Privacy Policy

Overview

National Park Passport (“we”, “our”) helps you explore U.S. National Parks and keep a private travel journal. This policy explains what we collect, why we collect it, and the choices you have. We are an independent project and are not affiliated with the National Park Service.

Information we collect

• Account information. When you sign in with Google we receive basic identity details (name, email, and avatar) needed to create and secure your account.
• Passport data. Visits, notes, ratings, wishlist entries, and journal photos you choose to save. Your journal is private by default and is not shown on public park pages.
• Billing information. Payments are processed by Stripe. We store Stripe customer and subscription identifiers and entitlement status; we do not store full card numbers.
• Usage analytics. If analytics are enabled, we use PostHog to collect product events (such as park views, sign-ins, checkout starts, and saved visits) to understand feature use. Analytics keys are public configuration only.
• Technical data. Standard server logs (IP address, user agent, timestamps) may be collected to operate and secure the service.

How we use information

• Provide the park guide, authentication, passport, and photo journal features
• Enforce premium entitlements and manage billing with Stripe
• Improve reliability, security, and product experience
• Respond to support requests you send us

We do not sell your personal information. Public park content never reveals your private activity.

Photos and metadata

Journal photos are stored in a private bucket and are accessible only to your account. Where practical, we strip unnecessary metadata (including location) during upload processing. Do not upload photos you are not allowed to store.

Third-party services

We rely on processors that help run the product, including Supabase (auth, database, storage), Stripe (payments), Google (sign-in), Mapbox (maps), Open-Meteo and the NPS API (public park/weather data), PostHog (analytics, when configured), and our hosting provider. Each provider processes data under its own terms and privacy policy.

Retention and deletion

We retain account and journal data while your account is active. You can delete individual visits and photos from the passport UI. You can permanently delete your account from the Account page, which removes your profile, entitlements, visits, wishlist, and journal photos from our systems (subject to short-lived backups and legal retention needs).

Your choices

• Sign out at any time from the Account page
• Manage or cancel a paid subscription via the Stripe billing portal
• Delete visits, photos, or your entire account
• Use the free park guide without creating an account

Children

The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this policy as the product evolves. The “Last updated” date at the top will change when we do. Continued use after an update means you accept the revised policy.

Contact

Questions about privacy can be sent to the site operator listed on the About page.