Last updated November 2, 2026
Your account: your name, email address, and a securely hashed password. If you sign in with Google, we receive your name, email, and profile picture from Google, and store the sign-in tokens Google issues (we don't use them to access your Google account).
Your travels: the countries you mark as visited or on your wishlist, cities you add (with their map coordinates and whether you've been or want to go), dates, and notes. When you save a map you made before creating an account, we also keep a short record of that save (a random id for the map and how many countries and places were added) for 90 days, so the same map is never added twice.
Sign-in sessions: for each sign-in we store the IP address and browser (user agent) the session was started from, so sessions can be secured.
Abuse protection: to limit repeated sign-in, sign-up and email requests, we keep request counters keyed by IP address. Each counter only matters for up to an hour after its last request, and is deleted within about a week.
Usage: anonymous page views via PostHog, plus a few events that tell us whether the map works for new visitors: marking a first country before signing up, clicking "Save your map", and whether saving a map to an account worked (with the number of countries rounded to a range). These never include which countries, cities, names or email addresses. Nothing is stored in your browser for analytics. PostHog counts visitors with a hash of your IP address and browser that changes every day, so visits can't be linked from one day to the next, and records no location. There are no screen recordings or tracking of other clicks, and we honor your browser's Do Not Track setting. Cloudflare Web Analytics also counts page views without cookies, recording the page, the site you came from, your browser and device type, and your country.
Server logs: our servers log each request (the address requested, the time, and technical details such as your IP address and browser) so we can fix problems.
We use a cookie to keep you signed in, plus short-lived ones while you sign in with Google. There are no advertising or tracking cookies. If you use Wayfar without an account, your map is kept in your browser's local storage on this device and isn't sent to us until you create an account or sign in and save it; then the copy in your browser is replaced by a note that it was saved. Clearing your browser's data for this site deletes a map that hasn't been saved. Anyone using the same browser profile can see it. If you change the animation setting on your map, that choice is saved in your browser's local storage too. After an app update, a timestamp is kept in session storage so the page reloads only once.
Only to run Wayfar: showing your map and stats, signing you in, sending account emails (verification and password resets), protecting against abuse, and improving the site. We don't sell your data or use it for advertising.
We use your account and travel data to provide the service you signed up for. Sessions, abuse protection, bot checks and server logs rely on our legitimate interest in keeping Wayfar and its users safe, and anonymous usage analytics on our legitimate interest in improving the site.
These providers process data in the United States and elsewhere, so your data may be handled outside your country.
Your account and travels are kept until you delete them. Sign-in sessions end when you sign out or after about a week without use, and an expired session's record is deleted within a week. Rate-limit counters are deleted within about a week, records of saved browser maps after 90 days, and server logs within 7 days. We back up account data weekly to encrypted storage at Cloudflare and keep each backup for up to 12 weeks, so something you delete disappears from backups once those age out.
You can edit or remove any country or city at any time. You can permanently delete your account and all of its data from your profile page.
You can also ask for a copy of your data, ask us to correct it, or object to how we use it, by emailing privacy@wayfar.app. If you're unhappy with how we handle your data, you can complain to the data protection authority where you live.
If this policy changes, we'll update the date at the top of this page, and tell you by email about significant changes.
Questions about your data? Email privacy@wayfar.app.