| The place you type (for example "Allen TX") | Our server (never in the web address), then OpenStreetMap's Nominatim. Cached 30 days by the text, not by who typed it. | To find the town or park. |
|---|
| "Use my location" | Rounded in your browser to about 1 km, then our server, then OpenStreetMap's Overpass. | To list parks near you. |
|---|
| The map area of your search results | Your browser asks the OpenFreeMap tile server (tiles.openfreemap.org) for the streets of that area, so like any website it sees your IP address. No account, no cookies. OpenFreeMap says its normal access logs keep no IP address and are deleted after 7 days; error logs and logs kept after misuse can hold IP addresses, for up to 30 days. Cloudflare delivers the tiles under its own privacy policy. Details: openfreemap.org/privacy. | To draw the street map behind the park pins. |
|---|
| The park you pick (a public place) | Our server, then OpenStreetMap, iNaturalist and SerpApi (name and map position only). The pass page, and making a pass, send only the park's position, rounded to about 1 km, to Open-Meteo and (US parks) the National Weather Service. | For the park map, sightings, monarch counts and review counts, the weather card and the trip tips. |
|---|
| The age band (for example 6-10) | Our server, then the model on DigitalOcean, in the prompt. | To set how many finds and how easy the words are. |
|---|
| Your IP address | Our server. Our storage (Upstash Redis) keeps only a keyed hash, never the address itself, in rate-limit counters that expire within a day. | To stop abuse and keep the model budget fair. |
|---|
| Every request (IP address, web address, time) | Our hosting provider's request logs (Vercel), kept about 1 hour. They never show what you typed or where you are. | Running the website. |
|---|
| Signing in with GitHub or Google or with "Try as a judge" (grown-ups only) | GitHub or Google send your public profile (account number, name, picture link; for GitHub any public email). We store only a scrambled ID made from the number; the rest is dropped at once, except your first name, which stays in your own encrypted cookie. Sign-in lasts 7 days; the judge demo sign-in stops working after 1 day. | To count your 5 new passes a day, your reports and your ratings. |
|---|
| Your free pass (no sign-in) | One cookie in your own browser, set only when you use a free pass: today's date (Dallas time) and how many free passes you used, signed so it can't be changed. No ID. It expires at midnight Dallas time. Our server keeps no copy. | To count your 1 free new pass a day. |
|---|
| Your pass ratings (1 to 5 stars and tags, no text; signed-in grown-ups) | Our storage: your latest rating per pass and its day, under an ID made for that park only. Deleted after 90 days. Never shown publicly; only the site owner sees the totals. | To learn which passes work for kids. |
|---|
| Your reports (Found it, Didn't find it, Not safe) | Our storage: your latest report per find and its day, under an ID made for that park only. Deleted after 90 days. | To learn what is findable and catch anything unsafe. |
|---|
| The finished pass (park, age band, finds, clues, times) | Saved in our storage (Upstash Redis) for 30 days, so the link and print page work. | Nothing in it is about you or your child. |
|---|