Privacy Policy

Kid Camp List ("we", "us") is operated by Gardner Tech Group. This page explains what we collect, why we collect it, and how to get rid of it. We've kept it short on purpose.

What we collect

Browsing the site as a guest collects nothing personal. Standard server logs record IP addresses and user-agent strings for security and abuse prevention; we rotate those logs periodically.

We use a self-hosted, privacy-friendly analytics tool (Plausible, on a.mattgardner.com) to count visits and see which pages are popular. It does not set cookies, does not track you across sites, and does not collect anything that could identify you personally — just aggregate counts of page views, referrers, screen sizes, and country.

If you tap the heart icon to save a camp without signing in, we store the camp IDs in a signed cookie on your browser. That cookie expires after six months and never leaves your device unless you sign in.

If you sign in with Google, we receive and store:

• Your email address
• Your name
• Your Google profile photo URL
• Your Google account ID (a stable identifier we use to recognize you on return visits)

Once you're signed in, the camps you save are stored in our database and tied to your account.

If you submit the feedback form at /feedback, we store your message and any optional name, email, and camp suggestion you chose to include. For anonymous submissions we also keep your IP address temporarily — only long enough for one of us to read the entry — then we delete it. Signed-in submissions skip the IP capture entirely.

How we use it

We use this information for one thing: to let you sign in and see the camps you've saved. We don't run ads, profile you, or build behavioral models of your family. We don't sell or share your data with anyone.

Sharing and third parties

We do not sell, rent, or share your personal data with third parties for their marketing or any other purpose.

We do rely on a small number of service providers to run the site: Google (sign-in), Hetzner (server hosting), GitHub (code hosting), and Resend (transactional email). Each of these only sees the minimum data needed to do its job.

Cookies

We use cookies for two things: keeping you signed in (a session cookie that expires when you sign out), and remembering your saved camps when you're not signed in (the six-month signed favorites cookie described above). We don't use analytics or advertising cookies.

Children's privacy

Kid Camp List is for parents and guardians, not for children. We don't knowingly collect data from anyone under 13. If a child has signed in by mistake, email us at the address below and we'll delete the account.

Your rights

You can stop us using your data at any time:

• Sign out — clears your session cookie immediately.
• Clear your browser cookies — removes any guest-saved camps.
• Delete your account — email us and we'll remove your user record and all associated saved camps from our database within 30 days. This also revokes the Kid Camp List app's access from your Google account.
• Revoke access yourself — visit myaccount.google.com/permissions, find Kid Camp List, and remove it. We won't be able to identify you on future visits, though your saved camps will remain in our database until you ask us to delete them.

Data retention

We keep your account and saved camps for as long as you have an active account. Server logs are kept for up to 30 days. If you delete your account, all your personal data is removed within 30 days of the request.

Security

We use HTTPS for all traffic and treat your authentication tokens with care. We never see or store your Google password — sign-in is handled by Google directly via OAuth.

Changes to this policy

If we change anything material we'll update the date at the top of this page and, if you have an account, email you.

Contact

Questions, deletion requests, or anything else, reach out to [email protected].