The short version: we collect what's needed to run this site, we don't sell anything, and you control the cookies.
Two buckets: what you send us directly, and what's measured automatically.
Your name, email, and message. We use this to reply and to spot patterns in what families ask for. Nothing else.
Google Analytics 4 and Google Tag Manager record page views, approximate city-level location (IP-derived, not precise), device type, and how you got here (search, link, direct). If you reject cookies in the banner, these run in “cookieless” mode — aggregate pings only, no ID on you.
When you click a Get Away Today or Amazon link, that partner records the click under our referrer ID so they can pay us a commission. We don't see your purchase, name, or card — just that a click happened.
Reply to messages. Measure which guides help families most. Improve the site. That's it.
We don't sell your data. We don't share the contact form with marketing tools. We don't build advertising profiles. We don't run ads on this site at all.
The companies that touch your data when you use this site.
Contact form submissions are emailed to us via Resend. Messages are retained in our inbox so we can reply and follow up.
Analytics for traffic and content performance. Google's privacy policy covers what they do with the data. We run Consent Mode v2 with default-deny — nothing fires until you choose.
Affiliate partners. They set their own cookies when you click through to measure the referral and pay us a commission. See their policies: Get Away Today · Amazon.
Strictly-necessary cookies (none today) and analytics cookies (opt-in via the banner).
When you accept, Google Analytics sets _ga and _ga_* cookies (expire after ~2 years) that generate an anonymous client ID. If you reject, those cookies are never set — GA runs in Consent Mode v2 “cookieless ping” mode, which gives us only aggregate counts with no identifier on you.
Clear ror_consent in your browser's local storage and reload — the banner will come back. Or change your browser's cookie settings at any time.
You have rights under GDPR (EU/UK) and CCPA/CPRA (California). In plain English:
A copy of any data we hold on you (contact form messages, basically). Deletion of that data. Correction of anything wrong. To opt out of analytics (the banner handles this). To know if we've sold or shared your data — we haven't and won't.
Use the contact form at the bottom of any page. Put “Privacy request” in the subject and tell us what you want. We'll reply within 30 days — usually faster. We won't discriminate against you for asking.
Ride or Naptime is a guide for parents planning a Disneyland trip with kids. We don't knowingly collect information from anyone under 13, and the site isn't directed at kids. If you're a parent and believe your child has sent us their info, contact us and we'll delete it.
We review this page quarterly. Material changes (new processors, new data types, new rights) trigger a banner reset so you're re-prompted for consent. Minor edits (typos, link updates) don't. Last reviewed: April 22, 2026.
Questions about this policy, your data, or anything else? Use the contact form at the bottom of every page. We read every message.