vacamp Full mapShow page
Show the map ↓

Vacamp Privacy Policy

Last updated: 4 October 2026

Vacamp is built to collect as little as possible. You never need an account — signing in is optional, and everything works without it. There is no advertising, no analytics SDKs, and no data is sold or shared with third parties for marketing.

This policy covers the iPhone and iPad app, the web map at vacamp.app/map, and this website. Where they differ, it says so.

Who is responsible

The controller for the purposes of the GDPR is Marius Liebmann, Allermöher Deich 88, 21037 Hamburg, Germany — reachable at support@vacamp.app. The full details are in the legal notice.

What the app and the web map send to our servers

  • Map viewport and search criteria. When you move the map, the app asks our server which campsites in the visible area have availability for your dates, party size, and accommodation type. The visible map area is a rectangle you chose by panning — it may or may not relate to where you are.
  • An anonymous install identifier. A random ID created on first launch, used to rate-limit requests and keep the service reliable. Unless you choose to sign in (below), it is not linked to your name, email, or any account, and it is never used for tracking across apps or websites. The web map creates its own ID and keeps it in your browser's storage for this site.
  • Your network address, when a new install is created. To stop anyone creating installs in bulk, the server counts new installs per network for a day. It stores a one-way hash of your IP address (for IPv6, of its /64 network) keyed with a secret that changes whenever the server restarts, never the address itself, and deletes it after 24 hours.

If you sign in

Signing in is optional. It keeps your tokens and stay watches with you on every device you sign in on, instead of with one install. On the web map you can sign in with Google.

  • What we keep. Your Google account's ID (a number Google uses to tell accounts apart), and the name, email address and profile picture Google shares with sign-in. We keep the email only if Google says it is verified. We also record which of your installs are signed in, and when your account was created and last signed in to.
  • What it is used for. Signing you in, keeping your tokens and watches together across your devices, showing you which devices are signed in, and answering you if you contact support. Nothing else — no marketing, no profiling.
  • What Google sees. Google's sign-in script is loaded only when you open the sign-in panel, never on an ordinary visit. Once loaded, Google sees your IP address and that you are signing in to Vacamp, under Google's privacy policy. We receive a signed statement of who you are, never your Google password, and we never access your Google account.
  • Signing out and deleting. Signing out unlinks that device. Deleting your account (in the sign-in panel) removes the account, its linked Google ID, its watches and its token history at once; your devices carry on as anonymous installs.

The legal basis is performing the service you asked for by signing in (Art. 6(1)(b) GDPR).

Usage statistics

To know whether Vacamp is used and what for, our server counts, per day, how many installs made a request, how many were new, and how many availability checks, campsite pages, stay watches and map requests there were, split between the app and the web map. For this website it counts views per page and, when your browser says where you came from, the name of that site (for example google.com) — never the full address, and never which campsite a shared link was for.

These are counted on our server from requests it answers anyway. Nothing extra runs in the app or in your browser, nothing is stored on your device for it, and nothing is sent to anyone else. What is kept are totals per day, which say nothing about any one person. The only thing recorded against an install is the date it was last counted, so it is counted once a day; each day overwrites the last.

What stays on your device

  • Your location. If you grant location permission, it is used to centre the map and compute driving times. It is never sent to our servers. The permission is optional. On the web map, your browser asks when you press the locate button, and the location is used only in the page to centre the map.
  • Favourites and settings. Stored locally on your device only, signed in or not. The web map keeps your last search and map position in your browser.

What third parties see

Availability and prices come from the booking systems of the campsites shown. Those requests are made by our servers, not by your device, so campsite booking systems never see your IP address or identity. Apple Maps provides the map tiles under Apple's privacy policy.

The web map works differently in two ways. Its map tiles come from OpenFreeMap, whose servers see your IP address and which part of the map you are looking at, as any map tile server does. And a campsite's photo, where there is one, is loaded by your browser straight from wherever that campsite publishes it, so that host sees your IP address too, along with what any browser sends with a request.

This website

Every page at vacamp.app shows the live web map beside it, so everything this policy says about the web map applies to the website too — including the map tiles from OpenFreeMap and the anonymous install ID the map keeps in your browser's storage.

Apart from the map, the pages set no cookies, run no analytics scripts and load nothing from anyone else: the fonts and photographs are served from our own server. Like any web server, ours sees your IP address and what your browser sends with each request, and keeps it in the same short-lived request logs described below. Page views are counted on the server as described under Usage statistics. The photographs come from Unsplash, but we copy them to our server rather than loading them from Unsplash, so Unsplash does not see your visit.

Retention

Server request logs (including the anonymous install ID) are kept for a short operational period and then deleted. The daily usage totals contain nothing about individuals and are kept. We keep no profiles of individual users. An account, if you made one, is kept until you delete it.

Your rights

Under the GDPR you can request access to or deletion of data connected to your install ID (Settings shows it in the app) or your account. You can delete an account yourself at any time from the sign-in panel; for anything else, contact us and we will handle it. For the web map, clearing this site's data in your browser removes its ID and your saved search from your device.

Contact

support@vacamp.app

↑ Back to reading