Privacy Policy

Who we are

CampClaim is operated by Square Post Labs (SPL), based in London, Ontario, Canada. This policy covers the CampClaim website (campclaim.com), API, and browser extension for Chrome, Firefox, and Edge.

Contact: [email protected]

What we collect

Account information

When you sign up, we store your email address. If you subscribe to a paid plan, Stripe processes your payment. We store your Stripe customer ID and subscription ID but never your credit card number.

If you opt into SMS alerts, we store your phone number.

Watch targets

We store the parks, campgrounds, dates, and site preferences you configure. This data drives the availability monitor and is deleted if you remove your targets.

Availability alerts

We log when alerts are sent (email, SMS, or push) including the target, site, and timestamp. This powers your alert history in the dashboard.

Analytics

We use PostHog for anonymous product analytics (page views, feature usage, upload counts). No personal information, campsite data, or alert content is sent to analytics. No cross-site tracking is performed.

Browser extension

The CampClaim browser extension (available for Chrome, Firefox, and Edge) has specific data handling practices:

What the extension accesses

• Ontario Parks session cookies - Read from reservations.ontarioparks.ca to place bookings on your behalf via the Ontario Parks cart API. Cookies are used locally within your browser to make requests to Ontario Parks. If you opt into the 24/7 session keep-alive feature, your session token (not your username or password) is encrypted and stored on our servers (see details below).
• CampClaim session token - Stored locally in browser extension storage (chrome.storage.local) to authenticate the WebSocket connection to CampClaim. The token is sent only to campclaim.com.
• Booking statistics - Alert count, booking count, and last activity timestamp are stored locally in extension storage for display in the popup.

Campsite data improvement

When you browse campground pages on Ontario Parks, the extension collects publicly available campsite information to improve CampClaim for all users. This includes:

• Site names and numbers - The human-readable name of each campsite (e.g., "Site 101")
• Site attributes - Shade level, privacy, ground cover, dimensions, accessibility, and other site characteristics
• Site photos - Image identifiers (UUIDs) associated with campsite listings

This data is non-personal and publicly visible to anyone browsing Ontario Parks. It is used to power campsite previews, maps, and search filters on CampClaim. No personal information, browsing history, or Ontario Parks account details are included in this collection. You can disable this feature from the extension popup.

What the extension does NOT access

• Your Ontario Parks username or password
• Your browsing history, tabs, or activity on other websites
• Any data from websites other than reservations.ontarioparks.ca and campclaim.com
• Any personal information from your Ontario Parks account

How auto-booking works

When CampClaim detects an available campsite, a signal is sent to the extension over an encrypted WebSocket connection. The extension then uses your existing Ontario Parks browser session to add the site to your cart via the Ontario Parks API. Your Ontario Parks credentials stay in your browser at all times.

Server-side session keep-alive (optional)

You can opt in to 24/7 session keep-alive from the extension popup. When enabled:

• What's stored: Your Ontario Parks session token (not your username or password) is encrypted with AES-256-GCM and stored on Cloudflare KV.
• Why: CampClaim pings Ontario Parks every 10 minutes to prevent your session from expiring due to inactivity, so auto-booking works even when your computer is off.
• How long: Session data auto-deletes after 30 days or immediately when you disable the feature.
• Your control: You can disable keep-alive anytime from the extension popup. Disabling immediately deletes the stored session data.
• If your session expires: CampClaim sends you a single SMS notification asking you to log back in. No repeated messages.

Extension permissions

cookies	Read Ontario Parks session cookies to authenticate cart API requests
notifications	Alert you when a site is available or booking succeeds/fails
storage	Store your CampClaim session token and booking stats locally
alarms	Schedule periodic session health checks every 5 minutes
webNavigation	Detect checkout completion for booking confirmation capture (ontarioparks.ca only)
host access	reservations.ontarioparks.ca (booking API) and campclaim.com (WebSocket + status)

What we do NOT do

• We do not store your Ontario Parks credentials. All authenticated Ontario Parks requests originate from your browser.
• We do not sell or transfer your data to third parties.
• We do not use your data for advertising, profiling, or creditworthiness assessments.
• We do not perform cross-site tracking.

Data retention

Account data is retained while your account is active. Watch targets and alert history are retained for the duration of your subscription. You can delete targets at any time from the dashboard. If you cancel your subscription, your data is retained for 30 days in case you re-subscribe, then permanently deleted.

Data security

All data is stored on Cloudflare's edge network (D1 database, KV cache) with encryption at rest. All connections use HTTPS/WSS. Stripe handles payment data under PCI DSS compliance. Session tokens are stored in Cloudflare KV with automatic expiration.

Third-party services

Stripe	Payment processing
Resend	Transactional email delivery
VoIP.ms	SMS alert delivery
PostHog	Anonymous product analytics
Cloudflare	Hosting, database, CDN, WebSocket infrastructure
Google Places	Park photos, nearby places, street view imagery

Your rights

You can request a copy of your data, request deletion, or ask questions about this policy by emailing [email protected].

Changes

We may update this policy as CampClaim evolves. Material changes will be communicated via email to active subscribers.