Privacy
Privacy information
How this self-hosted CampKit installation handles account, trip, attendee, packing and audit information.
Who is responsible for the data? the person or organisation operating this installation controls this installation and decides who can access it and how long information is retained. The CampKit software does not send your trip data to a central CampKit service.
Information the application can store
- Account information: display name, username, role, account status, password hash, account creation time and last-login time.
- Trip information: trip names, dates, locations, lifecycle status and departure tasks.
- Attendee and packing information: attendee names, inventory items, quantities, categories, storage and packed locations, notes, priorities and packing status.
- Audit information: who performed an action, what changed, the affected trip or item, and the date and time of the action.
- Technical information: the web server or hosting provider may independently retain ordinary access, error, security or backup logs according to its own configuration.
CampKit does not require sensitive personal information. If users choose to record medication, accessibility needs or other sensitive details in item names or notes, the operator should restrict access and retain only what is genuinely necessary.
Why information is used
The application uses the information above to authenticate users, plan camping trips, assign and track packing, maintain departure checklists, provide account permissions and maintain an accountable audit history.
CampKit does not include advertising, behavioural profiling or marketing analytics in this release.
Passwords and security
Passwords are stored as one-way password hashes rather than readable passwords. CampKit also uses authenticated sessions, role checks and CSRF protection for state-changing forms. The security of the underlying server, database, backups, TLS certificate and hosting account remains the responsibility of the installation operator.
Sharing and transfers
The application itself does not transmit inventory or account data to a CampKit cloud service. Data may still be processed by the hosting, backup, email, monitoring or infrastructure providers selected by the operator. The operator is responsible for assessing those services and any international transfers they involve.
Retention and deletion
Trips may be completed or archived and the audit trail is intentionally append-only. CampKit does not impose an automatic retention period in this release. The operator should define an appropriate retention policy and remove accounts or information when it is no longer required, subject to any legitimate need to preserve an audit history.
Your privacy questions and rights
For questions about access, correction, deletion, restriction, objection or another privacy request relating to this installation, contact the administrator of this CampKit installation. The exact legal rights and lawful basis depend on who operates the installation and the jurisdiction in which it is used.