Privacy Policy

The short version

RecSpots is a free community project that shows open-play schedules for San Diego recreation centers. You can browse everything without an account, and we collect as little as possible: no analytics, no ad trackers, and no cookies for visitors.

What we collect

• Browsing the site: nothing is collected by us. Like any website, our hosting provider (Vercel) keeps standard short-lived server logs that include IP addresses.
• “Add a Center” form: the center details you submit plus your name and email so we can follow up. Submissions are visible only to the site operator and are automatically deleted from the active database after 12 months. Encrypted backup copies may retain a submission for up to 90 additional days before the operator's backup-retention rule deletes them.
• Staff accounts: recreation-center schedule managers sign in with an email and password. Passwords are stored only as secure hashes by our authentication provider (Supabase). Staff schedule changes are logged for accountability.

Third-party services

The site runs on Vercel (hosting) and Supabase (database and sign-in). Pages load fonts from Google Fonts, center pages embed a Google Map, and the map page loads tiles from OpenFreeMap — your browser contacts those services directly, which shares your IP address with them the same way visiting any page using them would. When staff upload a schedule PDF, its contents are processed by OpenAI to read the schedule; the file itself is not stored by RecSpots. Resend delivers nightly encrypted database backups to the operator, and the operator may create encrypted manual exports before system changes. Those copies can include contact-form and staff-account data, but their decryption key is stored separately. Encrypted copies are deleted after 90 days unless a documented incident or legal requirement requires temporary preservation.

What we don’t do

• No advertising, no selling data, and no sharing data for advertising.
• No analytics or tracking scripts.
• No accounts, profiles, or data collection for public visitors, including minors.

Your choices

To correct or delete anything you submitted, or to ask any question about this policy, email shriyansdharajula@gmail.com.