Privacy Policy

Last updated: September 3, 2026

This policy explains what information sedonaready.com (the “Site”) collects about you, why, who it is shared with, and the choices you have. The Site is operated by Sedona Ready (“we”, “us”, “our”). The policy covers the Site, the itinerary builder, the trail film library, and email you send us. Using the Site means you accept the practices described here.

The short version

  • We do not sell advertising space, use an ad network, or run ad trackers or third-party analytics on the Site — as of the date above there is no Google Analytics, Meta pixel or similar tracker. We do earn commissions from affiliate links and from Viator’s booking widgets, which are third-party content that loads on many pages; sections 2 and 3 explain what that means for you.
  • Reading the guides needs no account and collects only the technical data every website receives (such as your IP address and browser type), handled by our hosting, delivery and security providers.
  • The itinerary builder sends the details you type into it to our server and to Anthropic’s AI service to generate a plan. Do not enter anything you would not want processed that way. Plans stay in your browser unless you save them to an account or share them by link.
  • Buying a trail film needs your name, email address and a payment method. Payments are processed by SureCart and Stripe; we never see your full card number.
  • We do not sell your personal information, and we share it only with the service providers that run the Site, or where the law requires.
  • You can ask to see, correct, export or delete your information at any time by emailing hello@sedonaready.com.

1. Who we are

Sedona Ready is an independent travel guide to Sedona, Arizona, operated from the United States. For anything to do with privacy, contact hello@sedonaready.com or use the contact page.

2. What we collect, and why

Rather than list categories in the abstract, here is what happens for each thing you can do on the Site.

Reading the guides

You can read every guide without an account. When you visit, our web host, our content delivery network (Bunny.net) and our DNS and security provider (Cloudflare) receive the technical information your browser sends with every request: your IP address, browser and device type, the page requested, the referring page, and the time. This is used to deliver pages, cache them, protect the Site from attacks and abuse, and diagnose faults — nothing else. We do not combine it with other data to profile you. Our page cache (WP Rocket) stores copies of pages, not information about visitors.

Many pages embed content from other services: Viator booking widgets on tour and trail guides, and YouTube videos on a small number of pages. When a page containing embedded content loads, that provider receives your IP address and may set its own cookies, as described in section 3.

Building an itinerary

The itinerary builder asks for trip details: who is travelling, arrival and departure dates, interests, pace, budget, where you are staying, accessibility needs such as a wheelchair or stroller, and anything you type into the notes box. To generate a plan, those details are sent to our server, which combines them with our guide library and sends a request to Anthropic’s Claude API. Anthropic processes the request to return the plan, under its commercial API terms. Please enter only what is needed to plan the trip — no names, contact details, health information beyond what affects the walk, or anything else you would not want handled by an AI service.

We do not keep the details you enter or the generated plan on our server unless you save the plan while signed in. If you are not signed in, saved plans live in your own browser’s local storage and never leave your device. If you are signed in and choose to share a saved plan, we create a link; anyone with that link can view the plan’s name, settings and contents, so do not put private details into a plan you intend to share. To limit abuse, our server keeps a temporary count of requests per IP address, stored as a hash and kept for about an hour. The builder’s weather forecast is fetched by your browser directly from Open-Meteo, which receives your IP address in the process.

Buying and watching trail films

To buy a film we need your name, your email address, and a payment method, together with any billing detail your card issuer requires, such as a postal code. Checkout runs on SureCart, an e-commerce platform that stores your order, receipt and customer record on its servers on our behalf, and payment is taken by Stripe. Card details are entered into a form controlled by Stripe and go directly to Stripe; we and SureCart receive only a confirmation, the card brand and the last four digits. Stripe may use your details for fraud prevention under its own privacy policy.

A customer account is created for the email address used at checkout so that you can reach your film library. Films are streamed from Bunny.net’s video network using time-limited signed links, and Bunny.net receives your IP address when it serves the video. Our video player (Presto Player) records playback statistics — which film was played, when, and for how long — so we can see which films are watched and diagnose playback problems. For signed-in customers this is linked to your account.

We send transactional email — receipts, sign-in links and notices about your purchase — through SureMail. Delivery logs for those emails are kept for 30 days. We do not send marketing email, and we will ask before we ever start.

Team accounts

If a purchase is shared with a team, the team owner invites members by sending them an invite link. Joining a team creates an account for you with the name and email address you provide, and lets the team owner see that you are a member and remove you. Team owners should only invite people who are happy to be added.

Writing to us

If you write to us — by emailing hello@sedonaready.com or through the form on the contact page — with a question, a correction, a photo of a sign or a licensing enquiry, we keep the message and our reply for as long as needed to deal with it and to keep a record of corrections made to the Site. A form submission (your name, email address, topic, travel dates if you gave them, and message) is emailed to us and also stored on the Site for up to 90 days as a backup, then deleted automatically; the form does not record your IP address. Corrections may be reflected in a guide without naming you. We will not add your address to any list.

Booking tours or buying gear through our links

When you follow a link to Viator, Amazon or another partner, you leave the Site. What you do there — searching, booking, buying — is governed by that company’s privacy policy. Affiliate links carry an identifier that tells the partner the visit came from Sedona Ready, and the partner reports to us, in aggregate, that a commission was earned. We are not told who you are or what you bought.

3. Cookies and browser storage

We keep the cookies we set ourselves to the minimum the Site needs, and we do not track you across other websites. Embedded third-party content — chiefly the Viator booking widgets — can set its own cookies, including cookies its provider uses to attribute a later booking to this Site; those are listed below.

Set by the Site (essential):

  • WordPress sign-in and session cookies (names beginning wordpress_logged_in_, wordpress_sec_ and wp-settings-), set when you sign in so that your film library and saved plans open. They last for the session (two days), or 14 days if you tick “remember me”, and are removed when you sign out.
  • SureCart checkout cookies and storage, which keep your cart and checkout session together while you buy.
  • Cloudflare security cookies (such as __cf_bm and cf_clearance), which may be set to tell people from bots and to protect the Site from attacks. They do not identify you to us.
  • A browser local-storage entry named sib_saved_v1, which holds itineraries you save in the builder when you are not signed in. It stays in your browser until you delete it or clear the Site’s data.

Set by third parties embedded on some pages:

  • Viator (Tripadvisor) widgets on tour and trail guides may set Viator’s cookies to run the widget and to attribute bookings.
  • YouTube (Google) embeds, on a small number of pages, may set Google’s cookies when a video loads or plays.
  • Stripe’s payment components may set fraud-prevention cookies during checkout.

You can block or delete cookies and site data in your browser’s settings. Blocking essential cookies will stop sign-in and checkout from working; blocking third-party cookies will not affect the guides, and a script blocker set to block viator.com removes the widgets entirely without affecting the guides either. Because we do not track visitors across sites, there is nothing for a “Do Not Track” or Global Privacy Control signal to switch off, and we do not respond to those signals in any other way.

4. Who we share information with

We share personal information only with the companies that provide the services the Site runs on, each under terms that limit them to providing that service, and only the data the service needs:

  • Cloudflare — DNS, content delivery, security and bot protection (all requests).
  • Bunny.net — content delivery for images and scripts, and video streaming for the films.
  • Our web hosting provider — runs the WordPress site and its database.
  • SureCart — checkout, orders, receipts and customer accounts.
  • Stripe — payment processing and fraud prevention.
  • Anthropic — AI generation for the itinerary builder (the trip details you enter).
  • Open-Meteo — weather forecast for the itinerary builder (your IP address, sent from your browser).
  • SureMail — delivery of transactional email.
  • Gravatar (Automattic) — serves author avatar images on some pages and receives your IP address when the image loads.

Beyond those providers, we disclose personal information only when the law requires it; to protect the rights, safety or property of Sedona Ready, our readers or others; or as part of a sale or transfer of the Site, in which case the new operator would be bound by this policy. We never sell personal information, and we do not pass it to advertisers or data brokers. The Viator widgets and the YouTube player run as third-party content on the pages where they appear: their providers receive your IP address and can set cookies, as section 3 explains, but we do not hand them anything about you.

5. How long we keep it

  • Order and payment records: as long as needed for accounting and tax purposes, usually seven years.
  • Customer accounts and film libraries: until you ask us to delete the account. Deleting an account ends access to purchased films.
  • Saved and shared itineraries stored with an account: until you delete them or the account is deleted.
  • Itineraries stored in your browser: until you clear them.
  • Video playback statistics: while the account and the film exist; anonymous totals may be kept in aggregate.
  • Rate-limit counters: about one hour.
  • Contact form submissions stored on the Site: 90 days, then deleted automatically.
  • Transactional email logs: 30 days.
  • Email correspondence: as long as needed to handle it and to keep a record of corrections, then deleted or archived.
  • Server and security logs: retained by our providers for short periods under their own policies, typically days to a few weeks.

6. Your rights and choices

Wherever you live, you can ask us to tell you what personal information we hold about you, correct it, export it or delete it, and you can object to a use you think is unfair. Email hello@sedonaready.com from the address on your account where possible; we may need to verify that it is you before acting. We reply within 30 days and there is no charge. We will not treat you differently for exercising your rights.

If you are in California: the California Consumer Privacy Act gives you the right to know what personal information we collect and how it is used and shared, to delete it, to correct it, and to opt out of any sale or sharing. We do not sell personal information, and we do not send it to advertising networks. Third-party content that can set cookies on the Site — Viator widgets, YouTube embeds and Stripe at checkout — is listed in section 3; blocking third-party cookies in your browser stops it, and you can also email us to ask that we treat that as an opt-out request. You may use an authorised agent to make a request. Section 2 describes what we collect: identifiers, commercial information, internet activity and, for the itinerary builder, any characteristics you choose to enter.

If you are in the EEA, the UK or Switzerland: our legal bases are performance of a contract (purchases, accounts, the film library); our legitimate interests in running, securing and improving the Site (technical data, playback statistics, correspondence); and your consent where you choose to use the itinerary builder or to share a plan, which you can withdraw by not using those features. You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your local data-protection authority. The Site is operated from the United States, so your data is transferred to and processed there, where privacy law may differ from your own; our providers rely on their own safeguards, such as standard contractual clauses, for those transfers.

7. Security

The Site is served over HTTPS, protected by Cloudflare, and administered with strong authentication. Payment card data is handled only by Stripe, which is PCI DSS certified. No website can promise perfect security; if we learn of a breach affecting your data we will tell you, and the relevant authorities, as the law requires.

8. Children

The Site is written for adults planning trips, including trips with children. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

9. Changes to this policy

We will update this page when our practices change — for example if we add analytics, a newsletter or a new service provider — and change the date at the top. Material changes will be flagged on this page, and by email to customers where the change affects them.

10. Contact

Sedona Ready — hello@sedonaready.com — sedonaready.com/contact.