Privacy

Using it without an account

You can plan a whole trip without signing up. To make that work, a random identifier is stored in a cookie on your device the first time you visit. It is not linked to you, it contains no personal information, and its only job is to remember which trips are yours. Clearing your cookies loses access to trips created that way, because there is nothing else tying them to you.

If you create an account

An account stores your email address, the name you choose, and a hash of your password. The password itself is never stored and cannot be recovered — only reset. An account exists so a trip follows you to another device, and so the people you travel with know who you are.

Joining someone else's trip requires an account, because everyone spending money and changing plans on a shared trip should be someone the group actually invited.

Location

Location is never collected in the backgroundand never tracked. It is read only when you press “Share my location”, once per press, and it is shown only to the other people on that trip. It disappears from the map by itself after 24 hours, and you can remove it before then. A new share replaces the last one rather than adding to a history — the app does not keep a record of where you have been.

Photos and what you write

Trip notes, discussion and any photo links you add to a stop are visible to the members of that trip and to nobody else. The read-only link you can share with family carries the itinerary only — not the discussion, not the photos, not the money, not anyone's location.

Who else is involved

Planning a route means asking other services about the world. These receive the information described and nothing about who you are:

• OpenStreetMap and OSRM — map tiles, place searches and road routing. They see the coordinates being looked at or routed between.
• Overpass — campsites and points of interest inside the area of map you are looking at.
• Open-Meteo — the weather forecast for your stops.
• Resend — delivers invitations and password resets. It sees the recipient address and the message.
• Anthropic — only if you use the optional AI trip or packing-list drafting. It sees the prompt describing your trip.
• Railway and Supabase — hosting and the database.

Nothing is sold, and there is no advertising or third-party analytics in this app. Affiliate links in the boutique go to the retailer directly; the app records only that a link was clicked, not who clicked it.

Deleting things

You can leave a trip, delete your own entries, remove a shared location, and — as the trip's owner — delete the whole trip and everything in it. To have an account and its data removed entirely, email the address below and it will be done.

Contact

Questions, or a request to delete your data: hello@downtocamp.com