Overview
This Privacy Policy explains how Camp Trask ("Camp Trask," "we," "us," or "our"), operated under the oversight of Greater LA Scouting, handles information in connection with the Camp Trask website and related services (the "Service"). The Service is designed to minimize personal data collection and avoid analytics or advertising trackers.
Quick Summary (What We Don’t Do)
- No third-party analytics and no ad tracking.
- No sale or "sharing" of personal information for cross-context behavioral advertising.
- No use of photos to train AI models and no facial recognition.
Notice at Collection (California)
Depending on how you use the Service, we may collect the following categories of information:
- Identifiers: email address (newsletter or contact form), Clerk user ID (authentication).
- Internet/technical data: IP address, user-agent, timestamps, URLs, and error details in security/operational logs.
- User content: photos and submission details (album name, file type/size, timestamps).
- Inferences/Sensitive PI: none.
Sources: you (when submitting photos, contacting us, or subscribing), your device/browser (technical logs), and our service providers (to operate authentication, storage, email, and hosting).
Business purposes: provide authentication; accept, review, and display photos; communicate about submissions; operate the optional newsletter; secure and maintain the Service; comply with law.
Retention: Photos are retained while published in albums or as needed for camp operations and removed promptly upon valid request. Submission/contact records are retained up to 12 months after resolution. Security/operational logs are retained up to 90 days unless needed for security or legal reasons. Newsletter records are retained until you unsubscribe, and we keep a limited suppression list to honor opt-outs.
Selling/Sharing (CPRA definitions): We do not sell personal information and do not share it for cross-context behavioral advertising.
Information We Handle
1) Authentication (Clerk)
We use Clerk to provide secure sign-in/sign-up and session security. Clerk processes account information (e.g., your email) to authenticate you. Camp Trask does not store passwords. We may store your Clerk user ID and minimal account metadata necessary to link uploads to your account. Your use of Clerk is subject to Clerk's terms and privacy policy.
2) Photo Submissions
- Photos and related submission details (album, timestamps, file type/size) to power albums and admin review.
- Optional submitter contact information (name and email), so admins can follow up about approvals or issues.
- Upload logs may include IP address and user-agent to prevent abuse and troubleshoot errors.
Note: Image files may include embedded metadata (e.g., EXIF/GPS). We do not use this metadata for tracking. We may strip or ignore it during processing, but removal is not guaranteed. You can remove metadata before uploading.
3) Newsletter & Communications (Optional)
If you opt in, we collect your email (and optional name) to send Camp Trask updates. You can unsubscribe anytime via the email footer or by contacting us. We use an email delivery provider to send these messages.
4) Cookies and Local Storage
We use essential cookies/local storage strictly for authentication and security (e.g., to keep you signed in via Clerk). We do not use analytics or advertising cookies.
How We Use Information
- Authenticate users and maintain sessions.
- Accept, review, and display photos in camp program albums, including selected prior-years photos uploaded by staff.
- Communicate with submitters about moderation decisions and respond to removal/takedown requests.
- Operate the optional newsletter if you subscribe.
- Secure, operate, debug, and improve the Service; prevent fraud and abuse.
- Comply with legal obligations and enforce our Terms.
Our Service Providers
We rely on a small set of providers that process data on our behalf and under their own security/privacy practices:
- Clerk (authentication)
- Convex (database)
- Cloudflare R2 (object storage for photos)
- Hosting/CDN (to serve the site)
- Email delivery provider (contact replies and newsletters)
We do not permit providers to use your information for their own marketing.
Data Sharing & Legal Disclosures
- Shared only with the providers above and authorized Camp Trask / Greater LA Scouting staff or volunteers who need access.
- We do not sell personal data or share data with advertisers.
- We may disclose information if required by law or to protect safety, security, rights, or property.
Children and Families
- No accounts are permitted for anyone under 16.
- The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
- If a photo on our site includes a minor and you would like it removed, email legal@camptrask.com with the link and details; we will act promptly.
Your Choices and Rights
- Account: Access/update your account via Clerk; use Clerk’s tools to delete your account. Deleting your account does not automatically remove previously published photos—please submit a photo takedown request if needed.
- Photos: Remove your own uploads where the UI allows, or request removal at legal@camptrask.com. Families may request removal of prior-years photos.
- Newsletter: Unsubscribe via the email footer or by contacting us; we maintain a suppression list to honor opt-outs.
California Privacy Rights (CCPA/CPRA)
If and to the extent California law applies, California residents may request to know/access, correct, or delete personal information and to receive information about our data practices. We do not sell or share personal information. We do not use or disclose sensitive personal information for purposes requiring a right to limit.
How to submit a request: email legal@camptrask.com with the subject line "California Privacy Request", describe your request, and provide information we reasonably need to verify your identity (we may ask you to confirm control of the relevant email). You may use an authorized agent with proof of authorization; we may still require you to verify your identity directly. We will not discriminate against you for exercising your rights.
Even if certain state privacy laws do not apply to us (e.g., nonprofit exemptions), we will honor reasonable access, deletion, and correction requests as described.
Retention
We delete or de-identify data once no longer necessary, unless a longer period is required for security, legal, or operational reasons (for example, to investigate abuse). See the retention details in the Notice at Collection above.
Security
We use reasonable technical and organizational measures to protect information, including encryption in transit and encryption at rest provided by our vendors (e.g., Clerk, Convex, Cloudflare R2, hosting/CDN). No system is perfectly secure, and we cannot guarantee absolute security. If we learn of a data security incident affecting your information, we will notify you as required by California law.
Do Not Track
Browsers may offer a "Do Not Track" signal; our Service does not respond to DNT because we do not engage in behavioral tracking or advertising. We only use essential cookies for authentication and security.
International Users
The Service is operated in the United States. If you access it from elsewhere, you understand your information may be processed in the United States consistent with this Policy.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version here and update the effective date above. Your continued use of the Service after changes become effective means you acknowledge the updated Policy.
Contact
Questions or privacy requests? Use our Contact page or email legal@camptrask.com.