Privacy Policy

1. Who we are

ThrillLedger is a theme-park visit tracking application. For privacy questions or requests, contact us at vacationeerspodcast@gmail.com.

2. Information we collect

We collect information you provide and data generated when you use the Service:

• Account data: email address, password (stored securely by our auth provider; we do not store plain-text passwords), display name, and profile settings.
• Visit and activity data: parks visited, visit dates, ride logs, wait times, ratings, notes, trip plans, event attendance, rankings, badges/pins, and related metadata you enter.
• Family and sharing data: if you use family features, membership relationships, shared visit sessions, and related activity linked to your account.
• Passes and preferences: annual pass details you choose to save, home park, email preferences, subscription/trial status, and Safe Mode settings stored on your profile or device.
• Technical data: session cookies and similar identifiers needed to keep you signed in, plus standard server logs (IP address, browser type, timestamps) from our hosting providers.
• Optional features: if you use wait-sign scanning, images you submit for processing; if you enable monthly recap email, your email address and engagement with those messages (including unsubscribe tokens).

You may sign up with email and password, join via a family invite link, or use an optional invite code when provided. Invite codes are validated server-side; we store usage counts associated with invite codes.

3. How we use information

We use your information to:

• Provide, operate, and improve the Service (logging visits, stats, exports, family features, and TL Passholder features).
• Authenticate you and protect accounts.
• Send transactional messages (for example password reset) through our auth provider.
• Send optional product email (for example monthly recap) when you have not unsubscribed and your plan includes that feature.
• Enforce our Terms of Service and prevent abuse.
• Comply with legal obligations.

We do not sell your personal information.

4. How we share information

We share information only as needed to run the Service:

• Service providers that host infrastructure and process data on our behalf, including Supabase (database and authentication), Netlify (application hosting and server functions), and email delivery providers for recap or transactional mail.
• Family members you explicitly connect with through family features, according to the permissions of those features.
• Legal and safety when required by law or to protect rights, safety, and integrity of the Service.

Providers are permitted to process data only to perform services for us, subject to their own privacy policies and our agreements with them.

5. Local storage and offline use

The Service may store data in your browser (for example visit UI preferences, offline queue entries, or cached park catalogs) to improve performance and support limited offline use. Cached data is tied to your device and is not a substitute for your account data stored on our servers.

6. Retention

We retain account and visit data while your account is active. You may delete your personal visit data from Account → Data without deleting your login. We may retain limited logs and backups for security, fraud prevention, and legal compliance for a reasonable period.

7. Your choices

• Access and export: TL Passholders can download a CSV backup from Account → Data.
• Delete personal data: use Account → Data to purge visits, logs, trips, and related personal records while keeping your account.
• Email: manage recap preferences in Account → Email Preferences, or use the unsubscribe link in any recap email.
• Account closure: contact us at vacationeerspodcast@gmail.com if you need full account deletion.

8. Security

We use industry-standard measures including encrypted connections (HTTPS), row-level security on user data in our database, and server-side handling of sensitive keys. No method of transmission or storage is 100% secure; use a strong, unique password and keep your credentials private.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

10. International users

If you access the Service from outside the United States, your information may be processed in the United States or other countries where our providers operate. By using the Service, you consent to that transfer and processing.

11. Beta and changes

The Service is in beta; features and data practices may change. We will update this page when we make material changes and adjust the "Last updated" date. Continued use after changes means you accept the updated policy.

12. Contact

Privacy questions or requests: vacationeerspodcast@gmail.com.