Privacy Policy — Kestrel

Kestrel ("we," "our," or "us") operates the website at kestrel-camp.com and related services (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

We collect the following categories of information:

Account information: When you create an account, we collect your email address and a hashed password.
Alert preferences: Campgrounds you watch, date ranges, and notification settings you configure.
Usage data: Pages you visit, search queries you run, and general interaction with the Service. This data is collected in aggregate and is not linked to your identity.
Communications: If you contact us via the support form or email, we retain the content of those messages.

We do not collect payment information. We do not currently offer paid features.

2. How We Use Your Information

To operate the Service and send you campsite availability alerts by email.
To authenticate your account and keep it secure.
To improve the Service by understanding how it is used.
To respond to support requests.
To send transactional emails (alerts, account-related notices). We do not send marketing emails.

3. How We Share Your Information

We do not sell your personal information. We share it only in the following limited circumstances:

Service providers: We use SendGrid to deliver alert emails. These providers process data on our behalf under their own privacy and security commitments.
Legal requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of Kestrel, our users, or the public.

4. Data Retention

We retain your account and alert data as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law.

5. Cookies and Tracking

We use a minimal session cookie to keep you logged in. We do not use third-party advertising trackers or analytics cookies. We may use privacy-respecting analytics (such as aggregate page view counts) that do not track individuals.

6. Security

We use industry-standard security measures including HTTPS, hashed passwords, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

8. Your Rights

You may access, update, or delete your account information at any time through your account settings. To request deletion of your data or exercise other privacy rights, contact us at our support page.

9. Changes to This Policy

We may update this policy from time to time. We will post the updated version on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy, please reach out via our Contact Support page.