purposes beyond those permitted without a limit request, so no separate action is required.
• Right to non-discrimination— we will not deny service, charge different prices, or provide a different level of service because you exercised any of these rights.

To exercise the right to know, delete, or correct, contact us at the email address in Section 13. We may need to verify your identity before responding. You may also designate an authorized agent to make a request on your behalf, in which case we will require written proof of authorization.

9.6 Retention

Retention windows for each category are listed in Section 6.

10. Children's Privacy

The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as soon as possible. If you believe we have inadvertently collected information from a child under 13, please contact us immediately.

11. Do Not Track and Global Privacy Control

Some web browsers transmit a legacy "Do Not Track" (DNT) signal. Because there is no universally accepted standard for how to respond to DNT signals, we do not respond to them.

We do, however, honor Global Privacy Control (GPC) signals. When your browser sends a GPC signal, we treat it as a valid opt-out request for the sharing of personal information under the CPRA. In practice this means analytics is disabled by default for your visit, no Google Analytics scripts are loaded, and no _ga cookies are set unless and until you affirmatively re-enable analytics through Your Privacy Choices.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Your continued use of the Site after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

CampgroundTour
Email: privacy@campgroundtour.com

We will make every effort to respond to your inquiry in a timely manner.