WANDERPOST
photographs of places you actually stood in

Privacy policy

Effective August 17, 2026 · Wanderpost (wanderpost.net)

The short version

Free, no ads, and your data is never sold. There are no ad networks, no analytics brokers, and no third-party trackers in the app or on this site. We collect the minimum the product needs, and nothing we collect is ever sold, rented, or shared for advertising.

What we collect, and why
Email address

Used to sign you in (we email you a one-time code) and for account-level notices. Never shown publicly, never shared.

Display name

Chosen by you; shown next to your public photos and check-in counts.

Location, only at the moment you use it

Wanderpost reads your location while you are looking at the map and when you check in — a check-in stores the place, the time, and that your presence was verified. There is no background location: the app never tracks where you go between check-ins.

Photos you take in the app

Check-in photos come from the in-app camera only. Photos of people are refused, and passers-by are automatically blurred before a photo is stored or shown. We strip photo metadata on upload — any camera GPS, device identifiers and serial numbers are removed from the stored file, not merely hidden. Approved photos are public on the place's page.

Movement summary (optional)

If you connect Health Connect, the app shows you a daily "distance while out" line. That reading never leaves your device — it is not uploaded, stored, or shared.

Map tiles

The explore map loads map imagery from OpenFreeMap, whose servers receive the ordinary connection information needed to send those tiles, such as your IP address. Wanderpost sends no account identity with a tile request.

What we never do

No selling or sharing personal data. No ad targeting. No third-party analytics. No background tracking. Trust and safety internals are never exposed. Businesses that run offers see aggregate visit counts only — never who you are.

Retention & deletion

Your data is kept while your account exists. Delete your account in the app (You → Settings → Delete account) and your personal data — email, name, check-ins, private content — is removed. You can also request deletion without the app: see support. Public photos you contributed can be removed on the same request.

Contact

Privacy questions: [email protected].