Your data, watched as carefully as your prices.

What we collect

To run your watches and send your alerts, RateSleuth stores:

• Your email address— so we can send the alerts you sign up for and let you manage your account.
• Your watch preferences— the resorts, dates, offers, and Lightning Lane prices you ask us to watch, and your alert settings.
• Your mobile phone number— only if you are a Pro subscriber and choose to turn on SMS text alerts. It’s optional, and we collect it solely to send the texts you asked for. See SMS text alerts below.
• Booking details you choose to add— if you ask us to watch an existing reservation, the resort, dates, party size, room type, and nightly rate you tell us you booked, so we can compare it against current prices. We never ask for your Disney confirmation number, guest names, or payment details.
• Basic account and usage records— things like when you signed up and which alerts we’ve sent you, so the service works and we can help if something goes wrong.
• Product usage and basic device data— the pages you view and actions you take in the app (such as creating a watch or upgrading your plan), along with technical details like browser type and approximate location, collected through analytics to understand how RateSleuth is used and improve it. See Analytics and cookies below.

What we never do

• We never sell or rent your email address, mobile phone number, or watch data to anyone, and we never share your mobile opt-in information or SMS consent with third parties for their own marketing.
• We never send daily marketing blasts. The emails you get are the price alerts you asked for, plus (only if you opt in) an occasional summary.
• We never ask for or store your Disney login. RateSleuth watches publicly available prices. It has no access to your Disney account, and it never books or changes anything on it.

How we use email

We send two kinds of email, and only these:

• Transactional price alerts. When a price you watch drops or a relevant offer appears, we email you the details. Account emails (sign-up confirmation, password resets, billing receipts) fall in this bucket too.
• An optional monthly report.If you opt in, we send a short monthly summary of how Disney World prices moved. It’s optional, and you can turn it off at any time without affecting your price alerts.

SMS text alerts (Pro)

Pro subscribers can choose to receive price alerts by text message (SMS), in addition to or instead of email. SMS is off by default — you turn it on yourself.

• How you opt in. You add your mobile number in your account settings and confirm it with a one-time verification code we text you. We only send texts to a number you have verified this way, and only for the watches you created.
• What we send.Texts are transactional price alerts — for example, a resort rate or Lightning Lane price you asked us to watch has dropped. How often you hear from us depends on how many watches you set up and how often their prices move. Message and data rates may apply.
• How to opt out. Reply STOP to any RateSleuth text to stop all further texts, or reply HELP for help. You can also remove your number at any time in your account settings. Opting out of texts never affects your email alerts.
• Your mobile information stays private. We do not sell, rent, or share your mobile phone number or your SMS opt-in and consent with any third party, and we never share this information with anyone for their own marketing. We share your number only with our SMS delivery provider (currently Twilio), and only so it can send the messages you requested.

Analytics and cookies

We use privacy-conscious analytics to understand how RateSleuth is used so we can improve it. This covers the pages you visit and a small set of in-product actions — for example, signing up, creating a watch, starting an upgrade, or an alert being sent. Once you’re signed in, this activity is associated with your account so we can make sense of it.

We rely on two providers for this:

• PostHog— product analytics. Your data is stored in the United States. PostHog sets a first-party cookie (or similar local storage) so it can recognize your browser across visits.
• Vercel Web Analytics— aggregate, cookieless traffic measurement.

We keep analytics minimal and safe: we do notput sensitive details into analytics — no Disney reservation numbers, guest names, or payment details — and we never sell this data. We do not currently record video-style replays of your session; if we ever introduce that, we will mask the information you type and update this policy first. Because RateSleuth doesn’t sell or share your data or track you across other sites, most “do not sell/share” signals have nothing to act on here — but as a courtesy we honor your browser’s Do Not Track and Global Privacy Control settings: if your browser sends either signal, we don’t load analytics for your session. You can also block or clear cookies and site data for ratesleuth.app.

Unsubscribing

Every marketing email includes a working one-click unsubscribe, and we honor it promptly — no dark patterns, no “are you sure” mazes. You can also pause or delete individual watches from your dashboard at any time. Because price alerts are the core service you signed up for, deleting your watches — or closing your account — is the way to stop those; unsubscribe controls apply to the optional monthly report. You can delete your account yourself on your dashboard’s Settings page, or email us (see Contact) and we’ll do it for you.

Service providers

We use a small number of trusted providers to actually run the service — for example, to host our application, store data, process any payments, deliver email, and measure product usage (see Analytics and cookies, which names PostHog and Vercel). They only receive what they need to perform that function and are not permitted to use your information for their own purposes.

Your choices and rights

You can view and edit your watches, opt out of the monthly report, and delete your account and its data yourself at any time from your dashboard’s Settings page (or ask us to, using the details below). We keep your account information for as long as your account exists; deleting your account removes the personal data associated with it.

Changes to this policy

If we update this policy, we’ll revise the date at the top of the page, and for material changes we’ll let you know by email.

Contact

RateSleuth is operated by Heisler Creative Services, LLC. Questions about privacy? Email us at privacy@ratesleuth.app.