Skip to content

Privacy policy

Template — please complete and have it reviewed by a lawyer. Last updated: 2026-09-26.

Overview

This privacy policy explains how CampingSpirit ("we") processes personal data when you use our website and web app. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). We collect as little data as possible: no advertising, no tracking cookies, no sale of data.

Controller

The controller is:
Camping Spirit
Kanton Zürich, Schweiz
Email: campingspiritcom@gmail.com
Please send any data protection requests to this address. Where we are required to appoint a representative in the EU (Art. 27 GDPR), their details will be given here.

Hosting and server logs

The app is hosted on Google Cloud Run (Google). When you open a page, your browser automatically transmits technical data such as IP address, date and time, requested page, browser and operating system. This data is needed to deliver the site and protect it against attacks (legal basis: legitimate interest, Art. 6(1)(f) GDPR). Google processes it on our behalf and deletes logs after a short period. If the app shows an error in your browser, a technical error report (error message, page, browser type, language, no IP address or account data from us) is sent to Google Cloud Error Reporting so we can fix it.

Account

If you create an account, we process your email address, a securely hashed password, your display name and settings in order to provide the account (Art. 6(1)(b) GDPR, performance of contract). If you choose "Sign in with Google" (Google Identity Services), Google transmits your name, email address and profile picture to us, and Google receives information about the sign-in. You can use the app without an account; an account is only needed for synchronisation and community features.

Trips, diary and documents

Trips, favourites, your travel diary and documents you add are stored by default only in your browser (see "Storage on your device"). If you sign in and the synchronisation backend is active, this data is also stored in your account with our processor Google (Firebase) so that you can use it on several devices (Art. 6(1)(b) GDPR). Please only upload documents (e.g. insurance or vehicle papers) that you really need on the road.

Bookings and payments

Bookings are currently a demonstration without real payment. Once payments are enabled, we process the data needed for bookings and memberships (name, email, plan, booking details, payment status) (Art. 6(1)(b) and (c) GDPR). Payments will be handled by Stripe; we do not receive your full card details. Bookings with campsites or other providers are passed on to the respective provider, who is responsible for its own processing.

Reports, reviews and photos

If you publish reports, reviews, photos or forum posts, they are visible to other users together with your display name and the date. Photos may contain metadata (e.g. GPS location); we remove such metadata where technically possible, but please check your photos before uploading. Legal basis: performance of contract and our legitimate interest in a reliable community (Art. 6(1)(b) and (f) GDPR).

Location

Your location is only determined when you actively request it (e.g. in the sleep finder) and your browser asks for permission. It is used on your device to show nearby places and is not stored on our servers (Art. 6(1)(a) GDPR, consent). You can revoke the permission in your browser settings at any time.

Analytics

If enabled, we use Plausible Analytics, a cookieless, EU-hosted service of Plausible Insights OÜ, Estonia. It produces aggregated statistics (e.g. page views, referrer, country, device type) without cookies and without user profiles; IP addresses are not stored. Legal basis: our legitimate interest in improving the service (Art. 6(1)(f) GDPR) or, where required by law, your consent.

Google Analytics

With your consent we use Google Analytics 4, a service of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how the site is used (pages viewed, approximate location, device and browser, how you arrived). Google Analytics sets cookies (_ga, _ga_*, stored for up to 2 years). Google Analytics 4 does not log or store IP addresses for users in the EU. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US and Swiss-US Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR; Swiss FADP). Without your consent the script is not loaded. You can withdraw consent at any time under «Privacy settings». Retention: 14 months.

Maps, weather, routing and fonts

To display maps, weather and routes, your browser connects directly to third-party servers, which thereby receive your IP address and the requested map area or coordinates: Google Maps (map display, Maps JavaScript API), Open-Meteo for weather forecasts, Google Routes API (route calculation, called through our server), and Google Fonts (Google) for typefaces. No account data is transmitted. Google’s privacy policy applies to these services. Legal basis: legitimate interest in a functioning app (Art. 6(1)(f) GDPR).

Legal bases

For persons in the EU/EEA we rely on: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c)), legitimate interests (Art. 6(1)(f)) and consent (Art. 6(1)(a)). Under the FADP we process data in accordance with its principles and obtain consent where required. We do not make automated individual decisions or carry out profiling.

Recipients and transfers abroad

We use the following service providers, who process data only on our instructions:
• Google Cloud / Firebase (Google Ireland Ltd, Ireland; Google LLC, USA) — hosting (Cloud Run), accounts (Firebase Authentication), database (Cloud Firestore, data stored in Zurich, Switzerland), server functions (only when the backend is active).
• Google (Google LLC, USA / Google Ireland Ltd, Ireland) — Google sign-in (optional), Google Fonts.
• Stripe Payments Europe Ltd (Ireland) together with Stripe, Inc. (USA) — payments (once enabled).
• Plausible Insights OÜ (Estonia, EU) — cookieless analytics (optional).
• Open-Meteo (Europe) — weather; routing and map tile providers — see above.
Switzerland and the EU recognise each other as providing adequate data protection. For transfers to the USA or other countries without adequate protection we rely, where applicable, on the Swiss-US or EU-US Data Privacy Framework (if the recipient is certified) or on the European Commission's Standard Contractual Clauses as recognised by the FDPIC. We disclose data to authorities only where we are legally obliged to do so.

Storage on your device

The app uses localStorage, IndexedDB and a service worker cache in your browser to save settings, trips, diary entries, documents and offline copies of pages and map data. This data stays on your device and is not transmitted to us unless you use synchronisation. You can delete it at any time in the app or via your browser settings. Details are given in our cookie notice.

Retention

We keep personal data only as long as needed for the stated purposes: account data until you delete your account; server logs for a few days to a few weeks; published content until you delete it or your account (backup copies are overwritten after a short time); booking and payment records as long as commercial and tax law requires (in Switzerland generally 10 years). Data in your browser remains until you delete it.

Your rights

Subject to the applicable law, you have the right to access your personal data, to have it rectified or erased, to restrict its processing, to data portability and to object to processing based on legitimate interests. You may withdraw consent at any time with effect for the future. To exercise your rights, email campingspiritcom@gmail.com; we may ask you to verify your identity. You may also lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch), in the EU the authority in your country of residence or place of work.

Security

We take appropriate technical and organisational measures to protect your data, including encrypted transmission (HTTPS), hashed passwords, access restrictions and row-level access control in the database. No transmission over the internet is completely secure; please use a strong, unique password.

Children

CampingSpirit is not directed at children. Accounts may only be created by persons aged 16 or over, or with the consent of a parent or guardian. If we learn that we hold data of a child without such consent, we will delete it.

Changes

We may update this privacy policy when our services or the law change. The version published in the app applies; the date of the last update is shown at the top.