Privacy Policy

Last updated: September 3, 2026

MyDVCPlanner ("we," "us," or "our") operates the website mydvcplanner.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

1. Information We Collect

Personal Data

When you create an account, we collect personally identifiable information that you voluntarily provide to us, including:

Email Address — Used for account creation, login authentication, and optional email notifications such as availability alerts and search results.
Account Preferences — Your saved searches, alert configurations, and favorite vacation plans are stored to improve your experience.

Usage Data

We automatically collect certain information when you visit, use, or navigate our Service. This information does not reveal your specific identity but may include:

Browser and device information (type, operating system, screen resolution)
IP address and approximate geographic location (country level)
Pages visited, time spent on pages, and navigation patterns
Referring website addresses
Search queries performed within our tool (resort selections, date ranges, point budgets)

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. Technologies used include:

Session Cookies — Essential for maintaining your login state and preferences during your visit.
Analytics Cookies — Help us understand how visitors interact with our website so we can improve the user experience.
Advertising Cookies — When advertising is enabled, Google AdSense may use cookies to serve relevant advertisements. Google may use information about your visits to this and other websites to provide targeted advertisements. You can opt out of personalized advertising by visiting Google's Ads Settings.

2. How We Use Your Information

We use the information we collect for the following purposes:

To provide and maintain our Service — Including processing your DVC availability searches, generating split-stay recommendations, and displaying point cost comparisons.
To manage your account — Including registration, authentication, and managing your saved searches and availability alerts.
To send you notifications — Including availability alert emails when rooms matching your criteria become available, and optional weekly digest emails summarizing DVC availability trends.
To improve our Service — By analyzing usage patterns to enhance search algorithms, user interface design, and content relevance.
To serve advertisements — When ads are enabled, Google AdSense may display ads on our site. These ads help support the free services we provide.
To comply with legal obligations — Including responding to lawful requests from public authorities.

3. Third-Party Services

We may employ third-party companies and individuals to facilitate our Service. These third parties have access to your Personal Data only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Google AdSense

When advertising is enabled, we may use Google AdSense to serve advertisements on our website. Google AdSense uses cookies to serve ads based on your prior visits to our website and other sites on the Internet. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet. You may opt out of personalized advertising by visiting Google Ads Settings. For more information about how Google collects and uses data, please visit Google's Privacy Policy.

Named Third-Party Services

These are every third-party service we actually use, and what each one processes:

Google AdSense (Google Ireland Ltd. / Google LLC) — advertising delivery and measurement. Processes IP address, device and browser data, and advertising cookies/identifiers. Google Privacy Policy.
Google Funding Choices — Google's certified consent management platform, used to collect and store advertising consent choices for visitors in the EEA, UK, and Switzerland.
Google Search Console — aggregate search performance reporting. No personal data is provided to us about individual visitors.
Lovable (hosting and backend platform, including Cloudflare as its content delivery network) — serves the website and hosts our application database, authentication, and server functions. Processes IP address, request logs, account records, saved searches, favorites, and alert settings.
IONOS — outbound email delivery for account, alert, and newsletter messages. Processes your email address and message content.

We do not use Google Analytics, Meta/Facebook pixels, or any other analytics or social tracking service. Site usage is understood from the request logs of the hosting and search services named above. If we add a new third-party service, we will list it here before it goes live.

Authentication Services

We use secure authentication services to manage user accounts. Your password is never stored in plain text — it is hashed and encrypted using industry-standard security practices.

Personalized vs. Non-Personalized Advertising

Personalized ads use cookies and advertising identifiers reflecting your prior browsing to select ads that may match your interests. Non-personalized ads are selected only from contextual signals — the content of the page you are viewing and a coarse location — and still use cookies for frequency capping, fraud prevention, and aggregate measurement. You can request non-personalized ads at any time through Google Ads Settings, and, in regions where a consent message is shown, through the Privacy Choices link in our footer. Details of each cookie are in our Cookie Policy.

4. Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

Account data — Retained until you delete your account.
Saved searches and alerts — Retained until you delete them or close your account.
Usage data — Retained for up to 24 months for analytics purposes.
Email logs — Retained for up to 12 months for troubleshooting and compliance purposes.

5. Data Security

The security of your data is important to us. We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit using TLS/SSL
Secure password hashing using industry-standard algorithms
Row-level security policies on our database ensuring users can only access their own data
Regular security reviews and updates

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

6. Your Data Rights

Depending on your location, you may have the following rights regarding your personal data:

Access — You can request a copy of the personal data we hold about you.
Correction — You can request that we correct any inaccurate personal data.
Deletion — You can request that we delete your personal data by deleting your account.
Opt-out — You can opt out of marketing emails at any time using the unsubscribe link in any email or through your profile settings.
Data Portability — You can request your data in a machine-readable format.

To exercise any of these rights, email privacy@mydvcplanner.com. We respond within 30 days and never charge a fee or penalize you for making a request.

California and Other US State Privacy Rights

If you live in California (CCPA/CPRA) or another US state with a comprehensive privacy law — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana — you have the right to know what personal information we collect and why, to access a copy of it, to correct it, to delete it, to opt out of targeted advertising and of any sale or sharing of personal information, to limit the use of sensitive personal information, and to be free from discrimination for exercising these rights.

We do not sell personal information for money, and we do not knowingly process the personal information of anyone under 16 for targeted advertising. When advertising is enabled, our use of advertising cookies may qualify as “sharing” for cross-context behavioral advertising under these laws.

Do Not Sell or Share My Personal Information: opt out by enabling Global Privacy Control in your browser, selecting non-personalized ads in Google Ads Settings, using the Privacy Choices link in our footer, or emailing privacy@mydvcplanner.com with the subject “Do Not Sell or Share.” Authorized agents may submit requests on your behalf with written proof of authorization.

Global Privacy Control (GPC): where the law recognizes it, we treat a browser-transmitted GPC signal as a valid opt-out of the sale or sharing of personal information for targeted advertising, and pass that choice to our advertising partner. No further action is required from you.

European, UK, and Swiss Rights and Lawful Bases

For visitors in the EEA, UK, and Switzerland, MyDVCPlanner is the data controller for the personal data described in this policy and can be reached at privacy@mydvcplanner.com. We rely on the following lawful bases:

Contract (Art. 6(1)(b)) — creating and operating your account, running your searches, and sending alerts you configured.
Legitimate interests (Art. 6(1)(f)) — keeping the site secure, preventing abuse, and understanding aggregate usage to improve the product.
Consent (Art. 6(1)(a)) — advertising and any non-essential cookies, and optional marketing email. You may withdraw consent at any time using the Privacy Choices footer link or an email unsubscribe link, without affecting the lawfulness of prior processing.
Legal obligation (Art. 6(1)(c)) — responding to lawful requests and retaining records where required.

You also have the right to object to processing, to request restriction, to data portability, and to lodge a complaint with your local supervisory authority. Some of our providers are located in the United States; those transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

Because we serve ads in these regions, advertising consent is collected through Google's certified consent management platform before any advertising cookie is set.

Withdrawing Cookie Consent

Reopen the consent message with the Privacy Choices link in the site footer to change or withdraw your cookie and advertising choices at any time. You can also clear this site's cookies in your browser to be asked again on your next visit. Full details, including a cookie-by-cookie table, are in our Cookie Policy.

7. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us so that we can take the necessary actions to remove that information.

8. Links to Other Sites

Our Service may contain links to other sites that are not operated by us, including links to Disney Vacation Club resources and Walt Disney World information. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@mydvcplanner.com
Website: mydvcplanner.com

MyDVCPlanner is not affiliated with, endorsed by, or sponsored by The Walt Disney Company, Walt Disney World, Disneyland, or Disney Vacation Club. All Disney-related trademarks are the property of The Walt Disney Company.