Privacy policy

Data we collect

• Account data. When you create an account we store your email address and authentication details through our auth provider, plus a display name and any profile details you add, including an optional profile photo or banner. User-selected profile images are sanitized and held for automated or manual moderation before publication.
• Content you create. Your collection, park history, trip plans (itineraries, flights, dining), blog comments, game progress, achievements, and other entries you save in the app. ParkBound pass purchase details, visit notes, discount logs, and collected magnets are saved to your ParkBound account and cached on your device for offline use. Race and reminder entries and dietary restrictions or allergy selections remain on your device unless you choose to share an export. Android cloud backup and device transfer are disabled for this app data.
• Subscription status. If you subscribe to ParkBound+, the purchase is processed by the app store you subscribe on. We use RevenueCat to manage subscription status and receive transaction identifiers, never your full payment details.
• Push tokens. If you turn on notifications in the mobile app, we store a device push token to deliver them. Turning notifications off in your device settings stops delivery.
• Usage and interaction data. ParkBound records aggregate blog view counts and, for signed-in users, an account-linked record of which ParkBound app and platform was used, first and last use, and an open count. That limited presence record supports cross-app operations and aggregate adoption reporting, is visible only to authorized staff, and is deleted after 180 days without another use or when the account is deleted. ParkBound Collections sends its presence and other optional account-linked product analytics only when you opt in; withdrawing that choice deletes the optional analytics history. If you accept website analytics, we also collect masked page views, clicks, pointer movement, and scroll depth to build aggregate interaction heatmaps. We disable session recordings and mask page text, inputs, and element attributes. Ad partners may separately process ad impressions and interactions as described below.
• Device and log data. Standard technical data your device sends when you use the service, such as IP address, browser type, and error logs, used for security and reliability.
• Service-region check. Our hosting provider derives a coarse country code from the request IP address. We use that request-time result to decide whether new account registration or web checkout is available. ParkBound does not request precise location for this check or add the country result to your account.
• Age answer.The age range you pick on this website is saved in a first-party cookie on your browser for one year. We use it to decide whether sign-in, account creation, the Android beta list, and ads are available. We don't add it to your account or share it with vendors.
• Android beta list.If you join the ParkBound Story Android beta list, we store your email address, the page you signed up from, the referring page, your browser's user agent, and a one-way hash of your IP address. We use them only to email you when a beta spot is available and to prevent abuse. The list isn't used for marketing.
• Giveaway data. When you enter a ParkBound giveaway, we store the email address needed to record the entry, prevent duplicates, conduct the drawing, and contact a potential winner. A standalone web entry does not add you to a marketing list.
• Calendar data.If you choose Add to Calendar, ParkBound uses the calendar permission on that device to create or update the trip events you confirm. Android reads the available calendar list to select a writable calendar. iOS reads existing entries in ParkBound's dedicated calendar for the target date range so a later export can update those entries instead of duplicating them. Neither app reads unrelated event contents or sends calendar identifiers or event contents to ParkBound servers. Your selected calendar provider may separately sync the events under its own settings.

How we use it

• Provide, maintain, and sync your account and collection across devices.
• Operate features you use, such as trip planning and comments.
• Understand aggregate usage so we can improve the product.
• Keep the service secure and prevent abuse.
• Communicate with you about your account and important service changes.
• Administer giveaways, enforce entry limits, draw a winner, and deliver the prize.
• Personalize ParkBound Collections recommendations using collection and activity signals.
• Personalize ParkBound Pulse articles using your follows, wishlist, favorites, upcoming trips, and whether an article connects to your collection.

Third parties

We share data only with service providers that help us run ParkBound, under their respective terms:

• Supabase: hosts our database and handles account authentication and storage.
• Vercel Analytics: provides privacy-friendly, cookieless usage analytics only for signed-in accounts that accept analytics.
• Vercel hosting: serves the website and provides the request-time coarse country code used for service availability and abuse prevention.
• PostHog: builds aggregate website interaction heatmaps from masked click, pointer, and scroll data only after a signed-in account accepts analytics. Session recording is disabled.
• RevenueCat: manages ParkBound+ subscription status across platforms. Its web checkout uses a Stripe-backed payment form; ParkBound does not receive your full card number.
• AWS Rekognition: moderates user-selected images for safety.
• Google Gemini: processes images when you initiate an AI scan and, after you explicitly consent, processes your request when you choose trip research or Build My Trip. Before ParkBound sends trip data, it names Google Gemini and lists the fields involved. Those fields can include the trip name, dates, destinations, party size, stays, travel plans, budget, wishlist, saved notes, and the prompt you type. Declining keeps the trip usable without AI, and consent can be withdrawn in settings.
• Google Maps Platform and Google Search: provide place and current travel information used in trip drafts. ParkBound shows supporting sources with the draft when they are available. Google processes information under its Privacy Policy.
• Open-Meteo: provides destination geocoding and forecast data used for weather-aware trip and packing suggestions.
• Stay22: receives the destination, dates, guest and room counts, currency, and filters you submit when you request live accommodation results. ParkBound does not send the trip name, notes, or your account identifier in that search request.
• Apple APNs and StoreKit: deliver notifications and process purchases.
• Google Firebase and Google Play Billing: provide Android push delivery, installations needed for that delivery, and purchase processing. Optional Firebase analytics/crash collection stays off until an eligible user opts in where offered.
• Meta App Events: optional Collections analytics only after an eligible user opts in.
• Google AdSense and Google AdMob: serve ads to free accounts for people 18 or older on editorial blog articles and in our apps (see Advertising below).

We are not affiliated with, endorsed by, or sponsored by The Walt Disney Company or any theme-park operator.

Advertising

• Free accounts for people 18 or older may see Google AdSense ads on individual editorial blog articles after accepting website advertising, and Google AdMob ads in the ParkBound apps. On this website, ads load only after this browser's age answer is 18 or older. Anonymous visitors, teens, Explorer Mode, and ParkBound+ subscribers don't see ads.
• The ParkBound Collections website does not display Google AdSense ads. Account, catalog, search, planning, policy, archive, and marketing pages do not load the AdSense script.
• Where offered, Google’s consent choices determine whether ad personalization is allowed. On iOS, Apple’s App Tracking Transparency choice separately controls whether an app may permit cross-company tracking and access the advertising identifier.
• When the applicable choices permit it, Google may use cookies or device identifiers to select and measure ads under Google’s partner policy. If a choice does not authorize the requested processing, Google may use an eligible limited or non-personalized mode, or the apps make no ad request. Free accounts may still see ads where an eligible mode is available.
• Google’s mobile ads SDK may process device identifiers, ad interactions, diagnostics, IP-derived coarse location, and advertising data. The apps obtain any required regional consent before requesting ads and request Apple tracking permission before cross-company tracking; unresolved consent disables ad requests.

Children’s privacy

ParkBound Story and ParkBound Collections ask how old you are once, before anything goes online. We don't ask for a birth date, and we keep only the age range you pick. In the United States the choices are 12 or younger, 13 to 17, and 18 or older. In Canada and other places where we use 16 as the account age, they're 15 or younger, 16 to 17, and 18 or older.

• The youngest choice opens Explorer Mode. It works without an account and keeps its data on your device. Explorer Mode sends nothing to us or to anyone else: no account, ads, analytics, notifications, or social features.
• 13 to 17 (16 to 17 where we use 16) gets a full account, but never ads or ad measurement, and no trading. Trading is for 18 and older.
• 18 or older gets the standard experience this policy describes.

ParkBound Travel is a trip planner for a general audience. It doesn't ask your age, except where Apple requires its age-range check, and it doesn't have Pulse comments.

This website asks the same question before you sign in or create an account, and before you join the ParkBound Story Android beta list. If you're signed in and haven't answered on this browser, the cookie banner asks before it offers ads. After the youngest choice, you can't sign in, create an account, or join the list. We keep your answer in a first-party cookie on this browser for one year, so going back can't change it. Ads load only after an answer of 18 or older.

We don't knowingly collect personal information from children under 13, or under 16 where we use 16, and we don't create accounts for them. We never ask a child for more information than an activity needs. We keep no personal information from children: if we find any, we delete it.

For parents and guardians

If you think your child gave us personal information, email support@parkboundapps.com. You can ask to see it, have it deleted, or have us stop collecting it. We'll confirm you're the child's parent or guardian through a separate channel before we act, and we'll delete the information within 30 days of your request.

ParkBound Apps LLC operates ParkBound Story, ParkBound Travel, ParkBound Collections, and this website. Email: support@parkboundapps.com.

Your rights

You can delete your account or create a personal-data export from the app’s settings. Collections exports combine the shared server record with documented device-local preferences and scan drafts; the iOS export also includes pending offline operations. Depending on the law that applies, you may also ask for access, correction, erasure, restriction, portability, or an objection to particular processing. You may withdraw a consent choice at any time without affecting processing that was lawful before withdrawal, and you may complain to your local privacy regulator. To make a request, email support@parkboundapps.com. We may need to verify your identity. Where the GDPR applies, we ordinarily respond within one month, subject to its permitted extensions. Parents and guardians can use the steps in Children’s privacy above. You can accept or decline analytics and ads from the consent banner, and change that choice at any time: Manage privacy preferences. The stored choice identifies the applicable notice and vendor configuration and is cleared when the signed-in account changes.

Grounds for processing

Where applicable law requires a legal basis, we use contract or your requested steps for account and product features; consent for optional analytics, advertising purposes, and other processing that is expressly optional; legitimate interests for proportionate security, fraud prevention, service reliability, and content moderation; and legal obligation where the law requires processing. Public-profile publication is optional and can be reversed in profile settings. We do not use recommendations or automated image moderation to make decisions with legal or similarly significant effects about you.

International processing

ParkBound Apps LLC operates from the United States. Public pages may be viewed elsewhere, but new web accounts and checkout are currently offered only in the United States and Canada. Service providers may process data in the United States and other locations stated in their terms. Before regularly offering accounts in a jurisdiction that requires a transfer safeguard or local representative, we will put the required arrangement in place and identify it in this notice. This policy is not itself a data-transfer mechanism.

Retention and deletion

Account records and private content are retained while your account remains active and are removed through the in-app deletion flow. Public catalog contributions that other collectors rely on may be retained only in de-identified form with account attribution removed. Moderation and security records are retained only while needed to investigate abuse, meet legal obligations, or protect the service. Temporary export files are replaced on the next export and cleared during account sign-out or deletion; the operating system may also clear temporary storage. Standalone giveaway email addresses, names, and recorded IP addresses are deleted automatically within 30 days after an administrator records that all winners are confirmed, unless we must retain a limited record for fraud prevention, tax, legal, or recordkeeping obligations. Account-linked app and platform presence rows are deleted after 180 days without another recorded use. ParkBound Story Android beta list entries are deleted within 30 days after ParkBound Story is released on Google Play, and you can ask us to remove your email sooner. We keep no personal information from children; if we find any, we delete it within 30 days.

Contact

ParkBound Apps LLC. Questions about privacy? Email support@parkboundapps.com.