Privacy policy
Effective August 17, 2026 · Wanderpost (wanderpost.net)
Free, no ads, and your data is never sold. There are no ad networks, no analytics brokers, and no third-party trackers in the app or on this site. We collect the minimum the product needs, and nothing we collect is ever sold, rented, or shared for advertising.
Used to sign you in (we email you a one-time code) and for account-level notices. Never shown publicly, never shared.
Chosen by you; shown next to your public photos and check-in counts.
Wanderpost reads your location while you are looking at the map and when you check in — a check-in stores the place, the time, and that your presence was verified. There is no background location: the app never tracks where you go between check-ins.
Check-in photos come from the in-app camera only. Photos of people are refused, and passers-by are automatically blurred before a photo is stored or shown. We strip photo metadata on upload — any camera GPS, device identifiers and serial numbers are removed from the stored file, not merely hidden. Approved photos are public on the place's page.
You can choose a photo from your library for a private journal entry, including personal photos. Library access happens only when you open the chooser; only the photo you attach is uploaded. We remove image metadata and serve these photos only to your signed-in account. They never become public place photos or check-in evidence. Your optional day emoji is private too and is not automatically added to cards. Sharing a memory card is your explicit choice. Optional Daybook reminders are scheduled on your phone, with your permission; their generic text contains no journal content. Turn them off in Settings at any time.
If you connect Health Connect, the app shows you a daily "distance while out" line. That reading never leaves your device — it is not uploaded, stored, or shared.
The explore map loads map imagery from OpenFreeMap, whose servers receive the ordinary connection information needed to send those tiles, such as your IP address. Wanderpost sends no account identity with a tile request.
No selling or sharing personal data. No ad targeting. No third-party analytics. No background tracking. Trust and safety internals are never exposed. Businesses that run offers see aggregate visit counts only — never who you are.
Your data is kept while your account exists. Delete your account in the app (You → Settings → Delete account) and your personal data — email, name, check-ins, private content — is removed. You can also request deletion without the app: see support. Public photos you contributed can be removed on the same request.
Privacy questions: [email protected].