Private by default.
Updated October 25, 2026. Questions about privacy or stored trip information can be sent to support@sundayandwonder.com.
Optional Disneyland campaign requests
The free Disneyland preview does not require email. If you separately request its eight-email learning series, we store your normalized email, brand and campaign, exact consent wording/version, request time, fixed resource attribution and a protected withdrawal reference. No planner answers, trip details or children’s information are included. This does not join the Weekly, another product or another brand. Sending is held until Sunday & Wonder’s own domain is ready and your address is confirmed.
Keep the private withdrawal link shown after submitting, or contact support@sundayandwonder.com. Repeating a request does not reactivate a withdrawn request. Pending or withdrawn requests older than 90 days are eligible for bounded cleanup. Short-lived hashed request counters deter abuse; raw IP addresses and form contents are not sent to analytics.
Pace Finder
The three answers stay in the open page. Only when you choose to carry the result do we place the derived pace, morning-start, break and walking preferences in this browser tab for up to 30 minutes. Children’s age bands are not carried, saved or sent to analytics by Pace Finder. Review and Apply in the free planner changes only those four preferences. Existing planner draft and account-saving controls still apply.
Signing in
Email sign-in uses Supabase to verify your email address and send a single-use link through the configured email-delivery service. Authentication cookies keep you signed in. We store the connection between your verified account and your private trips. No password is requested. Existing signed-in accounts may remain active during the transition.
What is stored
When you explicitly save to Our Vacation, we store your hotel choice, favorite hotel or experience IDs, and Date Night choices and timing against your account. Date Night childcare notes and checklist marks are not included. Clear these extras from Our Vacation independently of deleting your family plan.
Your questionnaire draft is temporarily saved in this browser tab so you can return to it. If you sign in and save a plan, the site stores your structured preferences, trip dates, children’s ages, optional notes, itinerary, and changes in its database, linked to your site-specific account identifier. Children’s names are not requested. Avoid entering unnecessary medical or sensitive details.
Disneyland and cruise Family Planners
Trip setup is kept in this browser tab, separately for each signed-in account and household trip. An explicit import brings a guest setup into your signed-in planner. Creating a household trip stores its name and start date. Generating a preview sends your setup to our server to build the result; no AI provider is used. Full plans save when you build them or choose Save our changes, and contain your itinerary, age bands, preferences, supplied booking names and times, notes and checklist marks. Access is limited to the purchasing account.
Downloaded household copies include every day, its times and notes, and your preparation checklist. Review personal details before sharing a download. Nothing is shared automatically, and downloaded copies cannot be revoked by this site. Delete a household trip in My Trip to remove its saved work and end access; this does not request a refund. Closing the tab or clearing site data removes browser drafts.
Family experiences and saved work
Wonder Passport, Worth the Upgrade? and Your Disney Test Drive keep free-preview answers in this browser tab. Closing the tab or clearing site data can remove them. Signing in does not automatically send that preview to your account; an explicit import lets you bring this tab’s preview into the signed-in experience.
For an active purchased product, changes automatically save to the selected private trip. Depending on the product, this includes optional household and child nicknames, age bands, interests, dates, activity answers, journal memories, entered quotes, adult priorities, saved alternatives and rehearsal choices. Saved work belongs to the purchasing adult’s account and is available only with active access to that product. Avoid children’s real names, booking references, Disney credentials and unnecessary sensitive information.
Family Vote is a same-device exercise. Each adult’s priorities are hidden during the other adult’s entry, then both are shown in the comparison and may be included in saved work and exports. This is not a private ballot or a secure invitation to another account. Inform the other adult before entering their answers.
Preview content requests send the age bands, park choices, interests and activity constraints needed to select activities. Spending comparisons send your entered amounts and priorities to our server for calculation. Neither requires a marketing opt-in, and these answers are excluded from optional measurement.
Exports are created in your browser and can contain your family’s answers, nicknames and costs. Review files before sharing them. Journals provide photo and drawing spaces; these products do not upload photos. Online access expiry does not automatically erase stored work. Delete an experience trip from My Trip to remove its saved product answers and clear its name and date. Minimal trip and payment references remain to prevent delayed payment events from restoring a deleted trip and to support purchase records. Deletion does not revoke copies you have already downloaded or shared.
Free family worksheets
The afternoon pace sheet, incidental-cost checklist, transfer-day plan and sensory break planner keep your entered preferences, amounts, resort names, times and handoff notes in the open page only. They disappear on reload. Download buttons create a copy on your device; the editable blank sheets also let you download a filled copy. We do not send these entries to our server, your account or optional analytics. Review personal details before sharing or printing your copy. Files you download remain under your control.
These resources are free to download without an email address. Resource email delivery is not active. Joining the separate newsletter launch list remains optional and follows the consent and confirmation process above.
Free tools saved on this browser
The preparation-session worksheets and itemized cost worksheet use this open page’s memory only. They are lost when you leave or reload. Copy and print include your current entries; review them before sharing. Timeline and budget Save controls do not save these worksheets. No AI provider is called, and worksheet answers are not sent to our server, URLs or optional analytics. Pasting a copied prompt into another service is your choice and follows that service’s privacy rules.
The party-fit tool saves event choice, planned times, costs and structured family preferences on this browser only when you select Save. Restore loads that copy; Delete saved copy removes it without clearing current entries. Copied and printed briefs include your costs and preferences. There is no automatic sharing or account sync, and these answers are excluded from optional analytics.
The Disney holiday comparison saves your preferences, quotes, available days and chosen destination only when you select Save comparison. Restore loads that browser copy; Delete saved copy removes it while leaving current entries on screen. The copied, downloaded and printed family brief includes costs and choices. There is no account sync or automatic sharing, and these values are not sent to optional analytics.
The planning timeline saves arrival and dining dates, per-meal window settings and checklist marks only when you choose Save. Delete removes that browser copy; shared-device users may see it. Calendar exports create all-day reminders, not reservations. You control downloaded files. These dates and statuses are not sent in optional analytics.
The budget comparison, room quotes, park/rest outline, park-mix preferences and planning board save only when you choose Save. Their saved copies remain in browser storage, are not sent to your account, and can be restored by anyone using this browser. Each tool provides review/restore and delete controls. Deleting a saved copy leaves the current on-screen values available until you leave; saving again creates a new copy. Clearing site data or private browsing may remove saved copies.
Copy and print actions can intentionally include the figures, choices and review status shown in the tool. Review the output before sharing it. Public transport and hotel-comparison links contain public location choices, not budgets, quotes, travel dates or private itineraries. Tool values are not included in optional analytics events.
What is shared
An offline or partner card is created only when you download or copy it. You can preview its dates, activity names, times, reservation labels and saved evenings first. Hotel name is opt-in. Personal notes and children’s ages are omitted. Copies you send to someone cannot be revoked by this site.
Nothing is shared automatically. New family-day links require sign-in with the recipient email you choose (or your own owner account). They show the selected day’s activities, reservation labels and times, travel choice, completion status, assigned tasks and any meeting, contact or backup details you deliberately enter. The assigned adult can complete their own tasks but cannot change your schedule. Private preference notes, children’s ages, costs and confirmation numbers are excluded. Links reflect the current saved day and can be revoked from your trip. Older summary links remain subject to their existing access controls.
Delete your plan
Use “Delete this trip” in the saved itinerary to remove its stored plan and revoke shared links. Browser drafts can be cleared with your browser’s site-data controls. Service-provider backups may persist according to their retention policies.
Your Disney Guide
AI chat is currently paused. The family planner and dining helper do not send new requests to cloud AI providers. Browser-local AI setup and conversation are also unavailable. Previously saved messages can be viewed or deleted under Make today easier. The following describes how AI data was handled while chat was enabled.
When you send a question, Sunday & Wonder sends it, up to three recent exchanges, your selected day’s itinerary, an overview of the whole trip (including completed activities, must-dos, reservations, and protected breaks), any prices you ask it to compare, and basic family preferences to OpenAI to generate an answer. These preferences include the number of adults and children, children’s age bands, resort, pace, nap timing, transportation, and spending preferences. General family and celebration notes are excluded. Food/dietary and accessibility/sensory notes are included only when you select their respective options. Recent chat can still contain information previously shared. Avoid entering unnecessary sensitive information in questions or reservation names.
By default, conversations stay in the open panel and are cleared when you close it or reload. For a saved trip, you can explicitly turn on private conversation history. Sunday & Wonder then stores the latest 50 future exchanges, including question text, answers, source links, day, trip version, and timestamps. You can delete that history and turn saving off in the guide; deleting the trip also deletes its saved chat. Saved conversations are visible only to the trip owner and are excluded from shared trip links. Up to three recent exchanges are included with the next question. Requests ask OpenAI not to store the generated response; OpenAI may retain API data under its own service and abuse-monitoring policies. Suggestions never change your itinerary until you review and accept them. Selecting “Check official Disney updates” enables OpenAI web search limited to Disney’s official website. Source links show when the search was performed, not a guarantee that every detail is current or available for your travel dates. Live ride waits and reservation inventory are not connected.
Reviewed planning fields
AI setup and conversation are unavailable. The guided planning fields do not start a model download, run AI generation or contact an AI provider. Use fictional or minimal functional preferences; leave out names, birthdays, diagnoses, booking IDs and credentials. Unapproved fields live in this page's memory and disappear on reload.
Preview shows the exact native-field changes. Apply changes the current form; existing tools may then retain approved fields in a tab draft. Account saving still requires the existing authenticated Save or Build action and ownership checks. An explicit "Carry this reviewed brief" action stores only approved structured fields and quote evidence in this tab for 30 minutes, with another review at the destination tool. The transfer uses no family data in URLs, analytics or logs. Discard removes the transfer. Local processing and browser storage are not account or database saving.
Optional family-product measurement
Wonder Passport, Worth the Upgrade? and Your Disney Test Drive offer a separate, optional product-measurement choice. It starts off. Allowing Google Analytics does not turn this on. If you opt in, we store a random identifier for this browser tab for up to 24 hours and count fixed actions such as viewing an offer, starting or finishing a preview, opening checkout, saving work and generating an export. General invitation and recognized Pinterest campaign labels may accompany these events.
This measurement is unlinked to your account, order and trip. Events contain no family names, ages, answers, prices, quotes, dates, notes, photos, email addresses or raw URL information. No fingerprinting or advertising tracking is used. Do Not Track and Global Privacy Control prevent it. Choose “Keep measurement off” in Product privacy choices to stop future measurement and remove this tab’s identifier. This does not delete previous unlinked events; we cannot link them to an account. Events older than 90 days are eligible for deletion, with bounded cleanup when new events arrive. Products, purchases and saves work without this consent.
Business reports keep optional browser activity separate from required purchase and refund records. Test orders are excluded from live orders. An exported file event means the file was generated, not that you saved, printed or shared it. Aggregate reports describe consenting browser-tab sessions and do not establish all visitors, purchase conversion or customer retention.
Usage & paid services
The preview records aggregate signed-in planning and engagement events, including pace, next actions, day adjustments and in-park use, without attaching account IDs or personal trip details to those event records. Device-local Calm Mode and per-tab measurement flags are stored in your browser. Anonymous visitors are not counted by this event endpoint. The AI Guide records monthly spending totals and the time of your last request to enforce its allowance. These records do not contain questions or trip details. Stripe handles checkout and payment-card details. Sunday & Wonder stores an order reference, package, payment status, price, account identifier and trip details to fulfill purchases and manage access or refunds. Full card numbers and security codes are not stored by Sunday & Wonder. Advertising and affiliate tracking are not active. Disabled advertisement placements are hidden and load no advertising scripts. When a Google Analytics property is configured, optional analytics loads only after you choose Allow analytics; you can withdraw through Privacy choices. It measures public page visits, guide and tool use, navigation clicks, checkout starts and eligible confirmed purchases using a browser identifier. This expanded scope requires a fresh choice; an earlier public-resource opt-in is not reused. Purchase events contain a fixed product identifier and name, the confirmed amount and currency, tax where available, and a random transaction reference used to prevent duplicate purchase counts. A browser-local marker also prevents repeated sends on reload and remains until you clear this site’s browser data. Known owner tests, test-mode orders and orders created before this measurement release are excluded; historic purchases are not backfilled. We do not send names, email addresses, children’s information, form answers, itinerary contents, account identifiers, payment-card details, or raw URL query parameters. A fixed list of general campaign labels, such as Pinterest and our named resource campaigns, may be used to understand which resources bring visitors. Unrecognized campaign labels are discarded; labels never identify a recipient or contain trip information. External referring sites are reduced to their origin, without paths or parameters. Private trip, account, sign-in and shared-trip pages are excluded. Checkout pages send only the optional checkout or confirmed-purchase events described above, with a fixed page address and no private URL parameters; they do not send page-view events. Purchase events require server-confirmed payment and active access. If consent is declined, browser storage is unavailable, the buyer does not return, or analytics is blocked, a purchase may be absent from Analytics; payment and access records remain authoritative. Advertising personalization and Google signals are disabled. Do Not Track and Global Privacy Control requests prevent optional analytics. Google may process consented usage data under its own privacy terms. Declining analytics does not affect planning or purchases. Aggregate reports describe consenting traffic and may undercount visitors.