Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and a password (stored as a one-way hash). When you use Plan My Backpack, we store the content you create — backpacks, gear items, images, and related data.

We automatically collect basic usage data such as IP address, browser type, and pages visited. We use Google Analytics and PostHog to understand aggregate traffic patterns and how visitors interact with the site. PostHog also captures anonymized session recordings to help us improve usability; all form inputs are masked so we never record what you type.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve Plan My Backpack
• Authenticate your account and keep it secure
• Send transactional emails (password resets, verification)
• Send marketing emails if you have opted in (you can unsubscribe at any time)
• Analyze aggregate usage to improve the product

3. Public Content

Backpacks you create on Plan My Backpack are publicly viewable. This includes the backpack name, description, items, weights, images, and tags. Your email address is never displayed publicly.

4. Image Uploads

Images you upload are stored on our cloud infrastructure and processed through automated content moderation (AWS Rekognition) to detect inappropriate content. Images are publicly accessible as part of your backpack and gear listings.

5. Cookies & Tracking

We use essential cookies to keep you signed in and maintain your session. We use analytics cookies and similar local-storage identifiers from Google Analytics and PostHog to understand how visitors use the site, including anonymized session recordings with form inputs masked. When you click an outbound retailer link, we set a first-party cookie (named pmb_aid) that contains a random identifier and no personal information, used only to attribute which page the click came from. You can disable analytics cookies through your browser settings.

6. Third-Party Services

We share data with the following third-party services:

• Vercel — hosting and image storage
• Google Analytics — aggregate site analytics
• PostHog — product analytics and anonymized session recording
• AWS Rekognition — image content moderation

We do not sell your personal information to third parties.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. Anonymized, aggregate data may be retained indefinitely.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your account and personal data
• Withdraw consent for marketing communications at any time
• Export your data in a portable format

To exercise any of these rights, contact us at support@planmybackpack.com.

9. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords (bcrypt), and secure session management. No system is 100% secure, and we cannot guarantee absolute security of your data.

10. Children's Privacy

Plan My Backpack is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at support@planmybackpack.com.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice on the site or sending an email. Continued use of Plan My Backpack after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this privacy policy, contact us at support@planmybackpack.com.