Privacy policy

Account information can include your name, email address, profile image, sign-in provider, and unit preference. Trip content can include photos, videos, captions, itineraries, places, dates, people tags, invitations, and memories you choose to add.

We also receive ordinary technical information needed to operate a website, such as request logs, device and browser information, IP address, and error details.

We use this information to authenticate you, store and display your trips, support collaboration, generate travel statistics, prevent abuse, troubleshoot problems, and improve the service. We do not sell your personal information.

Supabase provides authentication, database, and file storage. Vercel hosts the web application. Google provides Google sign-in when you choose it. Resend delivers transactional authentication and invitation email. Mapbox provides signed-in interactive maps, Geoapify can turn photo coordinates into place names, and Cloudflare Turnstile helps protect email sign-in from automated abuse. If you deliberately use an AI writing feature, the trip details shown to you in that feature may be sent to the configured AI provider to produce the requested draft.

Trips are private. There is no public or anonymous sharing: opening a trip page requires signing in, and every request is checked against your access before any trip content is loaded. Group members and people you invite see only what their access allows.

Photos and videos are kept in private storage and delivered through short-lived links that expire after five minutes. Nothing in your trips is publicly readable, and trip pages are excluded from search engine indexing.

An invitation is tied to the email address it was sent to, so forwarding an invite link does not let someone else accept it. Please do not upload content you do not have permission to share.

We keep your account information and trip content while your account is active, so that your trips are there when you come back. Content you remove in the app — a memory, a day, a stop — is deleted from your trip. Deleting a group deletes its trips along with the photos and videos in them, including the underlying files in storage.

You can download a copy of your account data or permanently delete your account in Settings. Account deletion always removes your profile, access, written memories, invitations, upload history, original files, and content in private trips that leave with your account. Before confirming, you can explicitly let surviving shared trips keep de-attributed display copies of photos and videos already in those trips. Those copies and their captions remain without your profile or account attached.

Complete deletion remains available in the same flow. If you choose it, every photo, video, caption, and written memory you contributed is removed, including content in shared trips. We rebuild affected trips from what remains: covers can change, memory books reflow, and empty automatically inferred places disappear. We do not leave a public or permanent placeholder for deleted media. If you are the sole owner of a group that still has another active account, you must transfer ownership or delete the group first.

Ordinary operational records such as security logs and encrypted backups may remain for their routine retention period before aging out. You can withdraw consent at any time by deleting your account. If you simply stop using Our Wanderbook, your content stays as you left it until you remove it.

Questions or privacy requests can be sent to hello@ourwanderbook.com.