Privacy Policy

Who we are

DVC Compass (dvc-compass.com) is a tool for evaluating Disney Vacation Club confirmed-reservation rentals. It is a project of Blue Holler Studios, LLC, a North Carolina limited liability company — "we" and "us" in this policy means Blue Holler Studios, LLC, which is the controller of the data described below. DVC Compass is an independent, unofficial tool; the full trademark notice is in our Terms of Service.

For anything in this policy, contact hello@dvc-compass.com.

What we collect, and why

This is the complete inventory as of the date above. If it is not listed here, we do not have it.

Account. Your email address; a bcrypt digest of your password; your account role; a flag recording whether you have turned on alerts (where alerting is available to your account); the time you verified your email address; a record that you accepted our terms (when, and which version); and created/updated timestamps.

A bcrypt digest is a one-way hash. We cannot read your password, recover it, or send it to you — if you forget it, the only path is a reset email. Your email address is the account: it is how you sign in, how you reset your password, and how we would reach you about your account or a change to these policies. That is the extent of it.

Sessions. One record per signed-in session, holding the IP address and browser user-agent string it was created from, plus timestamps. Signing out deletes that record. We also keep it so that if an account is compromised, there is something to investigate.

Bookmarks. Which listings you saved, and when.

Saved searches. A name you choose, the search criteria (resort, dates, price ceiling, and so on, stored as structured data), and whether the search is active.

Push subscriptions. If push notifications are available on your account and you turn them on, your browser issues a subscription: a push endpoint URL, two encryption keys (p256dh and auth), and the browser's user-agent string. We store those so we can send notifications. Payloads are encrypted with those keys, so your browser vendor's push service relays messages it cannot read.

Turning alerts off stops us sending them. It does not by itself delete the stored subscription — revoke notification permission in your browser to do that, or ask us and we will remove it.

We process this data to provide the service you signed up for, to keep it secure, and to meet legal obligations. Nothing else.

What we do not collect

No names, postal addresses, or phone numbers. No payment or card details. No government IDs. No precise location. Nothing about your Disney account, your reservations, or your points — we are not part of any transaction, so we never see one.

Cookies

Only what the site needs to work: a cookie that keeps you signed in, and the standard protection that stops another site from submitting forms as you. No tracking cookies, no advertising cookies, no third-party cookies. The analytics described below sets no cookies at all.

Separately, the site remembers your light/dark theme choice in your browser's local storage. That stays on your device and is never sent to us.

Analytics and tracking

We use a privacy-preserving analytics service to count how the site is used. It sets no cookies, it does not follow you across other websites, and it does not attempt to identify you. There are no ad networks, no tracking pixels, and no fingerprinting.

It records, for each page view:

• The page you viewed, and the site that referred you, if any.
• Your browser, operating system, and whether you are on a phone or a computer.
• An approximate country, derived from your IP address. The provider discards the address rather than storing it.
• Clicks on links that leave DVC Compass.

The analytics service holds no persistent identifier for you. It distinguishes one visitor from another using a value it recomputes daily and cannot reverse, so a visit today cannot be linked to a visit last week, and nothing it records is tied to your account. What it sees are counts, not people.

We do not sell this data, and we do not share it for advertising. Because it is anonymous and cookieless, no consent banner is required — but you should know it is happening, which is why it is written here. Standard browser controls (an ad or tracker blocker, or a "do not track" extension) prevent it, and the site works exactly the same either way.

When you click through to a broker

That click is the one thing we most want to measure — it is how we learn whether the tool is worth anything to anyone — and it is the only thing you do here that leaves no other trace, because you simply leave. So we record it ourselves, in our own database rather than through the analytics service above: which listing it was, whether that listing was still available at the time, which broker it pointed to, and when.

If you are signed in, that record is linked to your account. We are saying so plainly because it is the one thing on this page that is not anonymous, and you should hear it from us.

That is where it ends. We do not follow you onto the broker's site, and we learn nothing about what you do once you are there. We use these records to understand which listings people find worth pursuing, and to tell a click on a live listing apart from a click on one that had already gone. If you delete your account, the link to you is removed from them.

Email

We email you only about your account. Today that means address verification and password resets; we may also need to reach you about your account or a change to these policies. We do not send marketing email. Alerts, where they are available to your account, arrive as browser push notifications — not email.

Who we share data with

We never sell personal data and never share it for advertising. We share it only with the service providers we rely on to run the service, and only so far as each needs to do its job:

• Hosting. Our hosting provider runs the application and its database, so it holds everything described above.
• Email delivery. Our email provider sees your address and the contents of the messages we send you.
• Error reporting. When the app breaks, an error-tracking service receives the crash details so we find out. Email addresses are filtered out of those reports.
• Analytics. Our analytics provider receives the anonymous page-view data described above. It receives nothing that identifies you, and it never receives your account.
• Browser push services. If push notifications are enabled on your account, your browser's push service (Apple, Google, or Mozilla) relays them. It sees your subscription endpoint and a payload it cannot read, because it is encrypted.

These providers act on our instructions and may not use your data for their own purposes. We do not name them here, because naming them would freeze a set of vendor choices that we may need to change; if you want to know who they are, ask us at hello@dvc-compass.com and we will tell you.

Beyond that, we would disclose data only if legally compelled — a valid subpoena, court order, or similar — and we would disclose the minimum required and tell you, unless the law prohibits it.

If the business changes hands. If Blue Holler Studios, LLC is acquired, merges, or sells the assets behind DVC Compass, your data would transfer to the buyer as part of it — there is no way to hand over a running service without the accounts on it. We would tell you by email before that happened, and the buyer would be bound by this policy until they gave you notice of a different one. If you would rather not come along, delete your account: that is what the button is for, and it works right up to the moment of transfer.

One clarification, because the site runs on collected data: listings are gathered from third-party rental broker marketplaces by automated collection, routed through a commercial proxy service. That pipeline carries listing data only. No user's personal data ever passes through it.

Retention

• Account data, bookmarks, saved searches, and push subscriptions are kept for as long as your account exists.
• Signing out deletes that session's record. Sessions you never sign out of remain until we clear them.
• When you delete your account, the account and everything attached to it — bookmarks, saved searches, sessions, push subscriptions — is removed from the live database immediately, in one transaction. We keep no separate "deleted" copy and no recycle bin, so once it is gone we cannot un-delete it for you. The one remaining trace is our routine encrypted backups: the database is continuously backed up to object storage on a short retention window, so a just-deleted account lingers there briefly before aging out — within days, not months.
• Routine server logs are short-lived and operational.

Security

Passwords are stored as bcrypt digests only. All traffic is HTTPS with TLS enforced. Forms are CSRF-protected. Sign-in, sign-up, and password-reset endpoints are rate-limited against brute force; that protection counts recent requests per client IP address, but the counters are transient — an IP is held only for the few minutes a limit spans, in a cache separate from your account and cleared on every deploy — so like the server logs above it is operational, not part of the account inventory. No one can honestly promise perfect security, and we will not — but if we learn of a breach affecting your personal data, we will email affected account holders without undue delay and explain what happened and what we are doing about it.

Your rights and choices

Delete. Go to your account page and delete your account. It removes the account and everything attached to it — bookmarks, saved searches, sessions, and push subscriptions. We ask for your password first, so that nobody but you can do it, and we do not ask you to explain yourself. It cannot be undone.

Email hello@dvc-compass.com from your account address and we will also:

• Access / export — send you a copy of your data in a machine-readable format.
• Correct — fix your email address or other account details.

There is no self-serve button for those two yet — deletion was the one that mattered most, so it went first. Until they exist, email is the real path, and we answer it. We may ask you to confirm a request from your account's email address before acting on it.

A note on GDPR and CCPA

DVC Compass is a small US service aimed at US users. Blue Holler Studios, LLC has no European establishment, no EU representative, and no Data Protection Officer. We do not sell personal information or share it for cross-context behavioral advertising, as California law defines those terms. Wherever you are, the rights above are available to you like everyone else: deletion is a button on your account page, and access, correction, and export are an email away.

Children

The service is not directed at children. You must be at least 18 to hold an account. If we learn an account belongs to someone under 18, we will delete it.

Changes to this policy

We will post updates here with a new date. If a change is material — new data collected, a new vendor, a new use — we will email account holders before it takes effect.

Contact

hello@dvc-compass.com — privacy questions, and access, export, and correction requests all go here. (Deletion does not: you can do that yourself from your account page.)

Postal mail, including legal notices:
Blue Holler Studios, LLC
4030 Wake Forest Road, Ste 349
Raleigh, NC 27609
United States