Privacy Statement

Version 2026-10-27. Operator: AI ML Operations.

This statement describes what Magic Room Watch stores so it can run searches, alerts, and billing. It is not a Disney privacy policy.

Account data

We store your username, email, password hash, organization, theme, default park, optional phone number in E.164 form, and the Terms of Service version and timestamp you accepted.

Searches and alerts

Search jobs, results, and saved alerts store the destination, dates, party size, resort choices, room filters, and prices returned for those checks. Alert history keeps a fingerprint of matches already emailed or texted so we do not repeat the same notice.

Messages

Password resets, invites, and alert notices go out through SMTP2GO (email and SMS). We keep a delivery log with the recipient, channel, subject, body, and provider result.

Payments

Stripe processes cards. We store Stripe customer and subscription ids, plan name, status, seat quantity, period end, and prepaid search credits. We do not store full card numbers.

Cookies

The site uses a session cookie, a CSRF cookie, and a theme cookie (theme, light or dark) so the color mode survives a reload. Signed-in theme choices are also saved on your profile.

Sharing

We do not sell personal data. Processors are the host that runs this app, PostgreSQL, SMTP2GO, and Stripe. Official Disney sites receive only the booking link you choose to open; we do not send them your account password.