Vacamp Privacy Policy

Last updated: 13 October 2026

Vacamp is built to collect as little as possible. You never need an account — signing in is optional, and everything works without it. There is no advertising, no analytics SDKs, and no data is sold or shared with third parties for marketing.

This policy covers the iPhone and iPad app, the web map at vacamp.ai/map, the connector for AI assistants such as Claude, and this website. Where they differ, it says so.

Who is responsible

The controller for the purposes of the GDPR is Marius Liebmann, Allermöher Deich 88, 21037 Hamburg, Germany — reachable at support@vacamp.ai. The full details are in the legal notice.

What the app and the web map send to our servers

• Map viewport and search criteria. When you move the map, the app asks our server which campsites in the visible area have availability for your dates, party size, and accommodation type. The visible map area is a rectangle you chose by panning — it may or may not relate to where you are.
• An anonymous install identifier. A random ID created on first launch, used to rate-limit requests and keep the service reliable. Unless you choose to sign in (below), it is not linked to your name, email, or any account, and it is never used for tracking across apps or websites. The web map creates its own ID and keeps it in your browser's storage for this site.
• Your network address, when a new install is created. To stop anyone creating installs in bulk, the server counts new installs per network for a day. It stores a one-way hash of your IP address (for IPv6, of its /64 network) keyed with a secret that changes whenever the server restarts, never the address itself, and deletes it after 24 hours.

If you sign in

Signing in is optional, though stay watches need it. It keeps your tokens and watches with you on every device you sign in on, instead of with one install. On the web you can sign in, on your account page or from the map when something there needs an account, with Google, with Apple, or with your email address and a password. Each of these starts its own account: we never join two accounts because they share an email address. Once signed in, you can add the other ways to sign in to your account yourself, and remove them again.

• What we keep. For Google or Apple: that account's ID (a number the provider uses to tell accounts apart), and the name, email address and profile picture it shares with sign-in. We keep the email only if the provider says it is verified. Apple shares no picture, gives us your name only the first time you sign in, and, if you choose to hide your email, a relay address that forwards to you instead of your own. For email and password: your email address, the name you gave, if any, and a one-way hash of your password (Argon2id), from which the password cannot be read back. We also record which of your installs are signed in, and when your account was created and last signed in to. To slow down password guessing and email flooding, we count failed sign-ins and emails sent per address and per network for up to a day.
• Emails we send. Only ones about your account, and only because of something you or someone using your address did: a link to confirm your address, a link to reset your password, and a notice when your password, your sign-in address or your ways to sign in change. No newsletters, no marketing. They are sent through Scaleway Transactional Email, run by Scaleway SAS in the EU, which hosts the rest of Vacamp too.
• What it is used for. Signing you in, keeping your tokens and watches together across your devices, showing you which devices are signed in, and answering you if you contact support. Nothing else — no marketing, no profiling.
• What Google and Apple see. Their sign-in scripts are loaded only on your account page and in the map's sign-in panel, never on an ordinary visit to the map or this website. Once loaded, each sees your IP address and that you may be signing in to Vacamp, under Google's privacy policy or Apple's privacy policy. We receive a signed statement of who you are, never your Google or Apple password, and we never access your Google or Apple account.
• Signing out and deleting. Signing out unlinks that device. Changing or resetting your password signs out your other devices. Deleting your account (on your account page) removes the account, every way to sign in to it, its watches, its token history, and the reviews, photos and problem reports you posted at once; your devices carry on as anonymous installs. If you stop using Sign in with Apple with Vacamp in your Apple ID settings, Apple tells us and we sign out every device on that account; if you delete your Apple ID, we remove it from your account, and delete the account if it was the only way to sign in.

The legal basis is performing the service you asked for by signing in (Art. 6(1)(b) GDPR).

If you post reviews, photos or problem reports

Signed in, you can review a campsite, add photos of it, and tell us when something about it is wrong. All three are optional.

• Reviews are public. Anyone using Vacamp sees your stars, your text, the date you stayed if you gave it, and when you posted, under your first name and the initial of your last name (or "Vacamp camper" if your account has no name). We never show your full name, your email address or your profile picture.
• Photos are public under the same first name and initial, with the caption you gave. Before storing a photo, our server re-creates the image from its pixels and throws the original file away. This removes everything the camera wrote into the file, including the location where it was taken, the date and the device. We keep a full-size copy and a small preview, on our own server.
• Problem reports are not public. Only the Vacamp team sees what you reported, the note you wrote, and which account sent it, so we can fix the campsite's details and, if needed, ask you about it.
• Moderation. Reviews and photos go live as soon as you post them. We hide ones that break the law, are abusive, show people who did not agree to it, or have nothing to do with the campsite. A hidden review or photo stays visible to you, marked as hidden. To limit spam, we count how many photos and reports each account posted in the last day.
• Changing your mind. You can edit or delete your review and delete your photos at any time from the campsite's page. Deleting your account deletes them all.

The legal basis for publishing what you post is performing the service you asked for (Art. 6(1)(b) GDPR). Moderating it and acting on reports rests on our legitimate interest in keeping Vacamp accurate and free of abuse (Art. 6(1)(f) GDPR).

If you connect an AI assistant

You can connect Vacamp to Claude or another assistant that speaks the Model Context Protocol (how). Connecting signs the assistant in to your Vacamp account with Google, Apple or your email and password, as described above, and adds it to your account's devices as an AI assistant.

• What we receive. Only what the assistant sends to use a Vacamp tool: a map area, dates, party size, a campsite, or a stay to watch — the same requests the app makes. We never receive your conversation with the assistant, and we don't ask for it.
• What we keep. The same as for any signed-in device: your tokens, watches and token history, on your account. To complete sign-in we also store a one-way hash of a single-use code that stops working after five minutes, and we keep the assistant's name and the addresses it asked us to send you back to.
• What the assistant sees. The answers Vacamp gives it, such as campsites, availability, prices, your token balance and your watches. What it does with them is governed by its provider's privacy policy, for Claude Anthropic's.
• Disconnecting. Signing the assistant out among your devices ends its access at once. Deleting your account removes it with everything else.

Usage statistics

To know whether Vacamp is used and what for, our server counts, per day, how many installs made a request, how many were new, and how many availability checks, campsite pages, stay watches and map requests there were, split between the app and the web map. For this website it counts views per page and, when your browser says where you came from, the name of that site (for example google.com) — never the full address, and never which campsite a shared link was for.

These are counted on our server from requests it answers anyway. Nothing extra runs in the app or in your browser, nothing is stored on your device for it, and nothing is sent to anyone else. What is kept are totals per day, which say nothing about any one person. The only thing recorded against an install is the date it was last counted, so it is counted once a day; each day overwrites the last.

What stays on your device

• Your location. If you grant location permission, it is used to centre the map and compute driving times. It is never sent to our servers. The permission is optional. On the web map, your browser asks when you press the locate button, and the location is used only in the page to centre the map.
• Favourites and settings. Stored locally on your device only, signed in or not. The web map keeps your last search and map position in your browser.

What third parties see

Availability and prices come from the booking systems of the campsites shown. Those requests are made by our servers, not by your device, so campsite booking systems never see your IP address or identity. Apple Maps provides the map tiles under Apple's privacy policy.

The web map works differently in two ways. Its map tiles come from OpenFreeMap, whose servers see your IP address and which part of the map you are looking at, as any map tile server does. And a campsite's photo, where there is one, is loaded by your browser straight from wherever that campsite publishes it, so that host sees your IP address too, along with what any browser sends with a request. The same goes for a photo OpenStreetMap links on Wikimedia Commons: your browser loads it from the Wikimedia Foundation's servers, under their privacy policy. Photos campers and owners upload to Vacamp come from our own server.

This website

The pages at vacamp.ai are separate from the web map, which is a page of its own at vacamp.ai/map. The one exception is your account page: it is part of the web map's app, so it uses the same anonymous install ID the map keeps in your browser's storage, and loads Google's and Apple's sign-in scripts as described under If you sign in.

Apart from the map and the account page, the pages set no cookies, run no scripts and load nothing from anyone else: the fonts and photographs are served from our own server. Like any web server, ours sees your IP address and what your browser sends with each request, and keeps it in the same short-lived request logs described below. Page views are counted on the server as described under Usage statistics. The photographs come from Unsplash, but we copy them to our server rather than loading them from Unsplash, so Unsplash does not see your visit.

Retention

Server request logs (including the anonymous install ID) are kept for a short operational period and then deleted. The daily usage totals contain nothing about individuals and are kept. We keep no profiles of individual users. An account, if you made one, is kept until you delete it, and so are the reviews and photos you posted, unless you delete them first. A problem report is kept with your account after we have dealt with it, so we can see what was reported before.

Your rights

Under the GDPR you can request access to or deletion of data connected to your install ID (Settings shows it in the app) or your account. You can delete an account yourself at any time from your account page; for anything else, contact us and we will handle it. For the web map, clearing this site's data in your browser removes its ID and your saved search from your device.

Contact

support@vacamp.ai