Privacy policy
Last updated 2026-10-18. Controller: 10000 Solutions LLC, operating carnivalriderental.us. Contact: support@carnivalriderental.us.
What we collect, and why
- Event Access customers: your email, city, state, event date and ZIP (if given), event type, ride type, attendance and budget (if given), your purchase (amount, Stripe identifiers, status) and a record of which operators you unlocked and when, with a hashed IP address and browser type. Used to deliver your pass, support you, prevent abuse, and as evidence if a payment is disputed. Kept for seven years for accounting.
- Concierge visitors: event details, ride quantities, setup constraints and contact information you provide are saved in our private ledger even if you do not purchase. Event requests are saved for review, not automatically sent to operators. When you use automatic interpretation, your message and prior event details are processed through Vercel AI Gateway and the configured model provider. Operator contact records and credentials are never sent to the model. You can use the structured form without AI. If you ask us to email your options, we send them once. We send reminders about a chat search only if you also tick “remind me”: at most two over the following two days, through the same email system as the rest of the site. They stop after a purchase or when you unsubscribe, and unticking the box on a later request withdraws it. Emailed links never grant operator contact access.
- Operators: company and contact details you publish or give us, and details collected from your public website when we indexed your rides (with the source recorded). Used to list your inventory and, with Event Access, to put customers in touch with you. You can correct or remove them at any time: claims@carnivalriderental.us.
- Visitors: standard server logs (IP address, user agent, pages requested) kept briefly for security and to run the site. To save typing, the Connect form fills in your approximate city and state from your IP address (as our host reports it); you can change them, and nothing is stored unless you submit the form. No advertising trackers.
- Site analytics: Vercel Web Analytics counts page views, the site that referred you, campaign tags in the link (utm_source and similar), country and device type, without cookies and without identifying you. Pass, match and request pages are counted without their private links, and other link parameters are dropped.
Who sees what
- Operator contact details are shown only to customers with a valid, paid pass, one operator at a time, and never to search engines or anonymous visitors.
- Customer details are never shown to operators by us; you choose what to tell an operator when you contact them.
- Processors we use: Stripe (payments), Sharetribe (operator accounts and listings), Supabase (our access ledger), Vercel (hosting and site analytics), and our email provider (pass emails). Each receives only what its job needs.
- We don’t sell personal data and we don’t share it for advertising.
Cookies
A pass cookie, set only when you open a pass, proves to our server that your browser may see that pass. It holds no personal data beyond pass identifiers and expires after 30 days. The concierge also uses a 30-day opaque session cookie to resume your saved event after checkout. Funnel and lifecycle events record actions, record identifiers and your reminder choice, not message text or contact fields. Chat messages are kept in browser-tab session storage to continue your conversation and are sent to the model when you ask a follow-up question. Site analytics set no cookies. If you arrive from an ad or a tagged link, a 30-day cookie keeps that link's campaign tags (for example "google / cpc"), so we can see which campaigns lead to searches and purchases; it holds no personal data and no ad click identifiers. There are no advertising cookies.
Your rights
Ask us to access, correct or delete your data at support@carnivalriderental.us. We keep purchase records we must keep by law. Residents of states with privacy statutes (California and others) have the rights those laws give them; we honour them regardless of where you live.
See also the Terms of Use and the Event Access policy.