Privacy Policy

Chaos & Wonder Plans builds personalized Disney World trip plans from the details you give us. This page explains what we collect, who handles it, and how to get it deleted. The short version: we use your information to make your plan, we do not sell it, and you can ask us to delete it at any time.

What we collect

• Account: your email address and a password (stored by our authentication provider as a hash, never in plain text).
• Trip details you enter:travel dates, resort, park plans, ride and dining preferences, and details about each traveler — first names, ages, whether they're a first-time visitor, ticket type, and height ranges for children.
• Sensitive details, only if you provide them: dietary restrictions, whether someone has mobility needs, whether someone has a Disability Access Service (DAS) registration, and military status. We use these only to shape your plan, and you can leave them blank.
• Your plans: the plan we generate, any edits you make, and the bookings and reservations you tell us about.
• Saved travelers and feedback: traveler profiles you save for reuse, and post-trip survey answers and the preference summary we derive from them.
• Payments: when paid plans launch, payments are handled by Stripe. We receive confirmation that you paid; we never see or store your card number.

How we use it

• To generate, display, and let you revise your plans, and to export them as a PDF.
• To remember your travelers and preferences so your next plan is better.
• To run and secure the service and answer your support requests.

We do not sell your information, and we do not use it for advertising.

Who else handles your information

We use a few service providers to run the app. They process data only to provide their service to us.

• Supabase — database, sign-in, and storage for your account and plans.
• Anthropic — the AI that writes your plan. Your trip details, including traveler first names, ages, and any needs you entered, are sent to Anthropic to generate each plan.
• Tavily and Firecrawl — we use these to look up current park information (hours, closures, events). Those lookups are about Disney parks and dates; they do not include your name or traveler details.
• Stripe — payment processing, once paid plans are available.
• National Weather Service — we look up the Orlando-area forecast for your dates. That request has no information about you in it.
• Our hosting provider — Vercel serves the website and counts page views (see Cookies below).

We may also disclose information if the law requires it.

Cookies

We use only the cookies needed to keep you signed in. We count visits with Vercel Web Analytics, which records page views without cookies and without following you around the web or identifying you. We do not use advertising cookies. If that changes, we will update this page first.

Keeping and deleting your data

We keep your account and plans until you ask us to delete them. Email support@chaosandwonderplans.comfrom your account address and we will delete your account, plans, saved travelers, and survey responses. Copies in provider backups are removed on those providers' normal schedules.

Children

Accounts are for adults. You may enter your children's first names and ages so we can plan around them; we use them only for your plan. We do not knowingly create accounts for anyone under 18.

Security

Your data is stored with access controls so each account can reach only its own plans, and connections to the site are encrypted. No system is perfectly secure, so please use a strong, unique password.

Your choices

You can see and edit your plans and travelers in the app, and you can ask us for a copy of your data or to correct or delete it. Depending on where you live, you may have additional rights under local privacy law; email us and we will honor them.

Changes

If we change this policy in a meaningful way, we will update the date above and, where it matters, tell you in the app.

Contact

Questions or requests: support@chaosandwonderplans.com.