The short version
- You can browse DVC rental listings without an account. We don't use advertising or tracking cookies.
- If you create an account, we keep your name, email address and what you save (searches, bookmarks, alerts, trip plans) so the site can work for you.
- We don't sell your information or share it for advertising.
- You can download your data or delete your account at any time from your account page.
What we collect
When you browse
Like most websites, our servers receive your IP address, browser type and the pages you request. We use this to run and protect the site, for example to limit repeated sign-in attempts from one address. We count visits with Umami, which doesn't use cookies and doesn't build a profile of you; it reports totals such as page views and how often features like "Book" or "Save search" are used.
When you create an account
- Account details: your name, email address, and a hash of your password (never the password itself).
- What you save: saved searches, bookmarked listings, the listings we've emailed you about, and any vacation plans you create, including the trip details you enter (dates, party size, budget, departure airport or ZIP code and preferences).
- Email choices: which kinds of email you've turned on or off, and the hour and time zone your daily digest comes at (the time zone is your browser's unless you change it).
- Email status: whether you've confirmed your address, and whether our emails to you bounced or were marked as spam, so we stop sending to an address that doesn't want them.
- Account history: when you signed up and agreed to our terms, and security records such as one-time links for confirming your email or resetting your password (stored only in a form that can't be turned back into a working link).
When you ask for alerts without an account
We keep your email address, the search you asked about and which listings we've emailed you, so the alerts can work. Nothing is sent until you confirm with the link we email you. Every alert has a link to stop them, and if you later create an account with the same address and confirm it, the alerts move into that account.
When something goes wrong
If the site hits an error, a report goes to our error-tracking service. We remove cookies, form contents, email addresses and similar details from these reports before they're sent.
Cookies
We use a single cookie, fm.sid, to keep you signed in. It's only set when you sign in and is needed for your account to work. We don't use advertising, analytics or third-party tracking cookies.
If you bookmark listings without an account, the list is kept in your browser's storage on that device. It isn't sent to us unless you sign in, when it's added to your account.
How we use your information
- To run your account and show you your saved searches, bookmarks and plans.
- To send the emails you ask for: alerts about new listings, price drops and bookmarked stays that sell, and account emails such as confirmation and password resets.
- To keep the site secure and working, and to understand which features are used so we can improve them.
We don't sell personal information, and we don't use it for advertising.
Who else handles it
We use these services to run Find Magic. Each only gets what it needs for its job:
- Render hosts the site and its database, in the United States.
- Resend delivers our emails, so it receives your email address and the email's content.
- Sentry receives error reports, with personal details removed as described above.
- Umami counts visits and feature use, without cookies.
- OpenAI receives the trip details you enter when you create an AI vacation plan, to write the plan. It doesn't receive your name or email.
- Google Maps provides the resort maps; your browser loads them from Google, which receives your IP address. When a trip plan includes driving, Google also receives the starting point you enter, to work out the drive.
When you click Book on a listing, you leave Find Magic for the rental broker's own site. Anything you give the broker is covered by its privacy policy, not ours. We record each Book click (the listing, the broker, where on our site you clicked and, if you're signed in, your account) so we know which brokers our visitors use, and the link tells the broker you came from Find Magic.
How long we keep it
We keep your account information, saved searches, bookmarks and saved trip plans until you delete them or your account. Trip plans you don't save are deleted after 7 days. Alerts asked for without an account stop when you use the link in any of them. When you delete your account, we delete all of it, including your sign-in sessions, straight away. Server logs and error reports are kept for a limited time by our hosting and error-tracking providers.
Your choices
- See and download your data: use "Download my data" on your account page to get everything in your account as a file.
- Correct it: edit your name and email on your account page.
- Choose your emails: turn alerts and other emails on or off in your email settings, or use the link at the bottom of any alert email. Deleting a saved search or removing a bookmark stops its emails too.
- Delete your account: use "Delete account" on your account page. It can't be undone.
If you'd like help with any of these, or have a question about your information, email hello@findmagic.app.
Security
The site is served over HTTPS. Passwords are stored as one-way hashes, sign-in attempts are rate-limited, and the links we email for confirming addresses and resetting passwords expire and work only once.
Children
Find Magic is meant for adults planning trips. It isn't directed at children under 13, and we don't knowingly collect their information.
Changes
If we change this policy, we'll update the date at the top. If a change affects how we use information you've already given us, we'll tell you by email before it takes effect.
Contact
Questions about privacy: hello@findmagic.app.