Privacy Policy

1. Who we are

Queue Compass (the "Service") is a wait-time prediction and trip-planning app for Disneyland Resort (Disneyland and Disney California Adventure), Universal Orlando Resort (Islands of Adventure, Universal Studios Florida, and Epic Universe), and Universal Studios Hollywood. The Service is operated by Brendan Wadlow as a sole proprietor based in Alberta, Canada, doing business as "Queue Compass" (the "Operator," "we," "us").

Contact: privacy@queue-compass.com

Queue Compass is not affiliated with, endorsed by, or sponsored by The Walt Disney Company, Universal Studios, Comcast NBCUniversal, or any theme park operator. All trademarks referenced in the Service are the property of their respective owners.

2. Scope of this policy

This policy covers personal information we handle when you:

• Use the Queue Compass mobile application ("the App")
• Use the Queue Compass website at queue-compass.com, including its sign-in and account pages
• Communicate with us by email or through support links in the App

3. What we collect

3.1 Information you give us directly

• Account information — you can use most of the Service without an account. If you sign in, we store your email address, a unique account identifier, and which sign-in provider you used, along with account-created and last-active timestamps and your service tier. In the App, sign-in is via Apple (Sign in with Apple, iOS) or Google. On the website, you can also sign in or sign up with an email address and password; that password is handled entirely by Supabase, our authentication provider — it is sent by your browser directly to Supabase and is never sent to, seen by, or stored on our own servers. When you use Apple or Google sign-in, we receive only the identity confirmation and email those providers share; we never receive your Apple or Google password.
• Trip plans — if you save plans (requires an account), we store the plan name, park, the rides and options you selected, and the generated itinerary so you can retrieve them later.
• Ride alerts — if you set a wait-time alert (requires an account and notification permission), we store the ride, park, your chosen wait-time threshold, and a push-notification token for your device so we can deliver the alert.
• Preferences — selected park, theme, display and unit settings, and similar in-app options. These are stored on your device; if you sign in, they can also be synced to your account so they follow you across devices.

3.2 Information collected automatically

• Location — only if you grant permission, and only while the App is in the foreground. Used to show nearby rides and auto-detect which park you're at. We do not request background location access. Your coordinates are processed entirely on your device — they are never transmitted to our servers or stored anywhere. Only your on/off choice for the feature is saved on your device.
• Diagnostic / crash data — when the App crashes or hits an error, a report is sent to our error-monitoring provider (Sentry, see Section 5). Reports include the stack trace, device model, operating system and app version, your IP address, and the in-app navigation steps leading up to the error. The App also reports anonymous session events (app opened, foregrounded, backgrounded) to Sentry so we can measure crash-free-session rates. If you are signed in, your account ID and email address are also attached to crash and session data so we can investigate a report tied to your account when you contact us about it.
• Server logs — when the App or website requests data from our API, our hosting provider records standard request logs: IP address, timestamp, and the endpoint requested. If you are signed in, requests carry your account identifier so we can return your data, and your account's last-active timestamp is updated. Request logs are kept for no more than 30 days and are used for security, debugging, and abuse prevention.

3.3 Information we DON'T collect

• We don't collect your contacts, photos, microphone audio, camera images, or biometric data.
• We don't send your GPS location to our servers, ever.
• We don't use advertising identifiers (IDFA, AAID).
• We don't share data with advertising networks or data brokers.
• We don't run any third-party analytics or tracking SDKs in the App. The only third-party SDK that receives data from your device is the error monitoring described above.

4. How we use your information

• To provide the wait-time predictions, trip-planning, and alert features you request.
• To authenticate you when you sign in.
• To save and sync your plans, alerts, and preferences across your devices (if you sign in).
• To send you push notifications you have asked for (ride wait-time alerts).
• To diagnose and fix crashes and bugs.
• To prevent abuse of our servers (rate limiting, blocking malicious traffic).
• To respond to your messages when you contact us.

Legal bases (for users in the European Economic Area or United Kingdom): performance of a contract with you (delivering the Service you requested), our legitimate interests (operating the Service securely, debugging, fraud prevention), and your consent (for location access and push notifications, both of which you can withdraw at any time in your device settings).

5. Service providers we share information with

We use a small set of third-party providers to operate the Service. We share only what is necessary for each provider to do its job.

• Supabase, Inc. (United States) — authentication and account database. Handles sign-in and stores your account credentials; our servers verify your session tokens against Supabase. supabase.com/privacy
• Railway Corporation (United States) — application hosting and the PostgreSQL database where your account record, saved plans, alerts, and synced preferences are stored. railway.app/legal/privacy
• Functional Software, Inc. (Sentry) (United States) — crash reporting and error monitoring, as described in Section 3.2. sentry.io/privacy
• Expo (650 Industries, Inc.) (United States) — delivers our push notifications (your device's push token passes through Expo's push service on its way to Apple or Google) and serves over-the-air app updates, which involves your device contacting Expo's servers. expo.dev/privacy
• Apple Inc. and Google LLC — app distribution (App Store / Google Play), final delivery of push notifications (Apple Push Notification service / Firebase Cloud Messaging), and sign-in (Sign in with Apple, Sign in with Google).
• Cloudflare, Inc. (United States) — domain and network services for queue-compass.com, including routing of email sent to our contact addresses. cloudflare.com/privacypolicy

We do not sell personal information, and we do not share it with any third party except the providers listed above or where required by law.

6. International data transfers

Our application and database servers are located in the United States. Personal information you provide will be transferred to and processed in the United States and other countries that may not have the same data-protection laws as your country of residence. For users in Canada, we rely on the contractual safeguards described in our service agreements with the providers listed above. For users in the EEA or UK, we rely on the European Commission's Standard Contractual Clauses or equivalent UK transfer mechanisms where applicable.

7. How long we keep your information

• Account data: kept while your account is active. When you delete your account in the App (see Section 9), your personal data is erased immediately, except where retention is required by law. We keep only an anonymous record that the account identifier was deleted and when — this contains no email address or other personal detail, and exists so a deleted account cannot be re-created by a stale sign-in.
• Saved trip plans and ride alerts: kept until you delete them (you can delete individual plans and alerts in the App at any time) or until your account is deleted.
• Crash data: retained by Sentry for 90 days, then automatically purged.
• Server request logs: retained for no more than 30 days.
• Aggregate, non-personal operational data (e.g., park wait-time observations we collect from public sources, and our models' prediction-accuracy statistics) may be retained indefinitely because it contains no information about you.

8. Security

We use industry-standard measures to protect your information: encrypted connections (HTTPS / TLS), sign-in sessions stored in your device's secure storage (iOS Keychain / Android Keystore), authentication handled by a dedicated provider rather than our own password database, and least-privilege access to our systems. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and any required regulators promptly if we learn of a breach affecting your personal information.

9. Your rights and choices

Regardless of where you live, you can:

• Access the information we hold about you.
• Correct information that is inaccurate.
• Delete your account and associated personal data.
• Export your data in a portable format.
• Withdraw consent for optional features: turn off location access or push notifications at any time in the App or your device settings.

To delete your account, open the App and go to Settings › Delete My Account. This is immediate and permanent: it erases your account, your saved trip plans, and your ride alerts, and it cannot be undone. You can also delete individual saved plans and alerts without deleting your whole account.

To exercise any of the other rights above, email us at privacy@queue-compass.com from the email address on your account. We respond within 30 days and do not charge a fee for these requests.

Canadian residents: you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial privacy law (including Alberta's Personal Information Protection Act). You may file a complaint with the Office of the Privacy Commissioner of Canada or, in Alberta, the Office of the Information and Privacy Commissioner of Alberta.

EEA / UK residents: you have rights under the GDPR, including the right to lodge a complaint with your local supervisory authority.

California residents: you have rights under the California Consumer Privacy Act (CCPA) including the right to know, delete, and opt out of "sale" of personal information. We do not sell or share personal information for cross-context behavioral advertising.

10. Children's privacy

Queue Compass is intended for general audiences and is not directed at children. We do not knowingly collect personal information from children under 13 (or under 16 in jurisdictions where that is the applicable threshold). If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@queue-compass.com and we will delete it.

11. Cookies and similar technologies

Our website (queue-compass.com) uses minimal browser storage:

• Local storage for your selected theme (light/dark) and last-viewed park.
• A session cookie (sb_token) set only if you sign in on the website. It holds your sign-in token so you stay logged in, is marked HTTP-only and secure, and expires after 7 days or when you log out.
• Web fonts — our web pages load fonts from Google Fonts (fonts.googleapis.com), which means Google receives your IP address and browser details when a page loads. The App bundles its fonts and makes no such request.

We don't use advertising cookies, cross-site tracking pixels, or third-party analytics on the website.

12. Changes to this policy

We may update this policy as the Service evolves. If we make a material change — one that expands what we collect, changes your rights, or shifts our legal posture — we'll update the "Effective" date at the top and notify you in the App or by email at least 14 days before the change takes effect. Continued use of the Service after a change constitutes acceptance of the updated policy.

13. Contact

Questions, requests, or complaints regarding this policy or your personal information:
privacy@queue-compass.com
Queue Compass · Brendan Wadlow, Alberta, Canada