Legal
Privacy Policy
Effective July 21, 2026
In short
- We collect only what running the service requires: your email address, basic profile details if you sign in with Google, and the watches and requests you create.
- We set no advertising, analytics, or tracking cookies — only the cookies that sign you in. That is why there is no cookie banner here.
- We never sell or share your personal information, and we send no marketing email.
Who runs ParksPermit
ParksPermit is a campsite search and availability service for parks in Canada and the United States, operated by Andrew Lund, who is responsible for the protection of personal information handled by the service. For anything in this policy — questions, access, corrections, deletion — email [email protected].
What we collect, and why
Account. Your email address identifies your account. If you sign in with Google, we also receive the name, email address, and profile photo you share through Google — nothing more.
Signing in. Email sign-in codes are generated for you and expire after 10 minutes. We record the requesting IP address to rate-limit sign-in attempts.
Sessions and logs. Each signed-in session records your browser's user-agent string and activity timestamps so sessions can expire and be revoked. Our servers keep standard request logs (IP address, URL, status) for operations and security.
Things you create. Availability watches and the notifications they trigger, invites you issue, and booking requests you submit are stored so the service can act on them.
What we don't do. No advertising, no third-party analytics or tracking, no profiling, and no selling or sharing of personal information. Email from us is transactional only — sign-in codes and the alerts you asked for.
Do Not Track. Some browsers send a "Do Not Track" (DNT) header or a Global Privacy Control (GPC) signal. We do not track you across other websites or over time, and we never sell or share your personal information, so there is no behaviour of ours for these signals to change — what they ask for is already what we do. No advertising or analytics network runs on this site; the only outside parties involved at all are the ones named under "Services we rely on" below.
Cookies
Every cookie we set is first-party and strictly necessary to provide something you explicitly asked for — which is why no consent banner is required. We set no optional cookies.
| Cookie | Purpose | Lifetime |
|---|---|---|
| session | Keeps you signed in | 14 days of inactivity |
| invite | Holds a validated invite code until your account is created | 7 days |
| oauth state | Secures the Google sign-in handshake | 10 minutes |
The site's page navigation also keeps a short-lived history cache in your browser's local storage. It never leaves your device.
Services we rely on
Google sign-in (optional). If you choose it, Google authenticates you and shares your basic profile with us, governed by Google's own privacy policy.
Google Fonts. Pages currently load fonts from Google's servers, which means Google receives your IP address and browser details when a page loads. We plan to serve these fonts ourselves and will update this policy when we do.
Resend delivers our transactional email (sign-in codes, alerts) and processes your email address for that purpose only.
How long we keep things
- Sessions expire after 14 days of inactivity and can be revoked earlier.
- Sign-in codes expire after 10 minutes.
- Request logs and sign-in rate-limit records are kept briefly, then deleted.
- Account data is kept until you ask us to delete your account.
Your rights
You can ask what we hold about you, have it corrected, or have your account and its data deleted — email [email protected] and we'll respond within 30 days. If a breach ever puts your information at risk, we will notify you and the relevant authorities as the law requires.
Security
Traffic is encrypted with HTTPS; session cookies are signed, HttpOnly, and Secure; and administrative access is restricted to a private network. ParksPermit is not directed at children.
Changes
If our data practices change, we will update this page and its effective date before the change takes effect.