Privacy Policy
Last updated: October 15, 2026
This Privacy Policy explains how One More Byte LLC ("BookADream", "we", "us"), a Minnesota, United States company, collects, uses and shares personal information when you use https://bookadream.com and our reservation alert service (the "Service"). BookADream is an independent service and is not affiliated with The Walt Disney Company.
Information We Collect
Information you give us
- Account details: first and last name and email address. We sign you in with an emailed link, so we don't store passwords.
- Phone number: if you turn on SMS alerts.
- Alert details: the dining reservations and experiences you track, dates, party size, park and notification preferences.
- Messages and reviews: anything you send through our contact form or post as a review.
- Billing details: paid plans are processed by Stripe. We receive your Stripe customer and subscription IDs, plan and payment status. We never see or store your full card number.
Information collected automatically
- Usage and device data: IP address, browser and device type, pages visited, clicks, time on page, referring site and errors.
- Session replays (with analytics consent, or unless you opt out where opt-out applies): recordings of how you move through the site, including clicks, scrolling and text typed into most form fields. Password and email fields are masked.
- Advertising data (with marketing consent, or unless you opt out): ad click identifiers (such as Facebook
fbclidand Googlegclid), UTM campaign parameters and the page you arrived on.
How We Use Information
- To provide the Service: create your account, check availability and send email and SMS alerts.
- To process payments and manage subscriptions.
- To respond to your messages and provide support.
- To understand how the Service is used, fix problems and improve it.
- To measure which advertising brings people to BookADream and, with your consent where required, to show you our ads on other sites.
- To send service messages (such as account and billing notices) and, where you have agreed, product updates.
- To keep the Service secure, prevent abuse and comply with the law.
Who We Share Information With
We don't sell your information for money. We share it with these service providers, who process it for us:
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Hosting, database and sign-in | Account, alert and preference data |
| Stripe | Payment processing | Name, email and payment details |
| Twilio | SMS alerts | Phone number and message content |
| Resend | Email delivery | Email address and message content |
| PostHog | Product analytics and session replay | Usage data, device data, session recordings, and your user ID and email when signed in |
| Meta Platforms (Facebook) | Ad measurement and targeting | Pages viewed, conversion events, ad click IDs, device and browser data |
| Google (Google Ads) | Ad measurement and targeting | Pages viewed, conversion events, ad click IDs, device and browser data |
| Google Fonts | Website fonts | IP address and browser data |
Meta and Google may combine data from our site with other data they hold. Under some US state laws, sharing data with ad platforms for targeted advertising counts as a "sale" or "sharing" of personal information. You can opt out at any time (see Your Privacy Choices).
We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets. In that last case, we will tell you before your information becomes subject to a different privacy policy.
Cookies and Similar Technologies
We use cookies and browser storage (such as localStorage) in three categories. Strictly necessary items are always on. Analytics and marketing items depend on your choice. Visitors in the EU/EEA, UK and Switzerland must opt in first. Elsewhere they are on by default and you can turn them off. .
| Category | Name | Provider | Purpose | Duration |
|---|---|---|---|---|
| Strictly necessary | sb-*-auth-token | BookADream / Supabase | Keeps you signed in | Until sign-out |
| Strictly necessary | bookadream_consent | BookADream | Remembers your cookie choices | 12 months |
| Strictly necessary | moments_*, userPreferences, dismissed_announcements, pending_monitor | BookADream | Remembers filters, dashboard settings, dismissed notices and an alert you started before signing up | Until cleared |
| Analytics | ph_*_posthog, posthog_pre_auth_id, signup_start_time | PostHog / BookADream | Analytics, session replay and linking pre-signup visits to your account | Up to 12 months |
| Marketing | _fbp, _fbc | Meta | Ad measurement and targeting | Up to 90 days |
| Marketing | _gcl_* and other Google Ads cookies | Ad conversion measurement and targeting | Up to 90 days | |
| Marketing | marketing_attribution | BookADream | Records which ad or campaign brought you to us | Until cleared |
Your Privacy Choices
- Cookie settings: use the panel (also linked in the site footer) to accept or reject analytics and marketing cookies at any time.
- Opt out of sale/sharing and targeted ads: turn off "Marketing & advertising" in . We also honor the Global Privacy Control (GPC) browser signal as an opt-out.
- SMS: reply STOP to any text to stop SMS alerts, or HELP for help. You can also turn SMS off in your account settings. Message frequency varies with your alerts. Message and data rates may apply. We don't share your phone number with third parties for their own marketing.
- Email: change notification settings in your account, or use the unsubscribe link in marketing emails.
- Delete your account: delete your data in your account settings or email [email protected].
Your Rights
US state privacy rights
Depending on where you live, including California, Colorado, Connecticut, Virginia and other states with privacy laws, you may have the right to:
- know what personal information we collect and how we use and share it
- get a copy of it
- correct it
- delete it
- opt out of its sale or sharing, targeted advertising and profiling
- not be treated differently for using these rights
We don't use sensitive personal information to infer characteristics about you. To make a request, email [email protected]. We will verify your request by confirming your account email. You may also have an authorized agent make a request for you. If we deny your request, you can appeal by replying to our decision.
EU/EEA, UK and Swiss visitors
We process your data to perform our contract with you (providing the Service and processing payments), with your consent (analytics and marketing cookies, and SMS alerts), for our legitimate interests (security, fraud prevention and improving the Service), and to meet legal obligations. You have the right to:
- access your data
- correct it
- delete it
- restrict its use
- take a copy with you (portability)
- object to how we use it
- withdraw your consent at any time
- complain to your local data protection authority
Our providers process data in the United States. Where required, we rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
Data Retention
- Account, alert and preference data: kept while your account is active, and deleted within 30 days after you delete your account.
- Billing records: kept as long as tax and accounting laws require.
- Analytics data and session replays: kept for up to 12 months.
- Contact messages: kept as long as needed to handle your request.
Security
We use reasonable technical and organizational measures to protect your information, including encrypted connections and access controls. No method of transmission or storage is completely secure.
Children's Privacy
The Service is not directed to children under 13 (or under 16 in the EU/UK). We don't knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
Links to Other Websites
The Service links to other sites, including Disney's booking pages. Their own privacy policies apply, and we are not responsible for their practices.
Changes to This Policy
We may update this policy from time to time. We will change the "Last updated" date above. For material changes, we will tell you by email or with a notice on the Service.
Contact Us
For privacy questions or requests, email [email protected] or use our contact page. One More Byte LLC, Minnesota, United States.