Privacy Policy

1. Overview

Campsite Finder is a private, invitation-only service. This policy describes what information the Service stores about you, why, and who else touches it. The short version: we store only what the features need, we run no analytics and no advertising, and we never sell or share your data with anyone except the delivery services you choose for your own alerts.

2. Information we store

• Account details — your username, email address, and a one-way cryptographic hash of your password. Plaintext passwords are never stored.
• Notification settings — whichever channels you configure: an alert email address, an ntfy topic name, and/or a Telegram chat ID with the display name Telegram reported when you connected it.
• Your saved content — favorite parks and alert definitions (parks, date windows, and site filters you choose).
• Alert history — which availability matches were sent to you, so the Service can avoid repeating them.
• Session cookie — a single essential cookie (campsite_session) that keeps you logged in. It is HttpOnly, expires after 30 days, and is not used for tracking. There are no third-party or advertising cookies.
• Server logs — standard web-server logs (IP address, requested URL, browser user agent, timestamp), kept for security and debugging and rotated routinely.

3. How it is used

Stored information is used only to operate the Service: signing you in, showing your favorites and alerts, sending the notifications you asked for, emailing password-reset links, and keeping the Service secure. It is not used for profiling, marketing, or any secondary purpose.

4. Third-party services

Delivering your alerts requires handing the message — and the address it goes to — to the channel you selected:

• Email is delivered through a commercial SMTP relay, which processes the recipient address and message content.
• Telegram alerts go through the Telegram Bot API and are subject to Telegram's own privacy policy.
• ntfy push alerts are published to your topic on the ntfy server. Note that ntfy topics are readable by anyone who knows the topic name, so choose an unguessable one.

Availability data flows the other way: the Service polls the official reservation systems for public availability information. None of your personal data is ever sent to them.

5. Retention and deletion

Your data is kept for as long as your account exists. Deleting an alert or favorite removes it immediately; clearing a notification channel in your Profile removes that address or ID. Password-reset links are single-use and expire automatically. To have your account and all associated data deactivated or deleted entirely, contact the operator (section 8).

6. Security

The Service is served over HTTPS, passwords are stored only as salted one-way hashes, and session cookies are protected against script access. No system is perfectly secure, however, and the Service is provided without a guarantee against breach — please use a password you do not reuse elsewhere.

7. Children

The Service is not directed at children under 13, and accounts are only created for known, invited adults.

8. Changes and contact

Changes to this policy will be posted on this page with an updated effective date. Questions or deletion requests can be directed to the operator at reed@nashvilleaudiovisual.com.