CaminoFinder
Privacy
CaminoFinder is a route map and planning site for the Camino de Santiago. This page describes the personal information the application handles. It is not a regulatory certification.
Account and sign-in
Sign-in uses an email link. CaminoFinder does not use passwords. The address is stored with the account so CaminoFinder can send that link and recognize the account later. Public route pages do not show the address, and the account settings page does not display it either. The link expires after 10 minutes and works once. The sign-in token is stored in hashed form. Sign-in messages are sent through Resend.
Session
After you open the link, the browser keeps an httpOnly session cookie. In production that cookie is secure and uses SameSite=lax. The server stores the session expiry, the IP address, and the browser user agent for that session. A session can last up to 30 days. Signing out ends it. Requests to send a link are limited with a short-lived hash of the email and IP address. Those limit records are removed after the 15-minute window.
My Camino
My Camino is a private notebook tied to the account. It can store the route you choose, walking days and their order, dates, titles, notes you type, saved public places, and stays you enter yourself, including a label, a link, and a considering or booked mark. The notebook is not published. Search engines are asked not to index it, and robots.txt disallows those paths.
Condition reports
If you file a current-condition report, other people can read the category, the note, and an approximate location while the report is active. The account email is not included. A new report is set to expire after 72 hours. You can resolve your own report sooner. Deleting the account removes the reports tied to it.
Language
The site stores a cookie named NEXT_LOCALE so it can remember English or Spanish. The page address also shows the language. This is a functional preference, not an advertising profile.
Services that handle information
The website is hosted on Vercel. Account, notebook, and report records are stored in the application database on Supabase. Sign-in email is sent through Resend. Interactive maps load a style and tiles from MapTiler in your browser, so MapTiler receives the ordinary request your browser makes for the map. CaminoFinder does not send your account email to MapTiler. Production pages do not call the weather evaluation service.
What stays private
Your email, My Camino trips, walking days, saved places, stays, and notes are not published as your account. CaminoFinder does not sell personal information and does not run advertising or product-analytics tracking in this application. Public route, place, and lodging pages use published source datasets. Those records are not your account. A condition report's category, note, and approximate location can be read without signing in while that report is active.
How long information is kept
The session cookie can last up to 30 days. A sign-in link lasts 10 minutes. A deletion confirmation link also lasts 10 minutes, works once, and is stored only as a hash. Sign-in limit records last about 15 minutes. A condition report is set to expire after 72 hours unless you resolve it or delete the account first. Deleting the account removes the user, the sessions, the My Camino trips with their days, saved places, stays, and notes, and the condition reports for that account from the application database at that time. Copies can remain in database backups, in Resend's record of sign-in and deletion messages, and in hosting logs for as long as those systems keep them. CaminoFinder does not publish a separate retention period for those copies.
Your choices
You can read the public route pages without an account. You can sign out, switch language, and delete the account from Account settings. Deletion sends a fresh link to the account email, then asks for a final confirmation while you are signed in on that device. Opening the link does not delete the account. Deletion is permanent for that account. Signing in again with the same email starts a new empty account. Published CaminoFinder pages are not changed when an account is deleted.
Security
Session cookies are httpOnly, and sign-in tokens are hashed. Those measures reduce some risks. They do not make the service immune to mistakes, outages, or unauthorized access.
Changes to this page
This page describes the application as it works now. If that behavior changes, this page will be updated.
Contact
CaminoFinder does not publish a postal address or a dedicated privacy email on this site. After you sign in, you can delete the account from Account settings.