Privacy & your data

Publisher: gympilotsystems. Contact: team@gympilotsystem.com. Updated October 26, 2026.

Accounts and submissions

Accounts store your username, display name, chosen town, private recovery email, password hash, sessions, hidden authors and posts, and community interactions. Your public username, display name, town, approved posts, photos, likes counts and replies can be viewed by visitors. Your password and recovery email are not public.

Listing submissions store the content, source links, and contact name, email and optional phone number for owner review. Private review contact details stay private. The separate public contact field on an approved job or rental is shown to visitors when you choose to provide it. Jobs and rentals expire on their end date. Saved searches and in-app match notices are stored on your device. The owner can review pending posts, photos, reports and submissions. Listing-correction reports privately store the selected listing and your correction text, without requiring an account or collecting your contact details. Reviewed reports expire from active storage after 90 days when the queue is next updated; open reports await review.

Pet reports include the approximate area and the public contact details you explicitly choose to share. Reports and photos appear after owner review. Marking a pet reunited hides its contact details; the details remain in your private report so you can reopen it. Deleting the pet post clears those contact details, and deleting your account removes its posts and uploaded photos.

Location and browser storage

Near Me requests your permission and keeps coordinates in the current browser tab to estimate distance. Coordinates are not sent to our server. Maps display trail pins; external map providers and directions services receive normal connection information when you use them.

A session cookie keeps you signed in for up to seven days. Saved deals, followed businesses, saved events and app display preferences use local browser storage separately for each edition. Following and saving do not turn on notifications. The app shell and directory can be cached for offline use. Private API responses and community photos are not stored in the service worker cache. Owner access is stored only for the current browser session.

Optional visit counts

The Arrowhead edition counts visits and page views separately from Big Bear. Your browser creates a random identifier that changes each Pacific day. Our server keeps a protected daily digest and app-section counts for up to 35 days. A separate daily counter measures returning browsers and clicks on original deal links. These counters do not store account identities, names, email addresses, IP addresses, precise locations, search text or full URL queries. Counts estimate browsers, not individual people. Signed-in owner browsing is excluded.

Visit counting respects Do Not Track and Global Privacy Control. The choice below applies to both Mountain Locals editions in this browser. Turning it off clears both daily identifiers. Active statistics are kept for 35 days; private backups follow the retention below. Earlier dates before tracking began are unavailable.

Checking this browser’s visit-counting preference…

Optional app-install counts

When a browser reports that installation completed, or the app first opens in standalone mode, we count a detected installation separately for each edition. This can include an app installed before measurement began. Install-button clicks and accepted prompts alone are not counted as completed installs. We create a separate random installation identifier in this browser only after one of these signals, so repeat app opens do not add installations. The server stores a protected digest of this identifier with its first-detected date and observed install signals, separate from accounts, to prevent duplicates for the life of the measurement record. Daily aggregate counts are retained for historical reporting. Install counts estimate browser installations, not verified people; different devices, cleared storage or browsers with separate storage can increase the estimate. Earlier downloads cannot be reconstructed.

This measurement respects the visit-counting choice above, Do Not Track and Global Privacy Control, and excludes signed-in owner sessions. Turning off counting clears the installation identifiers for both editions in this browser and prevents future signals while disabled. Existing anonymous server digests and aggregate counts remain until the publisher clears the measurement record; they contain no name, email, IP address or account identifier. Private backups follow the retention described below.

Service providers

When deployed, Render hosts the app and stores its private data. Resend delivers verification and password reset emails and receives your recovery email and the message. Official weather, map tiles and linked business, newspaper and event websites operate under their own policies. Server and hosting logs may contain IP addresses, request paths and connection metadata. Reset tokens use URL fragments to avoid sending them in request paths.

Your choices and retention

You can browse without an account, decline location access, hide posts or authors, report content, download account data or delete your account. Account deletion removes your posts, uploaded photos, replies, likes and active sessions. Approved business and event listings may remain after personal contact details are removed.

Local data backups retain seven snapshots and expire as new backups replace them. Hosting disk snapshots have their own retention. Offline copies on other devices may remain until they reconnect or clear site data. Contact support for a data request or a photo removal request.

We do not add advertising tracking or sell your account data. Paid advertising, when active, is labeled. Changes to these practices will be reflected here.