Privacy Policy

Effective March 11, 2026 · Last updated October 17, 2026

What changed in this update: We rewrote this policy so that it describes what ParkSwiz actually does today. The previous version left out or misstated several things:

Our website uses Google Analytics and the Meta Pixel, loaded through Google Tag Manager, and they set their own cookies. The previous version said we used Vercel Analytics, no Google Analytics, no tracking pixels and no advertising cookies. That was wrong.
When you sign up on our website, our server sends Meta your email address in hashed form, with your IP address and browser details, to measure our advertising.
The policy now covers location, notifications, trip details, the one-hour hold of messages you send Ask Swiz before signing in, the record we keep when you accept our Terms, our emails, referral invites, map tiles and affiliate links.
Stripe does not send us your card’s last four digits or billing postal code, as the previous version said. Section 1 lists what we do keep.
The OpenAI answer check announced on September 28, 2026 is switched off. Section 3 describes how it works if it runs again.
The previous version said you could manage your accessibility profile in your account settings; no such setting exists, so you email us instead. When you delete your account, we now keep our record that you accepted the Terms, with your account ID removed.

ParkSwiz LLC (“ParkSwiz,” “we,” “us,” or “our”) operates the ParkSwiz platform at parkswiz.com and the ParkSwiz iOS app. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Account Information

When you create an account we collect your email address, display name, and an optional username. If you sign up through a third-party provider (Google, Apple) we receive the profile information you authorize that provider to share. We do not receive or store your third-party account password.

When you accept our Terms of Service, we keep a record of the versions of the Terms and of this policy you accepted, with your account ID, email address, the time, your IP address, and your browser or device details (user agent).

Profile & Preferences

You may optionally provide additional profile information such as your home park preference, avatar, and trip planning preferences. All of these are voluntary.

Trip Details & Plans

When you use the trip planner or build a day plan, we store what you tell us and the plans we build for you. This can include your travel dates, the parks you plan to visit, the number of adults and seniors in your group and the ages of any children, where you are staying, your budget level, dietary needs and food allergies, how you plan to get around, whether you are a Florida resident, favorite characters, notes you add, and your progress through a park day (for example the rides you mark done and how long you waited). Your past trips are kept with your account.

Accessibility & Accommodation Preferences

ParkSwiz can keep an optional accessibility profile with your account, holding functional accommodation preferences such as whether you use a mobility device, have sensory sensitivities, or are interested in services like Disney’s Disability Access Service (DAS).

This data is not medical data. We do not collect medical diagnoses, treatment information, health insurance details, or any information that constitutes protected health information (PHI) under HIPAA. We collect only broad, self-reported accommodation categories (e.g., “mobility,” “sensory processing”) and functional needs (e.g., “I use a wheelchair”). This information is treated as standard personal data under applicable privacy laws.

Your accessibility profile is stored with your account. To see, correct or delete it, email privacy@parkswiz.com; deleting your account deletes it too. Accessibility options you pick for a trip in the trip planner are stored with that trip, separately from the profile, so deleting the profile does not remove them.

Chat & Community Content

When you use Ask Swiz (your park concierge) while signed in, we store your conversation history to provide context across sessions, along with any rating you give an answer. When you clearly state a preference in a conversation, such as a favorite franchise or a kind of ride, Swiz may save it to your trip profile as an interest tag, which shapes later suggestions. When you contribute wiki articles, comments, Q&A answers, or trip reports, that content is stored and may be displayed publicly with your username.

On our Ask Swiz pages you can ask questions before you sign in. Those messages and Swiz’s replies are held in temporary storage, under a random session ID kept in a cookie, until one hour after your last message, so that the conversation can move into your account if you sign up. If you do not sign up, they expire.

Location

If you allow it, ParkSwiz uses your device’s precise location on the website and in the iOS app: to tell which park and area you are in, to show where you are on the park map, and to work out walking times from where you are standing. When you are inside a park and you mark a ride done, skip or undo a step, or rebuild your day plan, your current coordinates are sent to our servers with that request. We use them to answer that request and do not store or log them. Only the result is kept, such as the walking time at the start of your updated plan.

In the iOS app, if you allow location access “Always,” the app also watches, even when it is closed, for when you come near rides in your plan, and shows you an alert. That check runs on your phone and does not send your location to us. You can turn location access off at any time in your browser or device settings.

Notifications

If you turn on notifications in your web browser, we store the push subscription your browser gives us (a delivery address and encryption keys) with your account, and use it to send you a reminder the evening before a planned park day. Your browser’s maker (for example Apple, Google, or Mozilla) delivers these messages through its push service. The iOS app’s ride alerts are created on your phone; the app does not currently register your device to receive push messages from our servers.

Usage, Analytics & Advertising Data

We collect standard server logs including IP address, browser type, pages visited, and timestamps. To protect the service from abuse, we also count requests by IP address in short-lived rate-limit records.

On our website, though not inside the iOS app, we use Google Tag Manager to load two third-party tools: Google Analytics and the Meta Pixel (from the company behind Facebook and Instagram). They receive the pages you visit, the link or ad that brought you, your device and browser details, your IP address, cookie identifiers, and some actions you take on our campaign pages, such as starting a chat, reaching a step of the short trip quiz, or signing up. We use this to understand how the site is used and to measure and improve our advertising.

When you create an account through our website’s sign-in pages, or start signing up (by email or with Google) on one of our campaign pages, our server also sends Meta a record of that event through Meta’s Conversions API. The record contains your email address, if we have it, in hashed form (converted with SHA-256 into a code that cannot be read back, though Meta can match it to an email address it already holds), your IP address, your browser details (user agent), the Meta cookie identifiers described in Section 8, and the address of the page. We use it to see which ads lead to sign-ups.

We do not send Google or Meta your Ask Swiz messages, your saved trip plans, or your accessibility preferences.

Payment Information

Payments made on parkswiz.com are processed by Stripe. You enter your card details on Stripe’s checkout page; we never see, store, or have access to your card number or other card details. We give Stripe your email address and account ID so the payment is linked to your account. Stripe tells us when a payment, renewal, cancellation, or failed payment happens, and we keep your Stripe customer ID, your plan and when it expires, and a record of each of those events (plan, amount, currency, and Stripe’s reference numbers). Stripe’s privacy policy governs their handling of your payment data.

Purchases made inside the ParkSwiz iOS app are processed by Apple as In-App Purchases. We never receive your payment details for these transactions. We use RevenueCat to verify the purchase with Apple and to tell our servers which plan you are entitled to; the data involved is an anonymous purchase identifier, your ParkSwiz account ID, and the product purchased. Apple’s and RevenueCat’s privacy policies govern their handling of that data.

Emails & Messages You Send Us

We email you about your account (for example a welcome email and sign-in links) and about your trip: a series of emails timed to your sign-up and trip dates, from a few days after you join until after your trip, some of which mention our paid plans, plus an email the day before a planned park day when your plan for that day is ready. The trip email series includes an unsubscribe link. Links in our emails carry campaign tags that our analytics records when you follow them to our website. We do not track whether you open our emails.

When you contact support, we keep your name, email address, and message. If you join a waitlist we keep your email address. Partner inquiries reach us by email. If you invite a friend, we send one email to the address you enter; we do not save that address in our database, though it is held for 24 hours in a rate-limit record so the same person is not emailed repeatedly.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the ParkSwiz platform
Personalize your experience, including Ask Swiz answers and trip plans tailored to your trip details and accessibility preferences
Work out walking routes and timings from your location when you ask us to
Process transactions and send related notices
Respond to support requests and communicate about your account and your trip
Calculate Stardust reputation scores based on community contributions
Enforce our Terms of Service, keep a record of your agreement to them, and protect against misuse
Understand how the website is used and measure and improve our advertising, using the tools described in Section 1
Generate aggregated, de-identified analytics to improve content quality

3. How We Share Your Information

We are not paid for your personal information, and we do not rent it out. We share data in these circumstances:

Service providers: Supabase (database hosting and sign-in), Vercel (application hosting), Stripe (web payments), Apple and RevenueCat (iOS in-app purchases), Resend (email), Upstash (temporary storage for rate limits, messages sent to Ask Swiz before sign-in, and answer-check records), Anthropic (AI processing), OpenAI (search embeddings and answer-quality checks), and MapTiler (park map images, which your browser or the app loads directly from MapTiler, so MapTiler sees your IP address and the map area you view). Each provider processes data solely on our behalf under their respective privacy policies.
Push services: If you turn on browser notifications, your browser’s push service (for example Apple, Google, or Mozilla) carries each notification to your device.
Advertising and analytics partners: Google and Meta receive the information about visits to our website described in Section 1, and Meta also receives the sign-up records described there. Unlike our service providers, they handle it under their own terms and privacy policies, not only on our behalf.
AI processing: When you use Ask Swiz, your message and relevant context (including your trip details, such as dates, group and children’s ages, dietary needs and where you are staying, and your accessibility preferences if you’ve set them) are sent to Anthropic’s API to generate a response. The trip planner sends your trip details to Anthropic in the same way to build your plan. Anthropic does not use this data to train models. OpenAI creates search embeddings from text such as your message.
Answer checks: We have tested having OpenAI check the accuracy and quality of Swiz’s answers. That check is switched off today. If it runs, it covers a limited number of answers: OpenAI receives Swiz’s answer together with the knowledge-base excerpts Swiz drew on, with OpenAI’s option to store the request turned off. An answer can include details from your question and conversation, your trip (including dietary needs) and your accessibility preferences. Our record of each check keeps IDs and results, never the text, and is deleted 90 days after the most recent check. OpenAI handles that data under its own data-usage and retention policies.
Shared plans: If you create a share link for a day plan, anyone with the link can view that plan until the link expires at the end of the plan’s day.
Public content: Wiki articles, comments, Q&A answers, and your username/Stardust tier are visible to other users.
Links to other sites: Some product links on our gear pages are Amazon affiliate links. If you follow one, Amazon receives the visit from your browser, with our affiliate tag, and handles it under its own privacy notice.
Legal requirements: We may disclose information if required by law, subpoena, or legal process, or to protect the rights, property, or safety of ParkSwiz or others.

Your accessibility preferences are never shared with advertisers, marketing platforms, or any third party beyond the AI processing described above.

4. Data Security

We implement reasonable security measures including encryption in transit (TLS) and at rest, row-level security (RLS) on all database tables restricting each user to their own data, rate limiting on all public endpoints, and regular security reviews. No system is perfectly secure, and we cannot guarantee absolute security.

5. Data Retention & Deletion

We retain your account data for as long as your account is active. You can delete your account at any time from your profile settings. Upon deletion:

Your personal information (email, name, preferences) is permanently removed, except in the records listed below
Your accessibility profile is immediately deleted
Your trip details, plans, past trips, and share links are deleted
Community content you authored (wiki articles, comments) is anonymized but preserved to maintain platform integrity
Conversation history is permanently deleted
Stardust balance and reputation data is deleted
Your notification subscriptions and email history are deleted
We ask Stripe to cancel any web subscription and to delete your customer record

Some records are not removed by account deletion:

Our records of web payment events (plan, amount, currency, dates, and Stripe’s reference numbers, and sometimes the email address used at checkout) are kept with your account ID removed, as evidence of payments.
Our record that you accepted the Terms and this policy (your email address, the date and time, the versions, and the IP address and browser used) is kept with your account ID removed.
A waitlist sign-up, or a support request you sent while signed out, may not be linked to your account, so it can keep your email address until you ask us to delete it.
Deleting your ParkSwiz account does not contact Apple or RevenueCat about in-app purchases, and does not remove ParkSwiz from your Apple Account’s Sign in with Apple settings; you can do that in your Apple Account settings.
Stripe keeps its own record of past charges.
Information already sent to Google or Meta, or held by our other providers, is kept under their own retention policies.
Deleted data can remain in our database provider’s backups until those backups expire.

Messages sent to Ask Swiz before you sign in expire one hour after the last message unless you sign up. Answer-check records are deleted 90 days after the most recent check.

6. Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Correct inaccurate information
Delete your data (“right to be forgotten”)
Ask for a copy of your data in a portable format (by email; there is no download option on the site)
Opt out of the sale or sharing of personal information (see below)
Withdraw consent for optional data collection (like accessibility preferences, location, and notifications)

Our website does not currently offer a setting that turns off Google Analytics or the Meta tools, and ParkSwiz’s own code does not read Global Privacy Control or Do Not Track signals. Google’s tag applies its own rules to Global Privacy Control in some regions. You can limit these tools by blocking or deleting cookies in your browser, and by using Google’s and Meta’s own privacy and ad settings.

California Residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, use, and disclose, to ask us to correct or delete it, and to opt out of its sale or sharing. We are not paid for personal information. Our website does disclose information to Meta and Google to measure advertising, as described in Sections 1 and 3, and California law treats that as “sharing.” We cannot currently switch that sharing off for one person; the ways to limit it are the browser and Google and Meta settings described above. To ask what we hold about you, or to have it corrected or deleted, email us at privacy@parkswiz.com.

EU/EEA/UK Residents (GDPR)

If you are located in the EU, EEA, or UK, our legal basis for processing your data is your consent (for optional features like the accessibility profile) and legitimate interest (for providing the core service). You may withdraw consent at any time without affecting the lawfulness of prior processing. Our website loads Google Analytics and the Meta Pixel without first asking for your consent. To exercise your rights, email us at privacy@parkswiz.com.

7. Children’s Privacy

ParkSwiz is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly. Parents and guardians planning a trip may enter details about the children in their group, such as their ages and dietary needs; that information comes from the adult account holder.

8. Cookies & Local Storage

We, and the tools we use, store cookies and local storage on your device. There is no cookie banner or cookie settings page, so these are set without asking first, when you load a page or use a feature that needs them:

Sign-in and security: cookies that keep you signed in, plus short-lived cookies (lasting from minutes to a few hours) that return you to the right page after signing in or resetting your password and protect our Ask Swiz pages from abuse.
Preferences and features: your chosen park (kept for a year, in a cookie and in local storage), the session ID for an Ask Swiz conversation before you sign in (one hour), a marker that tells our site it is running inside the iOS app, and, in local storage, a copy of your current day plan and plan drafts, alert state, and other settings, so the planner and ride alerts can work from your device.
Sign-up hand-off and campaign attribution: if you start signing up from one of our campaign pages, cookies lasting ten minutes carry, depending on the page, your answers to its short trip quiz into your new account, or the campaign and the tracking details in the link that brought you, such as utm tags and Facebook, Google, or TikTok click IDs. A cookie lasting two minutes links a new account to the Meta sign-up record described in Section 1.
Analytics and advertising (website only): cookies set by Google Analytics and by Meta (including _fbp and _fbc). They identify your browser across visits and let Google and Meta connect your visit to their ads.

You can block or delete cookies in your browser settings. Blocking sign-in cookies will stop you from staying signed in; ParkSwiz works without the analytics and advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the platform before the changes take effect. Your continued use after changes constitutes acceptance.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: privacy@parkswiz.com

ParkSwiz LLC
Email: privacy@parkswiz.com

ParkSwiz LLC is not affiliated with The Walt Disney Company, NBCUniversal, Merlin Entertainments, or SeaWorld Entertainment. All park names, attraction names, and related trademarks are property of their respective owners.