Who is behind Parkspan
Parkspan is an Android park-planning application and website operated by Deloran LLC. DELORAN at deloran.us is the company's official business website. For privacy questions or requests concerning information you have sent to the developer, contact martin@deloran.us. This page is Parkspan's primary privacy policy.
The Android app does not require an account and includes no advertising or analytics SDK. Personal records are stored on your device. This website provides product information, guides and support; it does not connect to your app's private storage.
Information in the Android app
Saved places, visits, dates, collections, trips, private notes, visit assumptions, selected access points, preferences and pass metadata remain in app-private storage. Optional eligibility answers include residence, vehicle-registration state, party size, children in the party, age eligibility, military or veteran status, Access eligibility and whether a fourth grader is present. These answers may reveal personal or sensitive circumstances and help evaluate documented pass benefits and costs locally. They are not official credential checks.
Private front and back pass images are encrypted using a device-held Android Keystore key. Images are decoded and re-encoded on import and may contain names, pass identifiers or other details printed on a card. You choose an image through Android's document picker or capture one using an external camera application. The app does not automatically upload pass pictures or send them to an OCR or validation service. This image encryption is separate from the ordinary app-private storage used for other records.
Approximate or precise location is optional and used in the foreground to show your position and estimated accuracy on Explore, trip and offline maps, follow your movement when requested, or calculate approximate distances. The app does not store a location history or request background-location permission. Location access stops when the relevant screen is no longer active in the foreground. Displaying a map around your position can reveal that area through map-resource requests. Notifications are optional local expiration reminders. You can change permissions through Android settings.
Internet, network/Wi-Fi status and Android background-work permissions support downloads and scheduled work. The app does not request contacts, microphone or broad photo-library access. Camera capture is handled by the selected camera application.
Maps, photographs and public updates
Maps are rendered with MapLibre Android SDK using OpenFreeMap resources, with OpenStreetMap and OpenMapTiles attribution. Online maps and offline map downloads make network requests to OpenFreeMap and its delivery infrastructure, including your IP address and the requested map resources. Those requests can indicate the area being viewed or downloaded. Parkspan does not send your wallet images, saved-place collection, eligibility answers or trip notes to the map provider.
Park photographs may load directly from the source hosts shown with them, including park agencies and Wikimedia. These hosts receive your IP address and requested image URL, which may identify the park viewed. Some photographs can be prefetched while a park gallery is open on an unmetered connection. Coil and OkHttp load remote images. Small public previews and some historical aerial overviews are bundled and do not require a request; viewed full-size photos have a separate bounded cache.
If you configure an HTTPS public-data publisher, it receives your IP address, requested package URL, app-version request header and cache-validation information when you check for updates. The app does not send that publisher your wallet, trips, eligibility answers or searches. Daily unmetered checks are optional. The current app has no publisher preconfigured; signed-file import also works without hosting.
OpenFreeMap describes ordinary logs without stored IP addresses, error logs that may include IP addresses and requested URLs and are deleted after seven days, possible temporary IP logging during security incidents for up to 30 days, and CDN processing in its policy. Each provider controls its own infrastructure practices. Opening an official website or a directions app also involves that destination service; directions can include destination coordinates.
Analytics, advertising and services
Parkspan does not use Google Analytics, Firebase Analytics, Firebase Crashlytics, Sentry product crash reporting, advertising SDKs, tracking pixels, payment SDKs or a third-party user-account backend. It does not sell personal data or use it for advertising.
MapLibre, Coil and OkHttp support the resource requests described above. AndroidX/Jetpack Compose, Room, WorkManager, Kotlin coroutines and serialization support the interface, local storage and app operations. Map, image, update and user-selected sharing services receive the information described in this policy; local storage does not mean that no network requests occur.
How this relates to Google Play Data safety
Google Play uses collection to include data transmitted off your device to the developer or to another provider. Its Data safety declaration for Parkspan therefore includes map-resource requests that may reveal approximate or precise location, app interactions such as requested map areas or park photographs, and network identifiers such as IP addresses used for delivery and security. Routine online resource requests occur without an app account; location access itself is optional. Provider logs mean these requests are not described as always ephemeral or anonymous.
Email addresses and messages you voluntarily send to support, plus shared diagnostic event codes, technical details and your issue description, are optional support data. Using a report to diagnose a bug falls under Google Play's Analytics purpose; Parkspan still has no automatic analytics or crash-reporting SDK. User-directed sharing and qualifying service-provider transfers have separate treatment under Google's definitions. The policy describes these transfers even where a Data safety sharing exemption applies.
These disclosures do not mean that private pass photographs, eligibility answers, saved places or trip notes are automatically uploaded. They remain local unless you deliberately export or share them. The full backup is password-encrypted; the separate places-only JSON export is not. Google Play's declarations are disclosures, not an independent security certification or a promise of approval.
Backups and files you choose to share
A places-only export contains saved/visited information and preferences, including saved visit assumptions, and excludes trips, wallet metadata and pass images. This JSON file is unencrypted and contains personal travel choices; it is not the password-encrypted full-backup format.
The separate full-backup option includes places, visits, trips, preferences, wallet metadata and private image sides in a password-encrypted file. You choose where to save it. Your selected document provider may sync the encrypted file to cloud storage. Parkspan cannot recover a lost password.
Automatic Android cloud backup is disabled by the app, and its data-extraction rules exclude app data from configured system device transfers. Device manufacturers may offer other transfer mechanisms. Files you save elsewhere, original photos in your photo library and already shared messages are outside Parkspan's local deletion controls.
Diagnostics and support
Diagnostic reports are generated locally and remain local until you explicitly save or share them. They contain app/API versions, device model and processor architecture, permission states, a coarse free-storage category and allowlisted event codes. They exclude pass images, credentials, searches, coordinates and your place collection.
An optional issue description is included exactly as entered. Review it and avoid private information. Opening Android's share menu does not send a report automatically. Email, Telegram or another chosen sharing service handles the file under its own policies.
If you contact Deloran LLC, we receive your email address, message and any attachments you choose to send. We use that information to respond, investigate reported problems and follow up on your request. Email services process the correspondence to deliver and store it. Privacy and support contact: martin@deloran.us. No automatic report-collection service is operated by Parkspan. Do not send secrets or unnecessary personal information.
We retain company and support correspondence for up to 12 months after the last correspondence, then delete company-controlled copies, unless a longer period is required by law. You can request earlier deletion at martin@deloran.us. We handle deletion requests within 30 days; if legally required retention prevents deletion, we explain the applicable limitation. Deletion from our correspondence does not remove copies you or other recipients keep. Email providers may retain separate operational or backup copies under their own retention rules.
Limited diagnostic event codes and timestamps, including a code for an uncaught error, are recorded locally. There is no automatic crash-report upload. Automatically generated report fields exclude the private information listed above, but anything you type into an issue description may contain personal information.
This website
The site is hosted on Vercel. Your browser makes requests for pages, images, locally hosted fonts and the Yosemite background film when played. The homepage starts the film muted automatically without playback controls. The film also autoplays when reduced motion is enabled; scrolling effects respect that preference. Download badges are local images. Choosing Download APK requests the installation file from this website, hosted on Vercel. The Google Play badge image is served locally. An unavailable store action does not contact Google Play; an active store link opens Google Play under its own policies. Hosting and delivery infrastructure process technical information such as your IP address, requested URL, browser information and request timing to deliver and protect the website.
We do not add advertising pixels, visitor-analytics tools, session replay, Vercel Web Analytics or Speed Insights. The website does not request your location, provide accounts, collect newsletter signups or accept file uploads. There are no third-party map or video embeds. The background film is served with the site's own media.
Site code does not set tracking cookies or persistent personal identifiers. Interactive state, such as media playback, is held in page memory. Hosting security systems may process request information independently of this code. Vercel's infrastructure retention and processing depend on its services and applicable agreements; this policy does not promise that all infrastructure logs are absent or deleted on a single fixed schedule.
Following an external link, opening your email app or sending support email brings the relevant service into use. Future tutorial providers or analytics, if introduced, will be described here before they are enabled.
Legal bases and international processing
Deloran LLC is based in California, United States. Where EU or UK data-protection law applies, we rely on contractual necessity to provide app functions you request, consent for optional location access, and legitimate interests to deliver and secure the website, investigate voluntarily submitted bug reports and answer support inquiries. These interests do not include advertising profiles or sale of personal data. A legal obligation is relied on only where a specific obligation requires processing or retention.
Our support mailbox is hosted by Zoho Mail in the United States. Zoho processes your email address, messages and submitted attachments under our accepted Data Processing Addendum. Vercel provides website hosting and delivery infrastructure. Information can therefore be processed outside your country. Vercel's DPA includes EU Standard Contractual Clauses and the UK transfer addendum; the Zoho DPA governs correspondence processing and applicable contractual transfer safeguards. Contact martin@deloran.us to ask which safeguards apply to your data or request a copy, subject to protecting confidential material.
OpenFreeMap, its delivery infrastructure, photo-source hosts and services you choose to open have the processing practices described in their linked policies. We do not claim that all of their processing occurs solely on our instructions or that every transfer has the same legal basis. The privacy disclosures apply even when you do not give Android location permission: ordinary online requests still disclose an IP address and requested resources.
You may withdraw optional location access in Android settings without losing access to the park catalog. From Parkspan 1.0.0-rc3, Settings > Location privacy also lets you withdraw the app's location-use choice and clear the current fix. You can turn off local reminders or public-data checks at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. We do not make solely automated decisions with legal or similarly significant effects on you.
Retention and deletion
Local personal records remain until you change/remove them, clear personal data or uninstall. Settings → Manage data → Clear personal data removes app-owned personal records, pass images, trips and notes, visit assumptions, selected access points, downloaded map resources, reminders, logs, temporary exports and cached viewed park photographs.
Clearing personal data turns off automatic content checks, but the configured public publisher URL may remain. The public catalog remains available. If cleanup reports an error, do not assume deletion completed. Uninstalling removes app-private storage; manufacturer transfer or backup behavior may differ.
Diagnostic logs are rotated when a new event is written if the existing log exceeds its size limit or its oldest event is over seven days old. Generated reports include only recent events. Temporary diagnostic ZIP files older than one day are removed when report cleanup runs; these are not guaranteed background deletion deadlines. Clear personal data also removes app-owned diagnostics.
Clearing the app cannot recall sent reports/messages or remove files exported to another provider. Manage those copies at their destination. The website cannot remotely erase data on your phone. For developer-held support correspondence, contact the privacy address and identify the message you mean without sending additional sensitive documents.
Your choices and rights
You can browse without enabling location or reminders, decline optional eligibility answers, disable public-data checks and decide whether to export or share. Review the information before restoring or replacing local data.
Depending on where you live and the circumstances, you may have rights to access, correct, delete, restrict or object to the processing of personal information, request a copy, or complain to a data-protection authority. Contact Deloran LLC at martin@deloran.us about information held in support correspondence or website operations. We cannot retrieve local-only app records that you have not sent.
Parkspan is designed and marketed for adults aged 18 and over. Its content rating describes the material in the app; it does not change this intended audience. It has no age-verification or user-registration system. Family-planning options, such as the number of children in a party or a fourth-grade pass qualification, are optional local entries. Please avoid sending children's personal information in support messages. If you believe such information has been sent, contact us to request review and deletion.
The app uses HTTPS for map, remote-image and configured public-data requests, app-private storage for personal records, Android Keystore encryption for stored pass images and password encryption for full backups. Protect your device and exported files.
Hosting, email and other services may process information in countries different from yours. Applicable service agreements and provider disclosures describe their transfer arrangements. No software or storage method provides an absolute security guarantee; protect your device and exported files.
Changes and contact
This policy describes Parkspan 1.0.0 release candidates, the existing 0.6.1-beta and the Parkspan website, including any direct APK downloads. Version-specific controls are identified above. The production package is separate from the legacy beta. A website policy update does not change an already installed app's behavior. The download page identifies which version is available through each channel.
Privacy and support contact: Deloran LLC, martin@deloran.us. This update replaces the policy dated October 12, 2026, clarifies legal bases, Zoho US correspondence hosting, contractual transfer safeguards and location controls, and retains the existing support retention/deletion process. Older beta builds may display an unmonitored Gmail address; use martin@deloran.us directly.