Privacy Policy

Last updated: [DATE — fill in when you publish this]

What we collect

Account information

• When you sign in with Google, we receive your name, email address, and profile photo from Google — we don't see or store your Google password.

Trip planning information

• What you enter into the trip wizard: origin city, group size, trip dates, max drive time, scenery and priority preferences, amenity preferences, and trip type (camping or backpacking).
• Trips you save to your account, so you can return to them later.
• Cost estimator inputs (group size, nights, vehicle count, mileage, gear situation, any custom line items you add) when saved as part of a trip.
• Packing checklist progress, if you're signed in.

Technical & usage information

• Standard web request data (IP address, browser type, device type) collected automatically by our hosting provider and error-monitoring tool, used for debugging and keeping the site running.

We do not collect payment card numbers, government ID numbers, or precise real-time GPS location — location input is limited to the origin city you type in.

Third parties we share data with

We use a small number of service providers to run TrailMuster. Each only receives what it needs to do its job:

• Supabase — hosts our database and authentication. Your account info, saved trips, and group data are stored here.
• Google — provides sign-in (OAuth). We also send approximate location text (e.g. a city name or coordinates) to Google Places to look up nearby destinations; this is not tied to your account.
• Vercel — hosts our website and server functions. Standard web server logs (IP address, request time) pass through here.
• Recreation.gov (RIDB), OpenStreetMap, and Open-Meteo — public data sources we query to find campgrounds, trails, and weather. We send them the search area (a location and radius), not your personal information.
• Sentry — error monitoring. When something breaks, Sentry may capture technical details like your browser, device, IP address, and what you were doing on the page, so we can fix bugs.
• Amazon Associates — see the dedicated section below.

We do not sell your personal information to anyone, and we don't run third-party advertising on TrailMuster today. If that changes (for example, if we add Google AdSense in the future), we will update this policy first to disclose any ad-related cookies or tracking involved.

Group trips & shared data

TrailMuster's group features (shared trip workspaces, gear claims, group itineraries) are built around sharing information with people you invite. If you add a trip to a group or claim a gear item, the other members of that group can see it — that's the point of the feature. Only invite people you actually want to share trip details with.

Amazon affiliate links

TrailMuster is a participant in the Amazon Associates program. The "Essential Gear" links on our checklist page go to Amazon and include an affiliate tag; if you make a qualifying purchase, we may earn a commission at no extra cost to you. Once you click through to Amazon, your interaction there is governed by Amazon's own privacy policy, not ours — we don't receive any personal information about your Amazon purchase.

Cookies & local storage

We use essential cookies/local storage to keep you signed in between visits. We do not currently use advertising or cross-site tracking cookies.

How long we keep data

We keep your account and trip data for as long as your account is active. If you delete your account, we delete your associated personal data, except where we're required to keep records for legal or security reasons (for example, abuse-prevention logs).

Your rights

You can ask us to access, correct, or delete your personal data at any time by contacting us (below). Depending on where you live, you may have additional rights under laws like the GDPR (EU/UK) or CCPA (California) — reach out and we'll do our best to help, even if we haven't built a fully automated process for every request type yet.

Children's privacy

TrailMuster is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we'll remove it.

Security

We use reasonable technical measures (like encrypted connections and access controls through our hosting providers) to protect your data. No online service can guarantee perfect security, so we can't promise data will never be exposed, but we take reasonable steps to prevent that.

Changes to this policy

If we materially change how we collect or use your data, we'll update this page and change the "Last updated" date above.

Contact

Questions about this policy or your data? Contact us at [your support email — e.g. support@yourdomain.com].