Privacy
What we hold about you, who can see it, how long it stays, and how to have it removed.
This document states plainly how the platform behaves — the mechanics described here are the mechanics the software enforces. The trading entity, registered address, governing law and the binding contract wording are added before the first real booking is taken. Until then, treat this as a description of the product rather than as an executed agreement.
What we hold
An account holds your sign-in identity, a display name, and the surfing preferences you choose to give us — ability, goals, budget band, room and food preferences, and anything you rule out. The preferences exist to produce the match; nothing forces you to answer any of them, and an unanswered one is treated as unknown rather than as a zero.
A booking additionally holds the details the camp needs to host you safely: the names in the party, an emergency contact, and any medical or dietary note you supply. Payment card details are held by Stripe, never by us.
Who can see it
Your preferences are yours. A camp never sees them; it sees the booking, and the disclosures you wrote for that stay. Within a camp, guest contact details are visible only to team members given that capability, and only inside the window around the stay.
One camp can never read another camp’s bookings, guests or payouts. That isolation is enforced in the database itself, on every query, not by hiding buttons in the interface.
How long it stays
Emergency contacts, legal names and medical notes attached to a booking are erased ninety days after check-out, automatically. Booking and payment records are kept for as long as tax and accounting rules require. Reviews stay published under your display name until you ask for them to be removed.
Getting it removed
You can request erasure from your account settings. We tell you when it will execute and, if something blocks it — an unfinished booking, a live payment dispute, a record we are legally required to keep — we name the blocker rather than failing quietly. You can cancel a pending request at any time before it runs.
Who else is involved
Payments are processed by Stripe, which holds your card details and performs its own identity checks on camps. Our application and database run on infrastructure we operate. We do not sell personal data, and we do not run advertising trackers on this site.
Preferences you set while signed out live only in the address bar of the page you are on. They are not stored anywhere until you create an account.