Privacy Policy

Beyond Camps (“we,” “us,” or “our”) operates the website beyondcamps.com. This policy explains what information we collect, how we use it, and your choices.

What We Collect

Account information. When you sign in with Google, a magic link, or a passkey, we store your email address and display name. If you sign in with Google, we also receive your profile photo. If you register a passkey, we store credential metadata (such as credential ID, device type, and public key) needed to authenticate you—we do not have access to your biometric data.

Session data. When you sign in, we create a session record that includes your IP address and browser user-agent string. This helps us detect unauthorized access and troubleshoot issues. Sessions expire automatically.

Cookies. We set a session cookie when you sign in so the site can recognize you across pages. This is a functional cookie required for authentication—we do not use advertising cookies or tracking pixels. Our analytics system (Umami) does not use cookies.

Favorites. If you save camps to your favorites, we store which camps you've favorited so they're available when you return.

Analytics. We use self-hosted analytics (Umami) to track anonymous page views, traffic sources, and general usage patterns. We also log anonymous usage events such as search queries, outbound link clicks, and sign-in activity to help us improve the site. This data does not identify you personally and is stored on our own servers.

Camp suggestions. If you submit a camp suggestion, we store the camp name, website URL, your email address, and any notes you provide.

What We Don't Collect

We do not collect passwords (we use Google sign-in, magic links, and passkeys instead). We do not collect payment information. We do not sell or share your personal information with third parties for advertising or marketing purposes.

How We Use Your Information

We use your information to:

• Let you sign in and maintain your session
• Save your favorite camps
• Respond to camp suggestions you submit
• Understand how the site is used (via anonymous analytics) so we can improve it
• Detect and prevent unauthorized access or abuse

Third-Party Services

• Google Sign-In: When you sign in with Google, Google's own privacy policy applies to the authentication process. We receive only your name, email, and profile photo.
• Resend: We use Resend to deliver emails, including magic link sign-in emails and admin notifications when a camp suggestion is submitted (which include the submitter's email address). Resend processes your email address solely to deliver these messages.
• Cloudflare: Our site is served through Cloudflare's network, which processes visitor traffic (including IP addresses) to provide security and performance benefits. Cloudflare's privacy policy applies to this processing.

Data Storage and Security

Your data is stored in a PostgreSQL database hosted on our own infrastructure in the United States. We use encrypted connections (HTTPS) for all traffic. OAuth tokens received during sign-in are stored securely and used only to maintain your authenticated session.

Your Choices

You can stop using the site at any time. If you'd like us to delete your account and associated data, email us at the address below and we'll take care of it.

Contact

If you have questions about this privacy policy, email us at [email protected].

Changes

If we make significant changes to this policy, we'll update the “Last updated” date at the top. We encourage you to review this page periodically.