Recreation.gov collects purchases, financial info, contact info, and shares some of this with third parties.