Privacy Policy

We use your information to:

• Create and manage your account
• Send you a verification email when you register
• Display your profile and activity on the Platform
• Process membership payments through our payment provider (see Section 4)
• Send community news and updates if you opted in (you can unsubscribe anytime)
• Understand how features are used so we can improve the Platform
• Investigate abuse or security incidents

We use our own internal analytics to understand how the Platform is used. We do not use Google Analytics or any other third-party analytics service. All usage data stays in our own database and is never sent to outside parties.

What we track:

• File downloads and bookmark activity
• Job listing views
• File ratings
• General account activity (logins, profile updates, map changes)

This data is tied to your account and is used solely to operate the Platform, enforce usage limits for certain membership tiers, and help us understand which features are most valuable to the community. It is never shared with anyone outside of WorkCampConnect.

We use Square to process membership payments. When you subscribe to a paid plan, Square collects your payment card information directly — we never see, handle, or store your full card number, CVV, or billing details.

Square receives only the information necessary to complete your transaction (name, email, and payment details). If you request a refund, we share your transaction details with Square to process the return to your original payment method. Their handling of your data is governed by Square's Privacy Policy.

Your personal information belongs to you. We will never:

• Sell, rent, trade, or share your personal information with any third party
• Share your email address with advertisers or marketers
• Store your payment card details on our servers
• Use third-party analytics or tracking services
• Allow third-party advertising on the Platform

The only exception is where we are required to comply with applicable law or a valid legal process (such as a court order or subpoena).

We use a small number of cookies — all strictly functional — to operate the Platform. We do not use any advertising, analytics, or third-party tracking cookies.

• wcc_session — keeps you logged in to the main site (secure, HTTP-only, up to 30 days)
• xf_user — keeps you logged in to the community forum (secure, HTTP-only, up to 365 days)
• xf_session — forum session management (secure, HTTP-only, up to 4 hours)
• xf_csrf — protects forum forms against cross-site request forgery (session-only)

Cloudflare Turnstile (used on our registration form to prevent bots) may set its own cookies per Cloudflare's Privacy Policy.

Pinning your location on the Member Map is entirely voluntary. You can update or remove your location at any time from your dashboard. Location data is only used to display your approximate position to other members on the map.

Members on the Base Camp free plan may place a pin at state level precision only. Members on the Full Hookup paid plan may choose city, state, or exact precision and may set their pin to private. Private pins are visible only to the member who placed them and are not displayed to other members on the map. All pins have an expiry period after which they are automatically removed from the map.

We retain your account data for as long as your account is active. If you cancel your paid subscription, your subscription history and billing records are retained for legal and accounting purposes even after your account reverts to the free plan. If you delete your account, your profile and personal information will be removed within 30 days. Forum posts may be anonymized rather than deleted to preserve community discussions.

You have the right to access, correct, or request deletion of your personal data. To exercise these rights, contact our support team.

We use industry-standard security practices including bcrypt password hashing, HTTPS encryption, CSRF protection, and secure session cookies. No system is perfectly secure — please use a strong, unique password for your account.

Personal records data entered into the Resources section is encrypted at rest using AES-256-CBC encryption — the same standard used by banks, financial institutions, and government agencies worldwide. Encryption keys are never stored in the database. WorkCampConnect staff cannot read, view, decrypt, or access any personal records data you store in the Resources section. Additionally all user actions within the Resources section are logged for security purposes. This activity log is accessible only to you via your Security Settings page and to WorkCampConnect administrators for security investigation purposes only.

Members may optionally enable Two Factor Authentication for their account via the Resources section Security Settings. When 2FA is enabled a verification code will be sent to your registered email address each time you log in. Verification codes expire after 10 minutes. You may disable 2FA at any time from your Security Settings.

WorkCampConnect is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has registered, please contact us and we will remove the account.

We may update this Privacy Policy from time to time. We'll note the updated date at the top of this page. Continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

Privacy questions or concerns? Contact our support team.