Privacy
We process Telegram ID, chat ID, username and first name (if provided), language, saved routes and filters, alert history, subscription status and payment references, and messages needed to operate the bot. Public search uses your IP address to calculate a keyed hash for daily abuse prevention; the raw IP is not stored in that counter. Search requests and provider results are briefly cached; expired cache rows are removed by scheduled cleanup.
The active service stores account, route, offer and operational run data in Cloudflare D1; its primary database was observed in Cloudflare region EEUR (Eastern Europe). This is a current location observation, not an EU-only residency guarantee: Cloudflare may process requests and logs in other regions. When a provider blocks direct Worker requests, the provider search URL and request data are relayed through our Vercel-hosted proxy at camper-proxy.vercel.app; Telegram account IDs are not included in that proxy request.
Vercel may process request metadata and logs under the project settings, whose retention period has not been verified. The older Google Sheets workflow is not the active storage used by this Worker. Cloudflare operational logs follow the retention period of the account plan (Cloudflare documents up to 7 days).
Search counters are kept by UTC day and older days are removed on the next request. Account-linked data is retained while your account is used and until a verified erasure request is processed. Shared offer archive records are retained for operating the service and are not account profiles.
Operational run history is deleted after 90 days. Inactive offer records are deleted after 365 days; active records remain while needed to monitor availability. Paddle processes payment details as merchant of record; this does not cover CampRadar data processing.
Paddle transaction/customer references stored by us are removed with the account where possible; records required for accounting or legal claims may be retained for the applicable legal period. To request access, correction or erasure, send /delete_data to our Telegram bot from the account concerned. We forward the request to the service operator for identity verification and processing and normally respond within one month; identity checks and legal retention exceptions may apply.
Email notifications and Google sign-in are not part of this release.