Privacy Policy

Last updated October 15, 2026

Resortings LLC, a North Carolina limited liability company, is responsible for the information described here. We collect as little as possible, we don’t sell anything about you, and we don’t follow you around the internet. Some of our own links (in our emails, on our Instagram profile, and in any ads we run) carry a tag saying where the click came from. It tells us which link worked, and nothing about you.

What we collect

Your trip answers, while you are using the planner. Your party, dates, resort and parks live in the address bar, which is how a trip link can be shared. To work out your savings we send those answers to our own server and send the answer back. We do not store them.
Your email address, if you set an alert, buy, or contact us. If you buy, Stripe collects your email at checkout (in the Apple Pay, Google Pay or Link sheet, or on Stripe’s card page) and passes it to us. If you use the contact form, Formspree passes your message to our inbox. No mailing list, no newsletter, no sharing.
A record of your purchase, if you buy. A random reference, your email, Stripe’s own payment references, the amount, the currency, whether it is active or refunded, and the dates.
Never your card. Stripe takes the payment, in its own payment sheet on our page or on its own card page. Your card number never reaches this site.
Basic web traffic data. Our host, Cloudflare, records standard request information: IP address, browser, device type and country. It is aggregated and used to see whether the site is working and how many people visit. It uses no cookies.
Your Lakeshore Lodge booking reminder, if you ask for one. Your email address, your dates and party, and whether you are a Disney Vacation Club member, an Annual Passholder or neither, so we can email you when booking opens for you. It is deleted 90 days after you sign up.
A count of live price lookups. To stop automated misuse, we count how many live room prices each connection asks for. The count is kept against a scrambled, one-way form of your IP address and deleted after 48 hours.
Which parts of the site get used. We record steps such as a page loading, a room being picked, the price being shown and the page being left, with the page it happened on, whether you are on a phone or a desktop, the site that sent you here, and the campaign tag if you arrived from one of our own links. These records carry a random per-tab reference so one visit’s steps join up. It is not a cookie, it is never joined to your email or your account, and it is gone when you close the tab. This is our own recording on our own server: no third-party analytics company is involved and no script from one runs here.
Your alerts. The resort, dates, party and room type you asked us to watch, any note you added, and a record of each alert we sent you.
Your booking reminders, if you set one. The park, the resort you’re staying at (or that you’re staying off site), your dates and your email, so we can remind you when Disney opens dining and Lightning Lane booking for that trip, and a record of each reminder we sent. If you set them up for clients as a travel agent: your name and agency as you want them on the texts, and for each trip a client’s name, a client’s email if you add one, and a client’s mobile if you add one. A trip and its records are deleted 90 days after the trip ends.
Your mobile number, only if you give us one for texts. We ask in two places: the Text alerts box on the alerts page, and the mobile field on a booking reminder. We keep the number and when you agreed, and use it only for the texts you asked for: the rooms you’re watching, or your Disney booking windows. Turn texts off on your alerts page, or reply STOP to any text, and we delete the number.
A client’s mobile number, if their travel agent adds it. We text that number once, asking the client to reply YES, and send them nothing else unless they do. A client who replies STOP gets no more texts.
Nothing else. No user profiles, no advertising identifiers, and nothing that follows you between visits beyond the cookies below.

Cookies

Two cookies, and only if you sign in or buy. rs_ent holds a random reference to your purchase and a signature, and it is what stops you being asked to pay twice. rs_sess is what keeps you signed in to your alerts, free or paid, and it lasts 90 days from the last time you visited. Neither carries personal information, scripts on the page cannot read either of them. Once the payment step is on screen, Stripe’s own script sets two more, __stripe_mid and __stripe_sid, to spot fraud. They are Stripe’s, under Stripe’s cookie policy, and we never read them. Nothing else on this site sets a cookie.

If you click through to Stripe or Disney, those sites set their own cookies under their own policies, which we don’t control.

Emails we send

Sign-in links when you ask for one, your alerts, your booking reminders (and a copy to a client’s email if their travel agent adds one), receipts from Stripe when you pay, one offer to keep watching when you cancel a subscription (it has an unsubscribe link), and one note if a payment doesn’t go through. No newsletter and no mailing list. Unsubscribing stops offers; it never stops an alert you set, which you stop from the alert itself.

Who else sees your data

Cloudflare hosts the site, serves it to you, stores the purchase records, and runs the check on the free-alert and booking-alert forms that tells a person from a bot (Turnstile), under Cloudflare’s own privacy policy.
Stripe takes the payment if you buy. They handle the card entirely; we never receive it.
Formspree delivers contact form messages to our inbox.
Resend sends your alerts and receipts, and sees the address each one goes to.
Twilio sends text alerts and booking reminders, for anyone who turns them on, and sees the number each one goes to.

We don’t sell, rent or share personal information with anyone else, for any reason. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information is shared with third parties or affiliates for marketing or promotional purposes, and text-message opt-in data and consent are never shared with any third party.

How long we keep it

Purchase records are kept while the purchase is active, and for seven years after a refund or a dispute. Contact form messages are deleted once the conversation is over. Your alerts and the record of what we sent you are kept while your subscription is active and for 90 days after it ends. A booking reminder and the record of the reminders we sent are deleted 90 days after the trip ends. An account with nothing left in it is deleted after 90 days without a visit. When a record reaches the end of its period, it is deleted.

Your rights

Ask us to see, correct or delete what we hold about you and we’ll do it. Use the contact form or email mirwin@resortings.com.

Children

This is a trip-planning tool for adults. We don’t knowingly collect information from anyone under 13. If you believe a child has sent us their email address, tell us and we’ll delete it.

Security

Payment card details never reach us. There are no passwords. Signing in is a link we email you that works once and lasts twenty minutes. The database sits behind Cloudflare with access limited to the owner. If something goes wrong we will tell affected people and the North Carolina Attorney General without unreasonable delay.

Changes

If we change what we collect, we’ll update this page and the date at the top.

Contact

Questions about any of this go through the contact form.