Your data, in plain language.

If you only browse

You can use the entire calendar without an account. We do not use analytics, advertising pixels or third-party tracking scripts. Your followed parks are stored in your browser's localStorage on your device; they are not sent to us unless you create an account, at which point they are merged into it.

If you create an account

We store:

• Email address and optional display name — to identify your account and sign you in.
• A password hash — created with PBKDF2-SHA256. We never store the password itself.
• A recovery-code hash — if you generate a recovery code, only its hash is stored. The code itself is shown to you once and never again.
• Your followed parks — to build your agenda, notifications and calendar feed.
• Reminders — the event and the date/time you want to be notified.
• Push subscriptions — the browser endpoint and encryption keys needed to deliver notifications. These are only used to send you the notifications you asked for.
• In-app notifications — a short history of new-event and reminder messages.
• A private calendar token — the random part of your personal .ics feed URL. You can rotate it at any time in your account.
• Security metadata — truncated user agent and IP address for sessions, plus IP-based rate limiting for sign-in attempts.

We do not send marketing email. We do not sell or rent data. There are no third-party analytics, fonts or scripts loaded by the site.

How long we keep it

Account data is kept until you delete your account. Sessions expire after 30 days. Login attempts are kept for one day. Stored source articles used for event extraction are kept for debugging and are not linked to users.

Deleting your data

Go to Account → Delete account. This permanently removes your account, follows, reminders, notifications and push subscriptions. Public event data is not affected. You can also email hello@themeparkcalendar.com.

Cookies

The only cookie is a session cookie (tpc_session) set after you sign in. It is HttpOnly, SameSite=Lax and Secure on the live site. It expires after 30 days or when you sign out. Your theme preference is stored locally in your browser, not in a cookie.

Third parties

• Cloudflare hosts the site, database and scheduled worker, and processes standard request logs.
• DeepSeek processes publicly available park articles to extract events. No user account data is sent to it.
• Your browser's push service (for example Google, Mozilla or Apple) delivers notifications if you enable them.

Contact

Questions or a data request? Email hello@themeparkcalendar.com. We aim to respond within a few days.