Skip to main content
DVC Pixie Dust

Privacy Policy

Last updated: April 20, 2026

DVC Pixie Dust (“we,” “us,” or “our”) operates dvcpixiedust.com (the “Site”). This policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Account information

If you create an account, we collect your email address through our authentication provider, Clerk. We store a reference to your Clerk user ID in our database alongside any price alerts you configure. We do not store passwords; authentication is handled entirely by Clerk.

Price alerts

When you create a price alert, we store your alert criteria (resort, point range, maximum price, etc.) linked to your account. This is used solely to match new listings against your preferences and notify you by email.

Affiliate click tracking

When you click a “View Listing” link, we increment an anonymous counter on that link (slug → count). We do not store which user clicked, or when. Only the total click count per link is stored.

Usage data

Our hosting provider (Railway, for both the web app and database) collects standard server access logs, which may include your IP address, browser type, and pages visited. These logs are retained according to Railway's own data retention policy and are used for security and uptime monitoring only.

2. Cookies

We use cookies only for essential site functionality:

  • Authentication cookies set by Clerk to keep you signed in across page loads. These expire when you sign out or after a rolling session window defined by Clerk.
  • Security cookies (CSRF tokens) set by Next.js for form protection.

We do not use advertising cookies, cross-site tracking cookies, or analytics cookies from third parties such as Google Analytics.

3. How We Use Your Information

  • To operate your account and authenticate you on return visits.
  • To deliver price alert email notifications matching your saved criteria.
  • To improve the Site (aggregate, anonymised usage patterns from server logs).
  • To detect and prevent abuse or fraud.

We do not sell your personal information to third parties.

4. Third-Party Services

The Site uses the following third-party services that may process your data:

  • Clerk (clerk.com): authentication and user management. Clerk's privacy policy governs how they handle your email address and session data.
  • Railway (railway.app): web app, scraper, and database hosting. Railway processes requests, stores server logs, and stores listing data and your alert preferences in a private PostgreSQL database. All data is transmitted over TLS/SSL encryption.
  • Resend (resend.com): transactional email delivery. Your email address is passed to Resend only when an alert notification is sent. Resend does not use it for their own marketing.

We do not share your personal information with DVC brokers, Disney, or any marketing third parties.

5. Data Retention

Account data and alert preferences are retained while your account is active. You may delete your account at any time from the account settings page; this removes your alerts and deletes the user record from our database. Clerk retains its own record per their data retention policy.

Server access logs are retained for up to 30 days by our hosting providers.

6. Your Rights

Depending on where you live, you may have rights to access, correct, or delete your personal data. To exercise any of these rights, email us at the address below and we will respond within 30 days.

California residents (CCPA): You have the right to know what personal information we have collected, to request deletion, and to opt out of sale (we do not sell personal information).

EEA/UK residents (GDPR/UK GDPR): Our lawful basis for processing your data is contract performance (providing the service you signed up for) and legitimate interests (security, fraud prevention). You have rights of access, rectification, erasure, restriction, and portability. You may also lodge a complaint with your local supervisory authority.

7. Children's Privacy

The Site is not directed at children under 13. We do not knowingly collect personal information from children. DVC contracts are adult financial transactions and the Site is intended for adults only.

8. Changes to This Policy

We may update this policy from time to time. We will update the “last updated” date at the top of this page. Continued use of the Site after changes constitutes acceptance of the revised policy.

9. Contact

For privacy-related questions or requests, contact us at: privacy@dvcpixiedust.com