Privacy Policy

Last Updated: October 2025

1. Introduction

Welcome to ThemePark Atlas. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website.

This policy applies to all users of ThemePark Atlas and complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

ThemePark Atlas is owned and operated by an individual based in the United States. For the purposes of data protection law, the data controller is ThemePark Atlas, 19786 W Roma Ave, Litchfield Park, AZ 85340, USA. You can reach us at themeparkatlasinfo@gmail.com.

2. Data We Collect

We collect and process the following types of information:

2.1 Information You Provide

Account Information: When you create an account, we collect your email address, username, and password
Profile Information: Any additional information you choose to provide in your profile
Communications: Information you provide when contacting us or providing feedback

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, time spent on the site, click patterns, and interactions
Technical Data: IP address, browser type and version, device type, operating system, screen resolution, and referring website
Analytics Data: We use web analytics services to collect aggregated statistics about site usage and performance
Cookie Data: Information stored in cookies and similar tracking technologies (see Section 5)

We do not intentionally collect or request sensitive personal information (such as precise location, government identifiers, or health data). Please avoid submitting that kind of information to us.

3. How We Use Your Data

We use your personal data for the following purposes:

To Provide Our Service: Create and manage your account, deliver requested features, and provide customer support
To Improve Our Service: Analyze usage patterns, identify technical issues, test new features, and optimize performance
To Personalize Your Experience: Customize content and features based on your preferences and usage history
To Communicate: Send service-related notifications, respond to inquiries, and provide updates about changes to our service
For Security: Detect, prevent, and address technical issues, fraud, and abuse
For Legal Compliance: Comply with applicable laws, regulations, and legal processes

4. Legal Basis for Processing (GDPR)

Under GDPR, we rely on the following legal bases to process your personal data:

Consent: When you accept non-essential cookies (including analytics and advertising cookies), opt in to marketing emails, or provide optional profile information
Contract Performance: To provide the services you've requested when creating an account
Legitimate Interest: To secure and maintain the service, prevent fraud or abuse, respond to your direct inquiries, and measure basic service performance using aggregated, non-cookie data — balanced against your rights and interests
Legal Obligation: When required by law

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and collect usage information.

Essential cookies load automatically because they are required for the website to function. All other cookies and trackers (analytics, marketing, and affiliate) are disabled by default and will only load after you provide explicit consent through our cookie banner or settings page. You may withdraw that consent at any time.

5.1 Types of Cookies We Use

Essential Cookies

Required for the website to function properly (authentication, security). These cookies cannot be disabled.

Cookie Name: themeparkatlas_cookie_consent

Purpose: Stores your cookie consent preferences

Duration: 12 months

Analytics Cookies

Help us understand how visitors use our site, which pages are most popular, and how users navigate. Only loaded with your consent.

Service: Vercel Analytics

Data Collected: Page views, session duration, browser type, device info (anonymized)

Duration: Session and up to 26 months

Marketing & Advertising Cookies (Not Currently Active)

We may use marketing and advertising cookies in the future to support affiliate partnerships and advertising networks. When active, these cookies would track clicks, conversions, and deliver relevant advertisements, and may track activity across multiple websites. They would only be loaded with your explicit consent.

Planned Purpose: Affiliate marketing, conversion tracking, personalized advertising

Data That Would Be Collected: Click activity, browsing behavior, purchase/conversion events

Planned Duration: Would vary by partner (typically 30-90 days)

5.2 Managing Cookies

You can control cookies through:

Our cookie consent banner (displayed on your first visit)
Our Cookie Settings page - Manage your preferences at any time
Your browser settings - most browsers allow you to refuse or delete cookies

We honor browser-based Global Privacy Control (GPC) signals and treat them as a request to decline marketing and advertising cookies. We also re-request cookie consent at least every 12 months so that your preferences stay current.

Note: Blocking essential cookies may prevent certain features from functioning properly. Opting out of advertising cookies may result in less relevant advertisements, but will not reduce the total number of ads you see.

6. Third-Party Services

We use third-party services to help operate and improve our website:

Web Analytics: We use Vercel Analytics to collect aggregated usage statistics. Vercel only provides us with high-level metrics (such as page views and device types) and does not give us access to raw personal data. Learn more in the Vercel Privacy Policy.
Authentication Services: We use AWS Amplify and AWS Cognito to manage user accounts and authentication securely. These services process your email address, password (hashed), and profile information. Learn more in the AWS Privacy Notice.
Hosting and Infrastructure: We host the website with cloud providers located in the United States (currently Vercel). These providers process technical data (such as IP addresses and server logs) to deliver the service and keep it secure.
Affiliate Marketing & Advertising (Not Currently Active): We are not currently participating in any affiliate marketing or advertising programs. In the future, we may participate in such programs (for example, Amazon Associates, CJ Affiliate, or similar networks). If we do, and when marketing cookies are enabled, affiliate partners may use cookies, tracking pixels, or similar technologies to attribute clicks and conversions. Data such as your IP address, browser information, referring page, and browsing behavior may be shared with these partners for that limited purpose. We will update this section with the specific partners we use and link to their privacy notices before activating any such relationships.

These third-party services have their own privacy policies and may collect data independently. We carefully select partners that provide adequate data protection safeguards.

7. Data Retention

We retain your personal data only as long as necessary:

Account Data: Retained while your account is active and for a reasonable period after deletion to comply with legal obligations
Analytics Data: Aggregated and anonymized within 30 days, retained in anonymized form
Cookies: Essential cookies up to 12 months; analytics cookies up to 26 months
Communications: Retained to respond to inquiries and maintain consent records

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you

Right to Rectification

Correct any inaccurate or incomplete personal data

Right to Erasure (“Right to be Forgotten”)

Request deletion of your personal data in certain circumstances

Right to Restrict Processing

Request that we limit how we use your personal data

Right to Data Portability

Receive your data in a structured, commonly used format and transfer it to another service

Right to Object

Object to processing of your personal data based on legitimate interests

Right to Withdraw Consent

Withdraw consent at any time where we rely on consent to process your data

Right to Lodge a Complaint

File a complaint with your local data protection authority

To exercise any of these rights, please contact us at themeparkatlasinfo@gmail.com or by mail at 19786 W Roma Ave, Litchfield Park, AZ 85340, USA. We will respond to your request within 30 days.

9. California Privacy Rights

If you are a California resident, you have the right to request access to, correction of, or deletion of your personal information. You also have the right to opt-out of any sale or sharing of your personal information (we do not currently sell or share data, but if we do in the future through advertising, you can manage this via cookie settings). You will not be discriminated against for exercising these rights.

To exercise these rights, contact us at themeparkatlasinfo@gmail.com. We collect basic identifiers (email, username, IP address), internet activity (browsing history, interactions), and usage information (attraction views, saved favorites), which we share only with service providers and as required by law.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration:

Encryption: We use HTTPS/TLS encryption for data in transit and encrypt sensitive data at rest
Access Controls: As a solo operation, access to personal data is strictly limited to the site operator and necessary service providers (such as AWS and Vercel)
Regular Security Reviews: We conduct periodic security assessments and vulnerability scanning
Secure Authentication: We use secure password hashing and may implement multi-factor authentication

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

11. International Data Transfers

ThemePark Atlas is based in the United States. If you access our website from outside the United States, your information may be transferred to, stored, and processed in the United States where our servers are located. We handle all international data transfers in compliance with applicable data protection laws including GDPR.

12. Children's Privacy

Our service is not directed to children under 13 years of age (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under this age.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete that information from our systems.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a new "Last Updated" date. We encourage you to review this policy periodically. Continued use of our services after changes take effect constitutes acceptance of the revised policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: themeparkatlasinfo@gmail.com

Postal Mail: 19786 W Roma Ave, Litchfield Park, AZ 85340, USA

For GDPR-related inquiries or to exercise your data protection rights, please clearly state “GDPR Request” in your email subject line.

Loading magical experiences...