Privacy Policy

Quiet Camping ("we", "our", "us") is a Canadian outdoor platform operated from Canada. We are committed to protecting your privacy and handling your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian provincial privacy laws.

This policy explains what information we collect, why we collect it, how we use it, and what rights you have regarding your data. By using quiet-camping.com, you acknowledge the practices described in this policy.

1. Information We Collect

We collect only the information necessary to operate a trust-based camping discovery network. The scope is deliberately minimal:

• Account information — When you register, we collect your name, email address, and a password (stored as a hashed credential via Supabase Auth). We do not store plain-text passwords.
• Profile information — Display name, camping preferences, language preference, and optional biographical details you choose to share.
• Site submissions — Campsite descriptions, approximate coordinates, photos, and metadata you submit. Exact coordinates are stored for verification but displayed publicly at reduced precision to protect site locations.
• Communication data — Any correspondence you send us, including support inquiries and feedback.

2. Information We Do NOT Collect

Consistent with our minimalist philosophy, we explicitly do not collect:

• Payment card details (handled by Stripe directly, never stored by us)
• Browsing history across third-party sites
• Location data from your device without explicit consent
• Contact lists, social media connections, or biometric data
• Personal information of minors (the service is not intended for users under 13)

3. Legal Basis for Processing (PIPEDA)

As a Canadian-operated service, we process your personal information under the PIPEDA principles of meaningful consent, collection limitation, and purpose specification. We collect and use your data only for the purposes you have consented to:

• To create and maintain your account
• To facilitate campsite discovery and community features
• To communicate with you about your account, submissions, and platform updates
• To improve the platform, moderate content, and prevent abuse
• To comply with legal obligations

You may withdraw your consent at any time, subject to legal or contractual restrictions, by contacting us.

4. Cookies and Tracking Technologies

We use minimal cookies and similar technologies strictly for essential operations:

• Authentication cookies — Required to keep you logged in. These are session-based and expire when you log out or after a reasonable period of inactivity.
• Language preference cookie — Stores your chosen site language (English or French) so we can show you the correct version without asking each time.
• Supabase session token — A secure, httpOnly cookie used for authentication via Supabase Auth.

We do not use advertising cookies, third-party tracking cookies, behavioral profiling cookies, or social media pixels. Analytics are privacy-respecting and do not involve personal identifiers.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from logging in or using core features of the platform.

5. Analytics

Quiet Camping uses privacy-first analytics to understand general usage patterns. We collect anonymized, aggregated data only — page views, referral sources, and browser types. No personal identifiers are linked, and no data is shared with advertising networks or data brokers.

6. Data Storage and Security

Your data is stored securely using Supabase, a backend platform with PostgreSQL databases. Key security measures include:

• All data in transit is encrypted using TLS 1.2+.
• All data at rest is encrypted.
• Passwords are hashed using industry-standard algorithms (bcrypt).
• Access to production databases is strictly limited to core team members.
• Regular security audits and dependency updates are performed.

Despite these measures, no online service is 100% secure. We encourage you to use strong, unique passwords.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this policy:

• Account data — Retained until you delete your account or after 24 months of inactivity.
• Site submissions — Retained as part of the community directory. If you delete your account, your submissions may be anonymized rather than removed to preserve community knowledge.
• Communications — Retained for up to 12 months after resolution.
• Analytics — Aggregated data retained indefinitely; raw logs retained for 6 months.

8. Your Rights Under Canadian Privacy Law

Under PIPEDA and applicable provincial laws (including Quebec's Law 25, Alberta's PIPA, and British Columbia's PIPA), you have the following rights:

• Right of access — Request a copy of the personal information we hold about you.
• Right of correction — Request correction of any inaccurate or incomplete information.
• Right of deletion — Request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, fraud prevention).
• Right to withdraw consent — Withdraw your consent to our collection and use of your data at any time.
• Right to data portability — Request your data in a structured, commonly used format.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days as required by PIPEDA.

9. Third-Party Services

Quiet Camping uses the following third-party services, each with their own privacy practices:

• Supabase — Authentication, database, and storage. Privacy policy
• Stripe — Payment processing (future). Privacy policy
• Cloudflare — CDN and DNS. Privacy policy

We vet all third-party services for compliance with Canadian privacy standards. Where possible, we configure data residency to Canada.

10. Cross-Border Data Transfers

Your data may be stored or processed in Canada and, where necessary, the United States. When data is transferred across borders, we ensure appropriate safeguards are in place, including contractual clauses that require the recipient to maintain a level of protection comparable to PIPEDA.

11. Children's Privacy

Quiet Camping is not intended for individuals under 13 years of age. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or the platform itself. Material changes will be communicated via email (if you have an account) or by a notice on the website. The "Last updated" date at the top of this page will indicate when the policy was most recently revised.

13. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact our Privacy Officer:

You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada if you believe we have violated your privacy rights under PIPEDA.