What happens to your submission

Information collected

• Your clan name and proposed campground boundary.
• Your contact email and optional contact name.
• An optional public note and your authorization confirmation.
• A confirmation ID and ordinary technical request data needed to deliver and protect the service.

What stays private

Contact names, email addresses, raw submissions, and review notes are not returned by the public submission API or included in the public map data. They are used to review the submission and resolve questions about it.

Anonymous usage measurements

The map counts page views, clan searches, and completed submissions in daily totals so maintainers can understand whether the service is useful. These totals do not use cookies, advertising identifiers, search text, contact details, or stored visitor profiles. Browser performance measurements may also be collected through Vercel Speed Insights. The map respects a browser's Do Not Track setting for its own usage counts.

Private camp groups and location sharing

Camp groups are optional and invite-only. Your phone's location is used only after you tap Share. Sharing lasts for a full weekend (72 hours from when you start), and ends sooner if you tap Stop or the group expires. The blue "my location" dot stays on your device and is never uploaded.

• Your display name, group title, shared location, pins, and messages are encrypted on your phone before upload. The key is kept on your phone and in the invite link and is never sent to the map server. This protection relies on the map's own code, which the site operator serves.
• The server stores membership and timing metadata needed to operate the group, including group/member IDs, roles, token and invite hashes, sharing state, timestamps, and expiry. It also receives ordinary technical request data.
• Only your last position is kept, never a trail. It is marked as last seen after 2 minutes and stops showing 30 minutes after your last update, or sooner when the server receives Stop or sharing expires. If you stop while offline, your last position may remain visible to the group for up to 30 minutes after its last update. Expired data is deleted automatically, normally within about 15 minutes. Encrypted copies may remain in the database provider's short-term backups.
• Anyone holding the invite link can join and read the group, so share it only with your camp. Removing someone stops their server access and replaces the invite. The group's encryption key is not automatically rotated: removal cannot erase information already seen, and the retained key could decrypt future ciphertext if that ciphertext were separately exposed.
• Group chat messages and meetup pins are encrypted the same way. Messages are deleted after 24 hours, pins when they expire, and either can be deleted sooner by the person who posted it or by the group leader.
• Groups expire after ten days unless the leader explicitly renews them for ten days from the renewal date. Leaders must transfer leadership or end the group before leaving or switching. Ending removes the group and its records from the active database; provider backups may retain encrypted copies temporarily. Your saved session belongs to this browser and origin: transfer leadership before changing phones or clearing storage.
• Keep this page open for live updates. Location and chat updates pause when the page is hidden or your phone locks. There are no push notifications. This is not an emergency-location service. A new device initially receives only the latest 50 chat messages.

Saved offline on your device

The offline pack saves public maps and directories in this browser. Clan submissions and problem reports can also be saved as local drafts, including the contact details you enter. Drafts are not sent automatically: reconnect, review and explicitly submit them. Use Clear draft on a shared device. A draft is removed after confirmed submission; browser storage may be cleared or become unavailable, so it is not a guaranteed backup.

Previously viewed public price observations may be saved with their download time and shown as old information, not live prices. The app also saves an encrypted private group snapshot using your existing group key: roster, unexpired meetup pins and recent acknowledged chat, not other people's live coordinates. It is marked stale until a new sync and cleared when you leave, end the group, or the app learns your access has ended. While offline, the app cannot learn that another person removed your membership; clear this browser's site data if you need to remove all local copies immediately.

Abuse prevention

Submission attempts are rate-limited using a short-lived one-way technical key. The raw network address is not stored in the rate-limit table, and expired keys are removed automatically as new attempts arrive.

Community food prices

Price reports are public: the menu item, vendor and booth, amount, date observed, whether it was a menu price or amount paid, and any size or option you enter. No account, name, contact details, or location sharing is required. Enter only information about the price and portion. These are guest reports, not prices verified by TRF; prices and options can change. A new report adds an observation rather than changing TRF's published menu. Maintainers can hide inaccurate or abusive reports.

What may become public

Only after review, the map may show the clan name, an approved approximate boundary, and the optional public note. A submission does not create a reservation or establish a right to a campsite.

Corrections and removal

Use the private report form to request a correction or removal. Include the clan name and your submission confirmation ID if you have it. Reports and optional follow-up email addresses are available only to map maintainers and are never published on the map.