Privacy Policy

Your travel inspiration should never cost you your privacy

Wanderlust protects the information you entrust to us across our browser extension, our website (https://www.wanderlustapp.io), and any subdomains of wanderlustapp.io. This policy explains what we collect, how it is used, and the choices you have.

No data sales
Your information is never sold to third parties and is only used to deliver Wanderlust's core features.
Secure infrastructure
We run on Tier 1 cloud infrastructure with encryption in transit and at rest for every piece of data.
Built with choice
Optional browser permissions and granular controls let you choose exactly what the extension can access.

What information we collect and why

We only collect the information needed to provide Wanderlust's features, improve quality, and keep the service secure.

Wanderlust account information

Your name, email, account settings, and extension data (such as to-dos and links) are securely transferred and stored only so you can use Wanderlust. We never share this information with third parties outside of what is described in this policy.

  • Account content like notes, links, and countdowns stay private to you.
  • Support requests are handled internally by trusted Wanderlust team members only.

Payment information

Upgrading to Wanderlust Pro requires basic billing details. All payment processing is performed by Stripe, Inc., a PCI compliant provider.

  • Card details never touch our servers—they go directly to Stripe for secure storage.
  • Support specialists can view limited billing details (such as billing name, address, and last four digits) in Stripe only to help with cancellations, refunds, or account changes at your request.

Data accessible through WebExtensions APIs

The Wanderlust extension only accesses information that your browser explicitly allows. We cannot and do not track your browsing history.

  • Optional permissions are requested only when you enable specific features.
  • Your browser clearly communicates every permission before anything is enabled.

Feature usage data

To improve Wanderlust, we collect anonymized data about how features are used—such as when a photo source is opened or a location is favorited, not the content itself.

  • Google Analytics receives some usage data without any information that can identify your account.
  • IP addresses are anonymized before analytics processing takes place.

Vendors and sub-processors we rely on

We partner with trusted vendors to power pieces of the Wanderlust experience.

MangoMandrillUnsplashGoogle AnalyticsMapboxGoogle MapsVercelSlackNotionGmailMailchimpStripeRailway

Your privacy rights

Wherever you are, Wanderlust empowers you to control your data.

Refuse to provide personal data

You can decline to share optional personal data. Doing so may limit access to Wanderlust features that rely on that information.

Access and update your data

Manage your profile details, billing information, and Wanderlust items at any time directly inside the extension.

Delete your account

Remove your account any time from the profile page. You can also request an expedited hard delete from our support team.

Export your information

Contact us for a full export of your Wanderlust data if you ever need a copy.

Submit complaints

Reach out to us with any concerns. EU residents can also contact their local data protection authority if they are unhappy with the resolution.

What happens when you delete your account?

You stay in control even when you leave Wanderlust. Here is exactly what happens after you request deletion.

Immediate
Account flagged as deleted

Once you delete your account, it is marked as deleted and no longer accessible in Wanderlust.

Within 90 days
Grace period for recovery

We retain your encrypted data for up to 90 days solely to restore the account if the deletion was accidental or malicious.

Up to 35 additional days
Encrypted backups

After a hard delete is processed, remnants may exist in encrypted backups for up to 35 more days before they are fully purged.

Want to skip the grace period? Contact us to request an expedited hard delete, and we will remove all personal data from our databases as quickly as possible.

TikTok integration

Our TikTok integration enhances your experience by letting you explore community content without leaving Wanderlust.

We may access TikTok user content (such as videos and images) to personalize your experience. We also share limited device and usage information with TikTok so they can improve their services and understand how our integration performs.

Everything exchanged with TikTok follows their Developer Terms of Service and privacy policy. We will never share your TikTok-related information with other third parties except where required by law.

Security is paramount: we monitor our systems, use encryption, and store any related information securely.

Security at every layer

Safeguarding your inspiration board requires more than strong passwords. These are the safeguards we have in place.

Tier 1 infrastructure

We operate on Railway, a Tier 1 cloud provider, and constantly monitor our systems for suspicious activity.

Encryption in transit

All communication between you and Wanderlust is protected with HTTPS/TLS, with HSTS enabled across every domain we operate.

Encryption at rest

Every database and backup is encrypted at rest to keep your data safe even when stored.

Wanderlust may update this Privacy Policy from time to time. We encourage you to revisit this page to stay informed. Continuing to use Wanderlust after a change means you accept the updated policy.

If you have questions or need help with any privacy request, please contact us.

Last updated March 28, 2023.