Planner, private links, and on-device choices
The day planner works without an account, and a server copy is created only after the visitor chooses Save, Share, or email delivery.
Local browser storage
Planner choices may be saved in local storage on the visitor’s device so the plan remains available there. Clearing site data removes that local copy.
Optional private plan copy
A requested private link stores normalized planner choices such as party category, timing, transportation, interests, mobility or pet preferences, parking preferences, and selected or swapped stops. It does not store a name, email address, exact lodging address, reservation details, a conditions snapshot, or a raw IP address.
View and edit links
The site issues separate random view-only and editable links. Only one-way token digests are stored. Anyone who receives a bearer link can use the access it grants, so visitors should share the view-only link and keep the edit link private.
Retention and deletion
A private plan expires after 90 days while the planner service is active. A visitor holding its edit link can delete the server copy sooner. Scheduled cleanup resumes after a temporary plugin reactivation, and uninstalling the plugin removes every private plan immediately.
Legacy share links
Older shared plans may place normalized, non-sensitive choices in a Clearwater Beach Buddy URL. Email addresses are never added to a planner URL.
Trip Pack email delivery
This section applies only when the optional Trip Pack form is enabled and submitted. Email delivery remains off until the production Brevo privacy settings and direct-link behavior are verified.
Information sent
The form sends the email address, optional arrival date, placement label, and a same-site plan link to Brevo for the requested delivery.
Separate from the saved plan
The email address and optional arrival date are not written into the private plan record. The plan and delivery request remain separate.
No local subscriber database
Clearwater Beach Buddy does not save submitted email addresses, arrival dates, or raw IP addresses in WordPress options, posts, comments, or custom tables.
Brevo launch requirements
Before email is enabled, transactional logs must be limited to one month, rendered email previews must be disabled, marketing and analytics tracking must remain off, and a received test message must confirm that Brevo does not rewrite a private plan link through click tracking.
Abuse prevention
Short-lived rate-limit entries use one-way HMAC digests of the address or IP and expire automatically. They are not reversible contact records.
Optional marketing
The separate marketing box is unchecked by default. When selected, Brevo sends a double-opt-in confirmation; the address joins the marketing list only after confirmation.
Unsubscribe and deletion
Marketing emails must include Brevo-managed unsubscribe controls. A visitor can reply to the monitored sender shown in the Trip Pack email to request access or deletion.
Hosting and necessary technical data
Kinsta and WordPress may process request data needed to deliver, secure, and troubleshoot the site.
Server and security logs
These may include IP address, time, requested URL, browser identifier, and security events. Their retention is controlled by the active host and security configuration.
Cookies
WordPress may use necessary cookies for administrators and other enabled core functions. The public planner itself uses local storage and does not require an account cookie.
Private-link protections
Private plan pages and API responses are marked no-store and noindex, use a no-referrer policy, and are excluded from site analytics so the bearer token is not sent as a pageview identifier.
Analytics
This policy must be updated before enabling any new analytics, advertising, embedded tracking, or profiling service.
External services, children, and policy changes
Official-source links and visitor services are operated independently.
External links
City, county, state, federal, airport, transit, attraction, Kinsta, and Brevo pages apply their own privacy policies.
Children
The site is for general trip planning and does not knowingly request personal information from children. A parent or guardian should submit any Trip Pack request.
Changes
The policy and reviewed date will be updated when data collection, vendors, forms, analytics, advertising, or retention practices materially change.
Service policies and related site terms
Changing information belongs to the organization responsible for it. Open the source before acting on rates, rules, schedules, availability, or conditions.
Brevo privacy policy
Email delivery and confirmed marketing processing. Open source
Kinsta privacy policy
Hosting-provider privacy information. Open source
Terms and disclaimer
Limits on visitor information and external services. Open source