Privacy Policy — Eagle Mountain Parks

This Privacy Policy explains how Jessie Southworth, an individual operating the Eagle Mountain Parks mobile application and website (together, the “Service”), collects, uses, and discloses information about people who use the Service.

Important: Eagle Mountain Parks is not affiliated with, endorsed by, or operated by Eagle Mountain City or any other government entity. It is a community-sourced reporting tool operated independently by a single individual.

1. Information we collect

We collect only the information needed to make the Service work:

Account information. Your email address (used for sign-in and account recovery), a randomly assigned user ID, and an optional display name. Passwords are never stored — only secure hashes, managed by our authentication provider.
Reports you submit. Title, description, category, location, and any photos you choose to attach. Approved reports become publicly visible (see “Public information” below).
Comments you write. Visible to other users on the relevant report.
Precise location. Only when you grant location permission. Used to (a) center the map on your area and (b) tag the location of a report when you submit one. We collect location only when the App is open in the foreground; we do not track location in the background.
Photos. Optional. When you attach a photo to a report, the photo is uploaded to our backend storage. EXIF metadata (which can include GPS coordinates and device information) is stripped from photos before upload.
Age attestation. A timestamp recording that you confirmed, at signup, that you are at least 13 years old (see “Children’s privacy” below).
Subscription preferences. The parks you’ve chosen to follow, so we can deliver updates about them.
Contact-form submissions. When you contact us through the website’s contact form, we receive the name, email address, subject, and message you provide.
Server logs. Standard request logs (IP address, timestamp, user-agent) on requests to our backend, retained for security and abuse prevention.

We do not collect: contacts, your device’s advertising identifier, your browsing history outside the Service, biometric data, financial information, or precise background location.

We do not use third-party analytics, advertising SDKs, or tracking tools. Your activity in the Service is not shared with advertisers and is not used to build cross-app or cross-site profiles of you.

2. How we use your information

To authenticate you and let you sign in.
To attribute reports and comments to you so other users can see who contributed.
To display approved reports on the public map.
To moderate reports, respond to flags, and communicate with you about your submissions.
To deliver updates about parks you follow.
To respond to messages you send through the contact form.
To detect and prevent abuse, spam, and security incidents.

3. Public information

Reports you submit that are approved by moderators become publicly visible to all users. This includes the report’s title, description, category, location, attached photos, and your display name. Photos attached to reports are stored in a publicly readable bucket — anyone who has the photo’s URL can view it.

Do not include personal information you don’t want to be public — avoid your home address, license plates, identifiable faces, or sensitive details when writing reports or attaching photos.

When you delete your account (see “Your rights” below), your approved reports remain on the public map but are anonymized — your display name is removed.

4. Service providers

We share data with the following service providers, only to the extent necessary to operate the Service:

Supabase Inc. Our backend provider. Hosts the App’s authentication service, database, file storage, and serverless functions, in the United States. Subject to Supabase’s own privacy practices.
Mapbox, Inc. Provides the map tiles displayed in the App. When the App fetches tiles, your device’s IP address is visible to Mapbox. Mapbox does not receive your account information, reports, or comments.
Render Services, Inc. Hosts this website. Receives standard request metadata (IP, user-agent) for the duration of each request.
Cloudflare, Inc. (Turnstile). When you submit the contact form, Cloudflare provides a privacy-respecting CAPTCHA challenge to block automated submissions. Cloudflare does not use Turnstile to build cross-site behavioral profiles. Your IP address is visible to Cloudflare for the duration of the challenge.
Resend, Inc. Delivers contact-form messages from this website to the operator’s email inbox. Resend receives the email address, subject, and message you submit through the form.
Apple Inc. and Google LLC. Distribute the App through the App Store and Google Play. Subject to their own privacy practices for the platform-level services they provide.

We do not sell your personal information to anyone. We do not share it with advertisers.

We may disclose information when required by law (subpoena, court order, or other valid legal process), or to protect the rights, safety, or property of users, operators, or the public.

5. Retention

Active accounts. Held for as long as you have an account.
Approved reports. Retained indefinitely as part of the public map, but anonymized (your display name removed) when you delete your account.
Pending or rejected reports, comments, follows, votes, and adoption claims. Deleted when you delete your account.
Contact-form submissions. Retained in the operator’s email inbox for as long as needed to respond and as required by law.
Server logs. Retained for up to 90 days.

6. Your rights

You can:

Access your data: sign in to see your profile, reports, and activity.
Edit your display name and report content (until moderation).
Delete your account and most of your data: in the App, go to Profile → Delete account, or contact us at jessie@soudub.com. The deletion is end-to-end and removes your authentication record, profile, pending reports, comments, follows, votes, and adoption claims. Your approved reports remain on the public map but are anonymized.
Contact us with privacy questions or requests at jessie@soudub.com or via the website contact form.

If you reside in California (CCPA) or another U.S. state with similar privacy rights, those rights are honored through the same mechanisms above. We do not sell your information.

7. Children’s privacy

Eagle Mountain Parks is not directed to children under 13, and we do not knowingly collect personal information from children under 13. During signup, all users must confirm that they are at least 13 years old.

If you believe a child under 13 has created an account, please contact us at jessie@soudub.com and we will delete the account and associated data promptly.

8. Security

We use industry-standard encryption for data in transit (TLS) and data at rest (managed by our backend provider). Passwords are stored as secure hashes, not in plain text. Access to user data is restricted to operators and moderators only when necessary to provide support or moderation.

No system is perfectly secure. If we become aware of a security breach affecting your data, we will notify you in accordance with applicable law.

9. International users

The Service is operated from the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent changes. Material changes will be communicated through an in-app notice prior to taking effect.

11. Contact

Questions about this Privacy Policy or your data:

Jessie Southworth (individual operator) Utah, USA Email: jessie@soudub.com