What Wanderpoints collects, what it deliberately does not, where it lives, and what you can ask us to do with it.
Effective October 13, 2026.
Wanderpoints is a tool for recording award redemptions you have already made and seeing whether they were good value. You can reach us at privacy@wanderpoints.app.
Wanderpoints needs an account: the app opens on the sign in page, and until you make an account it collects nothing about you. The two exceptions are on the website, the waitlist and the page counts described under Measuring the website.
We never ask for and never store a card number, an airline or hotel login, a bank login, or anything retrieved from any of those. Wanderpoints has no ability to log into your loyalty accounts and is built so that it never will.
A share card is drawn on your device. Photographs you add are read, drawn onto the image, and let go. They are not uploaded and not stored, whether or not you use sync.
When you type a destination, we send that place name, and nothing else about you or your bookings, from our server to Unsplash to find photos. The photo you pick then loads from Unsplash's servers, so Unsplash sees your device's address the way any website does.
If you turn on expiry reminders in the iPhone or Android app, we store the notification token your phone gives us so the reminders can reach it. It is kept with your account, used for nothing but those reminders, and deleted when you sign out on that phone or delete your account. Reminders are sent through Google Firebase Cloud Messaging, which hands them to Apple's or Google's notification service to deliver.
If you join the waitlist we collect your email address, and your answer to the optional question about your best redemption if you choose to write one.
This list is short and we intend to keep it that way.
Your browser does store data for us, because the app is built on it: the trips and bookings you enter, and a sign in token from Firebase Authentication if you have an account. That is functional storage with nothing attached to it.
We use Netlify Analytics on our public pages: the home page, the waitlist, and pages like this one. Netlify hosts the site, and it counts visits from its own server logs rather than by running anything in your browser. It tells us how many people visited a page and roughly where they arrived from, in aggregate, so we can tell which pages work and which lose people.
It sets no cookies. It does not identify you, does not build a profile of you, does not follow you to other websites, and is not an advertising company. Your IP address is processed briefly so that one visitor is counted once, and it is not stored against you.
None of this follows you past the sign in screen. The app lives at the same address, so Netlify's count includes the moment it loads, and nothing after. There is no analytics inside the app, and nothing measures how you use it. Everything we know about your use of Wanderpoints is what you typed into it yourself.
| Who | What they hold | Why |
|---|---|---|
| Netlify | The site, waitlist form submissions, and aggregate page counts for the public pages. No cookies, no identifiers | Hosting, and seeing which pages work |
| Google Firebase | Your account email and name, synced travel data, and the notification token of a phone with expiry reminders on | Sign in, sync and reminders |
| Apple | Your Apple ID sign in, if you use it, and the delivery of reminders to iPhones | Sign in with Apple, and notifications |
| Kit | Waitlist email addresses | The announcement list |
| Unsplash | Destination names you search for | Finding trip photos |
| Google Workspace | Any email you send us | Correspondence |
| Lemon Squeezy | Payment details, as merchant of record | Payment, once paid plans launch |
If you are in the UK or the EU, the lawful bases we rely on are these. We process your account details and the data you enter because we need to in order to provide the service you asked for. We send you email about the product on the basis of your consent, which you can withdraw at any time. We keep the service secure and working on the basis of our legitimate interests.
We may compute anonymized, aggregated statistics from redemption data across all users and publish them as community statistics. Published statistics never identify a user and never describe an individual redemption. We publish a statistic for a loyalty program only where at least ten distinct users have contributed to it.
Creating a share card happens entirely on your device and publishes nothing.
If we offer a public feed, posting a card to it is a separate choice you make for each individual card. Consent is per card. There is no account setting that makes your cards public, and making one card public never makes another one public.
You can delete a card you have posted at any time. Deleting it removes it from the feed and from any cache or content delivery network serving it.
By posting a card you give us permission to display that card on the Wanderpoints feed. That permission ends when you delete the card. We acquire no other rights in your content, and we will not use it in advertising or marketing without asking you separately.
If you add a photograph to a card you post, you confirm that you have the right to share it and that anyone identifiable in it is content for it to be published. Photographs on cards you do not post never leave your device.
We may quote feedback you send us in our marketing, with your permission, and never in a way that presents an unusual result as a typical one.
Whoever and wherever you are, you can ask us to show you what we hold, correct it, delete it, or send you a copy in a portable format. If you are in the UK or the EU you can also object to processing, ask us to restrict it, and withdraw consent at any time.
You can delete your account yourself, at any time, from the bottom of Settings in the app. It takes everything described under how long we keep it with it.
Write to privacy@wanderpoints.app. We will not charge you and we will not make it difficult. If you are in the UK or the EU and you think we have handled your data badly, you can complain to your national data protection authority.
If you delete your account, the record is removed from our live systems immediately: your sign in, the phones registered for reminders, and your place in your household. If nobody else is in that household, its trips, bookings and cards go too; if somebody is, they keep them. Copies persist in our cloud provider's backups until their cycle expires them, which Google documents as a maximum of 180 days. Google applies cryptographic erasure, so the data is unrecoverable well before the backup itself expires.
Waitlist email addresses are kept until you unsubscribe.
We are based in the United States and our providers store data there. If you are in the UK or the EU, your data is transferred to the United States and handled under the safeguards our providers operate.
Wanderpoints is for adults. You must be 18 or older to use it. We do not knowingly collect anything from anyone younger, and if we learn that we have, we will delete it.
If we change this policy we will update the date at the top, and if the change is significant we will tell account holders by email rather than hoping they notice.
Terms of Service · How we value points · Back to Wanderpoints