Privacy
No ads, nothing sold, and no cookie from WanderGrade unless you sign in. Most of what you set here stays in your own browser. Here is what leaves it, and where it goes.
Last updated 21 October 2026
On your device
Your choices (home country, currency, travel month, budget, priorities, safety source, °C or °F, light or dark), your Wander List and your trip plan are saved in your browser's local storage, with a few small counters, like how many visits you've made and whether you closed the newsletter invite. The server stores none of it, except your Wander List if you sign in to save it. The site also keeps pages you've opened, for offline use. Clearing this site's data in your browser wipes it all.
Analytics
Cloudflare Web Analytics counts page views and how fast pages load. It sets no cookies and stores nothing in your browser, and Cloudflare says it doesn't fingerprint you or follow you across sites. No Google Analytics, no ad pixels.
static.cloudflareinsights.com Ā· cloudflareinsights.com
Your country
Until you've set a home country, Cloudflare, which every request passes through, tells the server which country you're connecting from, so the site can start you on your own country and currency. The server doesn't keep it; the site saves its guess in your browser, and you can change it.
Account (optional)
āSave your travel mapā signs you in with a one-time link, no password. Resend emails the link; it works once, within 15 minutes.
- Stored with Upstash, a database service, until you ask me to delete it: your email address, the countries on your Wander List, your newsletter choices, and when the account was created and last changed.
- One cookie,
wg_sess, keeps you signed in for 90 days from your last visit. It's the only cookie WanderGrade sets, and only once you sign in. - To stop abuse, sign-in requests are counted per email address and per IP address. The counters expire after an hour.
Sign out from the account panel. To delete your account, email hello@wandergrade.com from its address: I'll delete the account, sign out every device and take the address off the newsletter list.
Newsletter
Buttondown keeps the list and sends the monthly issue, through Postmark. It holds your email address, your currency if you pick one and, if you sign up with the form, the IP address you signed up from and its country. It can also record whether you open an issue and click its links. Every issue has an unsubscribe link. The signup form opens Buttondown in a new window.
Issue photos come from Wikimedia Commons, resized by images.weserv.nl, and flags from flagcdn.com; your mail app loads them like any image.
Booking links
Some links pay for the site: flights on Aviasales (through Travelpayouts), stays on Booking.com and Vrbo (through Stay22), tours on Viator and travel insurance from EKTA (through Travelpayouts). Each carries WanderGrade's partner ID and the trip: where you're going, your dates and, for flights, the city you'd fly from. Nothing else about you. If you book, WanderGrade may earn a commission, at no extra cost to you. The grades don't depend on it.
Nothing goes to these partners until you click. After that, the partner and the network in between set their own cookies to credit the booking, under their own privacy policies. Hostelworld links are plain links for now, with no partner ID.
Photos and Wikipedia
Photos and their credits load straight from Wikipedia and Wikimedia Commons, so the Wikimedia Foundation sees your IP address, your browser and which places' photos you're viewing. Where your browser allows third-party cookies, Wikimedia's image servers also set their own, including a year-long ID (WMF-Uniq). Fonts, maps and music come from WanderGrade's own server.
en.wikipedia.org Ā· commons.wikimedia.org Ā· upload.wikimedia.org Ā· thumb.wikimedia.org
AI buttons
āOpen in ChatGPTā, and the Gemini, Claude, Grok and Perplexity buttons beside it, build a prompt from what's on your screen: the destination, your dates, home country, passport, budget and the countries you've marked as visited. Nothing is sent until you click. The button opens that service with the prompt in the link's address, so it lands in your browser history and that service's logs, or copies it for you to paste. From there that service's privacy policy applies.
Sharing and feedback
A share link carries your list or trip, with your home country, currency and settings, inside the link itself, and only when you press Share. Your settings also show in the address bar, so they go with any address you copy. The feedback link opens a Google Form.
Hosting
The site runs on Render, behind Cloudflare. Like any web host, they see your IP address, your browser and the page you asked for, and may keep short-lived logs under their own policies. Cloudflare also asks your browser to report pages that fail to load, to a.nel.cloudflare.com. WanderGrade's own server log records the address of each request, settings in the link included, but not your IP address.
What I don't do
- No ads, and no advertising cookies.
- I never sell your personal data or share it for marketing. Your email address goes only to the services named on this page, each for its own job.
Your rights
Wherever you live, you can ask for a copy of what's stored about you, a correction, or its deletion: email hello@wandergrade.com. In the EU and the UK, data protection law (the GDPR and the UK GDPR) gives you those rights, and you can also complain to your data protection authority.
WanderGrade is run by one person. Most of the services named here are US companies, so your data may be handled in the United States. Unsubscribing stops the newsletter; Buttondown keeps the address, marked unsubscribed, until you ask me to delete it.