Privacy

Who we are

Timber & Tackle is a product of Wilderness LLC, a California limited liability company, and Wilderness LLC is the controller of the data described below. Write to us at hello@timberandtackle.guide, or at 23 Corporate Plaza Dr. Ste 150-88A, Newport Beach, CA 92660-7908.

What we collect

Operator account details (name, email, phone, business info), the client and booking information Operators enter, and basic usage analytics. Payments are processed by Stripe; we don't store full card numbers.

Session recording and heatmaps (Microsoft Clarity)

On our marketing pages only, Microsoft Clarity records how visitors move through a page (scrolling, clicks, and where people get stuck) and aggregates it into heatmaps. It is deliberately switched off everywhere a guide's business runs: not in the Operator app, not on any guide's own site, not on booking or payment pages, not on gift-card purchases or certificates, not on trip recaps, and not on any page reached from a link that carries a token. Clarity does not load at all for visitors in the European Economic Area, the United Kingdom or Switzerland, or when we can't tell where a visit comes from; that is decided from the country our CDN, Cloudflare, reports for the request. Microsoft keeps Clarity recordings for 30 days. Clarity sets its own cookies; Microsoft explains them, and how it handles the data, in the Microsoft Privacy Statement.

Site analytics (Google Analytics 4)

On timberandtackle.guide's own marketing pages, Google Analytics receives a page view, and Google sets its own cookies there. It never runs in the Operator app, never on a guide's own site (where bookings, payments, gift cards and trip recaps live), and never on a page reached from a link that carries a token. Two moments are sent on their own, with no name, email or account detail: a guide finished claiming their account, and a plan's first invoice was paid (with its amount).

How we use it

To run the booking platform, build and host Operator sites, process subscriptions, and improve the product. We use processors including Stripe (payments), Resend (email), Google (Google Analytics) and Microsoft (Clarity).

Operator client data

Client information belongs to the Operator who entered it. It is scoped per-operator and never shared or sold across Operators. Operators can export all of their data at any time.

Security

Data is isolated per Operator with row-level security. Secret keys are never exposed to the browser.

Your choices

Operators can export or delete their data. Clients can opt out of messages at any time, and opt-out is always honored.

Contact

Ask about your data, or tell us to delete it. A person reads it:

James answers that himself, usually within one business day.