Share the plan, not the paperwork

• 🔒
  Confirmation numbers Booking references stay with the family that holds them.
• 🔒
  Exact costs Per-family prices and totals are never in the shared link.
• 🔒
  Who paid Payment details stay private to the family that paid.
• 🔒
  Per-family room rates A family's nightly rate is redacted — the group sees only the projected whole-party total.
• 🔒
  Private family notes Notes marked private to a family never leave that family's own view.

These are enforced at build time — a shared record can't carry a confirmation number, an exact cost, or a payment detail, and private records never enter this view.