← Back to home

Privacy Policy

Last updated: July 23, 2026

1. Who we are

ParkCharter (“ParkCharter,” “we,” “us”) is operated by Park Charter LLC, a limited liability company based in the United States. ParkCharter is an AI-powered trip planning service for Walt Disney World and Universal Orlando, available at parkcharter.app. We are not affiliated with The Walt Disney Company or Universal Studios.

Questions about this policy? Email support@parkcharter.app.

2. Information we collect

Account information. When you sign up, we collect your email address and (if you use email signup) a password hash. If you use Google Sign-In, we receive your email and basic profile from Google.

Trip planning inputs. To generate itineraries, we collect information you provide, which may include: travel dates, parks you plan to visit, group size, ages, the names or nicknames of group members (including children), dining preferences, accessibility needs, budget, and hotel or resort choice.

AI chat content.We log messages you send to our AI assistant (“Arrow”) and the responses we return, in order to run the service, enforce rate limits, and improve quality.

Payment information. Payments are processed by Stripe. We do not store your full card number. We receive a transaction record (amount, last 4 digits, status).

Device and usage data. We may record your IP address, browser type, and device type to prevent abuse and enforce free-tier limits. We use PostHog for privacy-preserving product analytics in a cookieless mode — it measures aggregate usage (pages viewed, features used) to help us improve the service, without setting tracking cookies or building a persistent cross-session profile of you.

Cookies and local storage. We use cookies and browser storage for three purposes. First, authentication and session management. These are essential and cannot be switched off. Second, referral and campaign attribution: if you arrive from a link carrying a referral or campaign tag, we store that tag in your browser (local storage, not a cookie) so the right source is credited if you later create an account. It holds nothing else about you, is never sent to a third party, and is discarded automatically after 90 days. Third, advertising measurement: we run the Meta (Facebook) advertising pixel, which sets its own cookies and reports conversions to Meta so we can measure our ads. Our product analytics (PostHog) stays cookieless and sets no cookies of its own.

If your browser sends a Global Privacy Control signal, the Meta pixel is never loaded and no advertising data is sent for you. See Your Privacy Choices.

3. How we use your information

  • To create and manage your account
  • To generate, display, and update your personalized itinerary
  • To process payments and deliver paid features
  • To send transactional email (verification, receipts)
  • To send a short series of planning emails about a trip you have saved with us. Every one of them carries an unsubscribe link, and unsubscribing stops them without affecting your account, your saved plans, or essential account email
  • To prevent fraud, abuse, and enforce free-tier usage limits
  • To debug, monitor, and improve the service
  • To comply with legal obligations

We do not sell your personal information, and we do not use your trip data to train third-party AI models.

4. Service providers

We share limited information with the following processors, strictly to operate the service:

  • Supabase — authentication and database hosting
  • Vercel — web hosting and edge functions
  • Anthropic — AI model inference (Claude API). Chat messages and itinerary inputs are sent to Anthropic to generate responses. Anthropic does not use API inputs to train its models by default.
  • Stripe — payment processing
  • Resend — transactional email delivery
  • Sentry — error monitoring and debugging (may capture session context when errors occur)
  • PostHog — privacy-preserving product analytics (cookieless; aggregate usage only, no tracking cookies)
  • Google — OAuth sign-in (only if you choose this option)
  • Themeparks.wiki — live wait time data (we send park/ride IDs only, no personal data)
  • Firecrawl — retrieval of public theme-park news and schedules (park content only; no personal data is sent)
  • Meta Platforms — advertising measurement. When you visit the site the Meta pixel may record that visit and key actions (signing up, viewing the upgrade screen, starting checkout, purchasing). When you purchase, our server also sends Meta a purchase record that includes your email address in an irreversible hashed form so the sale can be matched to an ad. Not loaded, and nothing sent, for visitors whose browser asserts Global Privacy Control.

Our product analytics (PostHog) runs in a cookieless mode that sets no non-essential cookies and builds no persistent cross-session profile. The Meta advertising pixel is separate and does set cookies. It is not loaded, and no advertising data is sent, when your browser asserts Global Privacy Control.

5. Children's privacy

ParkCharter is intended for adults planning family trips. We do not knowingly collect personal information directly from children under 13. If you include a child's name or age in your trip profile, you represent that you are their parent or guardian and consent on their behalf. Contact us to remove any such data.

About ride-height fields.Heights of group members are stored as numeric values (inches) on your trip profile. We use them only to filter rides for height requirements; we do not knowingly create profiles of children based on the heights alone. A height value in your group profile, by itself, is not a child's personal information under the U.S. Children's Online Privacy Protection Act (COPPA) — it is height data you (the parent or guardian) provided about your own trip group. If a name or age is also provided for the same person, the COPPA consent representation in the paragraph above applies.

6. Data retention

We keep account, trip, and chat data while your account is active. You can delete your account and all associated data yourself at any time in Settings → Delete my account, and download a copy of your data from the same screen — no email required. You can also request deletion by emailing support@parkcharter.app. We may retain limited records (e.g., payment receipts) as required by law.

7. Your rights

Depending on where you live (including California and the EU/UK), you may have the right to access, correct, export, or delete your personal information, and to opt out of certain uses. To exercise any of these rights, email support@parkcharter.app. We will respond within 30 days.

8. Security

We use HTTPS, row-level security on our database, server-side-only API keys, and rate limiting. No system is perfectly secure; please use a strong, unique password.

9. International users

ParkCharter is operated from the United States. If you use the service from outside the U.S., your information will be processed in the U.S. and other countries where our providers operate.

10. Changes to this policy

We may update this policy. Material changes will be announced by email or in-product notice. The “Last updated” date at the top always reflects the current version.

11. Contact

ParkCharter · Park Charter LLC
Email: support@parkcharter.app