Privacy Policy

Sedona Passport ("we," "us," "our") operates sedonapassport.com and the Sedona Passport mobile app. This policy explains what information we collect, how we use it, and the choices you have.

Information We Collect

• Account information — name, email address, and phone number when you create a free account, sign in, list a business, or purchase a Sedona Passport.
• Password — only for business owner accounts (stored as a salted hash, never in plain text). Customer sign-in is passwordless (a one-time emailed link).
• Payment information — handled entirely by our payment processor, Stripe. We never see or store your full card number.
• Location data — only if you participate in The Hunt and grant location permission, used to verify you're at a listed check-in point.
• Photos and videos — only if you upload them, e.g. as part of a Hunt submission or a business listing.
• Messages — content you send through our contact form, support inbox, or the Aurora chat assistant.
• Technical information — IP address and browser user agent, used for security (rate limiting and bot prevention) and basic analytics.
• Referral information — if you arrive via an affiliate or friend-referral link, we record the referral code so the right person gets credited.

How We Use Your Information

• To create and manage your account and process purchases
• To send transactional email — sign-in links, purchase confirmations, renewal reminders, and replies to messages you send us
• To operate features you use — deal redemption, The Hunt, the affiliate and referral programs, and the Aurora assistant
• To detect and prevent spam, fraud, and abuse
• To improve the site and, if you've told us not to, we won't send marketing email

Cookies

We use a small number of cookies, all first-party (set by sedonapassport.com, not a third-party tracker):

• Session cookies — keep you signed in as a customer, business owner, or admin. These are httpOnly and cannot be read by JavaScript.
• Referral cookies — remember an affiliate or friend-referral code for up to 180 days so credit is attributed correctly even if you complete a purchase later.

Who We Share Information With

We don't sell your personal information. We share it only with the service providers that help us run the site, each of whom is only given what they need to do their job:

• Stripe — payment processing
• Resend — transactional email delivery
• Cloudflare — bot protection (Turnstile) and media storage
• Dropbox — business listing photo storage
• Anthropic — powers the Aurora chat assistant and processes the messages you send it
• Mapbox — powers the trail and business maps

We may also disclose information if required by law, or to protect the rights, property, or safety of Sedona Passport, our users, or the public.

Data Retention

We keep account and transaction information for as long as your account is active and as needed to meet our legal and tax obligations. You can ask us to delete your account at any time (see below).

Your Choices

• You can update your name, email, and phone number any time from your account dashboard.
• You can ask us to delete your account and associated personal information by contacting us — see below. We'll retain what we're legally required to (e.g. payment records for tax purposes).
• If you're in a jurisdiction that grants you specific data rights (such as the EU, UK, or California), those rights apply and you can exercise them by contacting us at the email below.

Children's Privacy

Sedona Passport is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do.

Contact Us

Questions about this policy or your data? Contact us.