Privacy Policy

Last updated: September 8, 2026

1. Who We Are

RopeDrop Radar is operated by Waltz On Main LLC. This Privacy Policy explains how we collect, use, and protect your information when you use our Service. If you have questions, contact us at [email protected].

2. Information We Collect

Information you provide directly:

  • Name (first and last)
  • Email address
  • Password (stored as a one-way cryptographic hash that we cannot read)
  • Mobile phone number (if you opt into SMS alerts)
  • ZIP code, city, and state
  • Alert preferences and notification settings

Information collected automatically:

  • Login activity (timestamps, login count)
  • Alert interaction data (which alerts triggered, which were acted on)
  • Session information via secure cookies

Information from third parties:

  • If you sign in with Google, we receive your name, email address, and profile picture from Google.

3. How We Use Your Information

  • To create and manage your account
  • To send alerts you have configured (wait times, dining, Lightning Lane, Magic Key dates)
  • To deliver verification emails and account notifications
  • To improve the accuracy and relevance of our “Next Move” suggestions
  • To manage your subscription and process payments via Stripe or PayPal
  • To respond to support requests
  • To comply with legal obligations

We do not sell your personal information to third parties.

4. YouTube Live Chat Bot

RopeDrop Radar operates an automated assistant (the “Bot”) in YouTube live chat. The Bot answers questions about Disneyland Resort wait times, dining, showtimes, park hours, weather, and park trivia. It uses YouTube API Services.

Where the Bot operates. The Bot runs only in channels whose owner has authorized it. A channel owner authorizes the Bot by granting the Bot account moderator status on their channel and asking us to enable it. We keep a registry of authorized channels, and the Bot will not operate in a channel that is not on it.

What the Bot collects. When you send a message in a live chat where the Bot is active, we record:

  • Your YouTube channel ID and public display name
  • Whether you are a channel member or moderator of that stream
  • A count of your messages and the calendar dates you chatted
  • The text of messages addressed to the Bot, so we can improve its answers
  • The channel the message was sent in

We do not record the content of chat messages that are not addressed to the Bot, and we never collect your email address, payment details, or any private YouTube account data through the Bot. Live chat messages are public to everyone watching the stream.

Why we collect it. To reply to you by name, to answer your question, and to power optional community features such as chat streaks and a regulars leaderboard, which show display names only. We do not sell this data, use it for advertising, or build cross-site profiles.

How a channel owner revokes access. Remove the Bot account's moderator status, or email [email protected]. The Bot stops operating in that channel, and we delete all chat data collected from it. Data is stored per channel, so deleting one channel's data never affects another's.

How a viewer removes their own data. Email [email protected] with your YouTube display name or channel ID and we will delete your presence record, which also removes you from any leaderboard.

YouTube and Google. The Bot uses YouTube API Services. By interacting with it you are also subject to the YouTube Terms of Service, and information handled by Google is governed by the Google Privacy Policy. You can review and revoke this application's access to your data at any time through the Google security settings page.

Retention. Chat presence data is kept while the channel remains authorized and the data stays relevant to streaks and leaderboards. It is deleted when a channel owner revokes access, when a viewer requests deletion, or within 30 days of the Bot being permanently removed from a channel.

5. SMS & Text Messages

If you provide your mobile phone number and consent to SMS alerts, we will send automated text messages to your phone. These may include park wait time updates, dining reservation openings, Lightning Lane windows, Magic Key calendar alerts, and account notifications.

  • We do not share your phone number with third parties for their own marketing purposes.
  • SMS is delivered via a third-party messaging provider. They process your phone number solely to deliver messages on our behalf.
  • Reply STOP to any message to unsubscribe immediately. Reply HELP for support.
  • You can also manage or remove your phone number in your account settings at any time.

6. Email Communications

We send transactional emails (account verification, password resets, alert notifications) via Resend. We do not send unsolicited marketing emails. You may opt out of non-essential email communications in your account settings.

7. Data Sharing

We share your information only with:

  • Service providers who help us operate the Service (email delivery, SMS delivery, payment processing, hosting). They are contractually obligated to use your data only to provide their services to us.
  • Law enforcement or courts when required by law or to protect the safety of our users or the public.

8. Data Security

We use industry-standard security practices including password hashing (bcrypt), encrypted connections (HTTPS/TLS), and secure session management. No system is 100% secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.

9. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Aggregated, anonymized data (such as crowd scoring data) may be retained indefinitely.

10. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate data in your account settings
  • Request deletion of your account and data
  • Opt out of SMS or email communications at any time
  • Withdraw consent for data processing where consent is the legal basis

To exercise these rights, contact us at [email protected].

11. Cookies & Session Data

We use cookies solely for authentication (keeping you logged in) and session management. We do not use tracking cookies or share cookie data with advertising networks.

12. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have done so, we will delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact

For privacy-related questions or requests, contact us at [email protected].