What Wanderlist keeps, and who sees it

Updated 24 October 2026

Wanderlist is a personal, non-commercial app for keeping lists of places you want to visit and planning trips, on your own or with people you invite. This page explains what it stores, who can see it, which services handle it, and how to delete it. Questions: hquizzagan.dev@gmail.com.

What it stores

From your Google account, when you sign in: your name, email address, profile picture and Google account ID. Wanderlist asks Google only for your basic profile and email address, nothing else in your Google account.
What you add: collections and their places (each place's name, address, country and map position, from OpenStreetMap), and trips with their plans: dates, timetable entries, bookings, costs, notes and the names of the travellers you list.
Sharing: who is on each collection or trip, their role, and any invite links.
Cookies: sign-in cookies that keep you signed in, and a short-lived one that remembers which page to return to after signing in. No advertising or analytics cookies, and no tracking.

Who can see it

Your collections and trips are private until you share them.
People you share a collection or trip with see everything in it, and the names and profile pictures of its other members. They don't see your email address.
Anyone with an active invite link can join that collection or trip as a viewer after signing in. Links stop working after 7 days, and the owner or an editor can replace or turn them off sooner.
Whoever runs Wanderlist can access the database to run and fix the service.

Services that handle it

Supabase stores the database and handles sign-in. Your data is kept in Singapore.
Vercel hosts the app and handles each request, including your IP address.
Google signs you in.
Mapbox draws the maps. They load from Mapbox directly in your browser, so Mapbox receives your IP address and the area you're looking at.
OpenStreetMap Nominatim answers place searches. Wanderlist's server sends what you typed, and nothing about who you are.
ExchangeRate-API supplies daily exchange rates to Wanderlist's server. Nothing about you is sent.

Each has its own privacy policy. Wanderlist doesn't sell your data or use it for advertising.

Keeping and deleting it

Your data is kept while you have an account.

You can delete your account at any time from your account page (menu → Delete account). That removes your sign-in and profile, and takes you off everything shared with you. Collections and trips you own pass to the person who has been on them the longest, editors before viewers; those nobody else is on are deleted, with their places and plans. Your name can remain where other people typed it, for example as a traveller on their trip.

For a copy of your data, or help deleting it, email hquizzagan.dev@gmail.com.

Changes

If this policy changes, the date at the top changes too. Using Wanderlist is also covered by the terms of service.