Camp Check-In

Privacy Policy

Last updated: September 20, 2026

1. Information We Collect

When you use Camp Check-In, we collect: your email address, and — if you sign in with Google — your name and profile picture; camp names, session dates/times, and participant rosters you create; registration details submitted by participants or their guardians, including emergency contacts and any medical notes the organizer requests; attendance records including timestamps and check-in methods; sign-in events including device, browser, and operating system; where a sign-up came from — the campaign tags on the link used to reach us (such as ?utm_source=facebook) and the name of the referring website, for example facebook.com; and basic usage data to help us improve the service.

On that last point, to be specific: to understand which marketing actually reaches organizers, we record the referring site and campaign tags of the visit an account was created from. We record the referring site's name only — never the full address of the page you came from, which can itself contain personal information — and we never record your IP address for this. The cookie that remembers this across a visit is only set if you accept analytics cookies (see section 5); if you don't, we use only what the sign-up request itself shows us at that moment, and store nothing on your device.

2. How We Use Your Information

We use collected information to provide and maintain the Camp Check-In service, manage your camps, sessions, and attendance records, generate QR codes for participant self-check-in, improve the app, and respond to support requests.

3. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your camp data, rosters, and check-in records are private and only accessible to you as the account owner. Participants who check in via QR code can see the session roster for their specific session only.

4. Service Providers

We use a small number of third-party providers to operate Camp Check-In. Each processes data only as needed to provide their service to us, and none are permitted to use it for their own purposes:

  • Stripe — payment processing for registration payments and Pro subscriptions. Stripe receives payer name, email, and payment details. We never see or store full card numbers.
  • Resend — sending transactional email (registration confirmations, sign-in links, organizer messages). Receives recipient name and email address.
  • Google — optional sign-in. If you sign in with Google, we receive your name, email address, and profile picture.
  • Neon — PostgreSQL database hosting. Stores all application data described in section 1.
  • Vercel — application hosting and delivery. Processes request data such as IP address and browser type.

All of these providers process data on servers located in the United States. If you access Camp Check-In from outside the United States, your data will be transferred to and processed there.

5. Cookies

Camp Check-In uses a small number of cookies. All but one are essential to running the service; the exception is cc_src, which is set only if you accept analytics cookies. We do not use advertising, cross-site tracking, or profiling cookies, and we do not load third-party analytics.

  • Session cookie (set on sign-in, expires when your session ends) — keeps you signed in as you move between pages. Without it you would have to sign in on every page.
  • lang (up to 1 year) — remembers your language preference so pages render in the right language.
  • cc_consent (up to 1 year) — records the cookie choice you made, so we know whether we may set the cookie below. Holds only the decision itself.
  • cc_src (up to 90 days, analytics — set only if you accept) — remembers the campaign tags and referring site of your first visit, so that if you later create an account we can tell which marketing reached you. It holds no IP address, no identifier for you, and no full web address. It is never read by anyone but us and never shared.

Under GDPR and the ePrivacy Directive, strictly necessary cookies do not require consent; cc_src is not strictly necessary, so it is set only after you choose “Accept all”. Choosing “Essential only” keeps it off, and withdrawing consent later removes it. You can change your choice at any time using the Cookies link in the site footer.

If you pay for a camp registration or a Pro subscription, payment is completed on Stripe's own checkout pages. Stripe sets its own cookies there under Stripe's privacy policy, including cookies used for fraud prevention. Similarly, signing in with Google takes place on Google's domain under Google's policies.

6. Advertising

Camp Check-In may display advertisements or sponsored content within the Service. Any such advertising is contextual or platform-wide. We do not use participant data, rosters, or registration records to target advertising, and we do not share that data with advertisers or ad networks.

7. Data Storage & Security

Your data is stored securely in a PostgreSQL database. We use industry-standard security practices. No method of transmission or storage is 100% secure.

8. Data Retention

We retain your data as long as your account is active. You can delete camps, sessions, and participants at any time.

9. Your Rights

You have the right to access your personal data, delete your camps and sessions, export attendance data as CSV, and request account deletion by contacting us.

10. Children's Privacy

Camp Check-In is designed for use by camp staff and administrators. While participant rosters may include minors, the app is intended for adults managing camp operations.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes within the app.

12. Contact

If you have questions about this Privacy Policy, email us at team@campcheckin.com.