← Back to home

Privacy Policy

Last updated: March 16, 2026

1. Information We Collect

We collect the following information when you use MagicDates:

  • Account information: email address, password (hashed), and Magic Key type
  • Phone number: only if you opt in to SMS alerts
  • Watch preferences: dates and parks you choose to monitor
  • Usage data: pages visited, features used, and alert history

2. How We Use Your Information

We use your information to:

  • Provide and operate the Service
  • Send availability notifications via email and/or SMS based on your preferences
  • Process payments and manage your subscription
  • Improve the Service and fix issues
  • Communicate important updates about the Service or your account

3. SMS & Phone Data

If you enable SMS alerts, we store your phone number solely to deliver availability notifications. We do not share your phone number with third parties for marketing purposes. SMS messages are sent through Twilio, our messaging provider, which processes your phone number only to deliver messages on our behalf. You can disable SMS and delete your phone number at any time in your account settings. See our SMS Terms for details.

4. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS). We use industry-standard encryption for data in transit (TLS) and at rest. Passwords are hashed and never stored in plain text. We do not sell your personal information.

5. Third-Party Services

We use the following third-party services to operate MagicDates:

  • Supabase: database and authentication
  • Resend: email delivery
  • Twilio: SMS delivery (only if you opt in)
  • Stripe: payment processing

Each provider processes your data only as necessary to provide their service and in accordance with their own privacy policies.

6. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where required by law (e.g., billing records).

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate information
  • Delete your account and associated data
  • Opt out of SMS notifications at any time
  • Export your data upon request

9. Children’s Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Service.

11. Contact

Privacy questions? Contact us at privacy@nevermissthemagic.com.