Wander

What we store

• Your profile: email address, display name, home airport, currency, nationality, country of residence and residence status, and the expiry dates of your passport and permit. Wander uses these to search from the right airport and to check entry requirements for your trips.
• Watches, deals and trips: the routes, dates, budgets and hotels you follow, the prices we found for you, and trips you save, including what you paid if you record it.
• Travel documents: files you upload to your vault, such as passport scans, visas, permits, insurance, bookings and tickets, with their expiry dates. When you press Read on a document, we also store the details read from it, such as names, the expiry date and the last 4 digits of a passport number. Files are encrypted on our storage.
• Companions: names, nationality and document expiry dates of people you travel with, which you enter yourself or link from a friend's profile.
• Boards and friends: places you pin, notes, memories and photos, messages on shared boards, and your friends list. We remove location data (EXIF) from photos you add to a board. When you pick a photo, your browser reads its location to suggest a city; the location itself isn't uploaded.
• Invitations: if you invite someone by email, we store their address and email them the invitation, even before they sign up.
• Share links: a trip you share is visible to anyone with its link. People who open it can leave a name and a comment, which we store with the share.
• How you use results: which itineraries you view, save or click to book, with plain details such as price and stops. Wander uses this only to rank your own results.
• Notifications: if you turn on browser notifications, the address your browser gives us for them and your browser's description; if you connect Telegram, your Telegram chat id.
• Usage and errors: daily counts of the features you used, how long they took and what they cost us to run, and errors that happened while you used Wander. For errors in your browser, that includes the error message, the page address without its query, and your browser's description.

Wander doesn't take payments and stores no card details. Bookings happen on the provider's site.

Who processes it

Price and reference sources

These receive search details only, never your name or email address.

• Flights and hotels: Aviasales (Travelpayouts), Duffel and LiteAPI receive routes, dates, cabin, the number of travellers and hotel ids.
• Places, weather, holidays, currencies and events: OpenStreetMap services, Wikidata, Open-Meteo, Nager.Date, public exchange-rate services, Ticketmaster and city event feeds receive a city, coordinates or a date.
• Maps and photos: your browser loads map tiles from OpenStreetMap and pictures from Wikimedia Commons and event sites directly, so those sites see your IP address.

AI

Anthropic (Claude) is used only by the features that need it, and we don't send your name, email or account id with any request.

• Planning in your own words: your sentence, plus your home airport and currency. This includes messages you send to the Wander Telegram bot.
• City guides: the city and country.
• Reading a document: the whole document, only when you press Read.

Under its commercial terms, Anthropic doesn't use this data to train its models.

Messages

• Resend delivers our emails: price alerts, digests and invitations.
• Browser push services, such as Google, Apple or Mozilla depending on your browser, deliver notifications if you turn them on. Their content is encrypted so the service can't read it.
• Telegram receives your chat id and the messages we send you, if you connect it.

Booking links

"Book" opens the provider's site in a new tab. Aviasales links carry our affiliate id, so we may earn a commission if you book. It doesn't change the price you pay, and we don't send the provider anything about you. We record that you clicked, to rank your results.

Sign-in and hosting

You sign in with PowerExt Account. Wander runs on our server in Helsinki, with Hetzner and Cloudflare as described in the overview.

Who sees your data in Wander

• Your watches, trips, documents and companions are visible only to you.
• Members of a board you share see its pins, notes, photos and messages, and each other's names.
• Anyone with a share link sees that trip's itinerary and prices.
• Wander's admins can see your profile, usage and errors to support you and keep the service running.

Cookies and storage

• travel_session: keeps you signed in, for 30 days.
• travel_powerext: used during sign-in only, for 10 minutes.
• Your browser also keeps a few display settings, such as which board views you've seen. Wander has no advertising or analytics cookies.

How long we keep it

• Your profile and content are kept until you delete them or your account.
• Errors are kept for 30 days and usage counts for about 13 months.
• Sessions expire after 30 days.
• Prices we polled for a route are kept, because they contain nothing about you.
• Server logs and backups follow the overview.

Export and delete

On your profile page you can download everything as a zip, including your documents, and delete your account.

Deletion is immediate and can't be undone:

• Your documents are erased from storage.
• Your watches, trips, boards and the rest of your data go with your account.
• Shared boards you own pass to the longest-standing other member.
• Error records stay, without your user id, until they expire.

Deleting your Wander account doesn't delete your PowerExt Account. Questions: [email protected].