Privacy Policy

Overview

Wilder is an AI-powered adventure planning app built and operated as a solo founder project, primarily serving users in the United States. This policy explains what data we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it. We collect only what we need to provide and improve the service.

What data we collect

Account information

Creating an account is optional. If you sign up, we collect your email address and store it securely via Supabase. We use your email only to authenticate your account. We do not send marketing emails without your explicit consent.

Trip data

When you generate a trip plan, we store your trip brief — which includes your starting location, destination, activities, group size, dates, preferences, vehicle type, and gear — alongside the generated plan title. For signed-in users this data is linked to your account. For users without an account, no account identifier is attached, but your IP address is temporarily retained for rate limiting purposes (see below).

If you save a trip to your account, the full plan, brief, any journal entries, departure dates, and custom titles are stored and linked to your account.

If you share a trip plan, a copy is stored with a unique link token and is publicly accessible to anyone with the link for up to 90 days.

Account profile

For registered users we store your account status, the number of trips you have saved, and your daily plan generation count.

Gear locker

Gear items you add to your gear locker are stored in your account if you are signed in, so they persist across devices. Gear checklist state (which items are packed for a specific trip) and onboarding preferences are stored locally in your browser and are never transmitted to our servers.

Location data

If you use the Weekend Trip Near Me feature and choose to grant location permission, we use your approximate location (city and state level) to suggest nearby destinations. We do not store precise GPS coordinates. Location data is not shared with third parties beyond what is necessary to generate a trip plan through our AI provider. Location permission is entirely optional — you can always type a starting location manually instead.

IP addresses

We temporarily store IP addresses in a rate-limiting cache (Upstash Redis) to prevent abuse and enforce fair usage limits. IP address records are automatically deleted within 24 hours.

AI plan generation

When you generate a trip plan, your destination, trip preferences, group size, experience level, and other brief details are sent to Anthropic's API to produce your itinerary. We do not intentionally transmit your account identifier or email address to Anthropic. However, if you include personal information in free-text fields such as preferences, rig descriptions, or notes, that information will be sent to Anthropic as part of the plan generation request. This data is processed by Anthropic and subject to their Privacy Policy.

Adventure plans generated by Wilder are AI-produced and intended as suggestions only. Always verify safety information, trail conditions, permit requirements, and emergency contacts independently before any trip. Do not rely solely on AI-generated plans for safety-critical decisions.

Cookies and similar technologies

Wilder uses the following cookies and browser storage technologies:

• Authentication cookies — set by Supabase to keep you signed in. These are necessary for the service to function and cannot be disabled if you use an account.
• Google Analytics 4 — sets cookies to track page views, feature usage, and user behavior. Data is retained for 14 months per our GA4 configuration.
• Hotjar / Contentsquare — sets cookies to record anonymized session replays and generate heatmaps to help us improve usability. Session recordings are retained for 365 days.
• Vercel Analytics — collects anonymized performance and visit data. No personally identifiable information is collected.
• Browser localStorage — we use localStorage to store onboarding preferences, gear checklist state, and app settings on your device. This data is never transmitted to our servers and is not a cookie.

If you prefer not to be tracked by analytics tools, you can use a browser extension to block analytics scripts. You can also contact us at feedback@wilderadventure.com to opt out of analytics data collection.

Third-party processors

We use the following third-party services to operate Wilder. Each processes data on our behalf under their own privacy policies:

• Supabase — database and authentication. Stores your account data, saved trip plans, gear locker items, and journal entries. Privacy Policy
• Anthropic — AI plan generation. Receives your destination, trip preferences, group size, and experience level to generate adventure plans. No account identifiers are intentionally sent. Free-text fields you fill in may contain personal information you choose to include. Privacy Policy
• Google Analytics 4 — usage analytics. Collects page views and behavioral data. Data retained for 14 months. Privacy Policy
• Hotjar / Contentsquare — session replay and heatmaps. Records anonymized user sessions to help identify usability issues. Does not record passwords or payment fields. Recordings retained for 365 days. Privacy Policy
• Vercel — hosting and performance analytics. Hosts the Wilder web application and collects anonymous performance data. Privacy Policy
• Stripe — payment processing. Processes payment card data directly. Wilder never stores payment card numbers or CVV data. All payment data is handled by Stripe under their PCI-DSS compliant infrastructure. Privacy Policy
• Upstash Redis — rate limiting. Temporarily stores IP addresses to prevent abuse. Data is automatically deleted within 24 hours. Privacy Policy

Data retention

• Account data and saved trips — retained until you request account deletion.
• Anonymous plan data — trip details generated without an account may be retained temporarily to provide the service and for service improvement. No account identifier is attached to this data.
• IP addresses (rate limiting) — automatically deleted within 24 hours.
• Shared trip links — stored for 90 days from creation, then automatically deleted.
• After account deletion — we will delete all account-linked data within 30 days of a verified deletion request. Some data may be retained longer if required by law.
• Google Analytics data — retained for 14 months per our GA4 configuration.
• Hotjar session recordings — retained for 365 days.

Security

We use reasonable administrative, technical, and organizational safeguards to protect your personal data. Specific measures include encrypted data transmission (HTTPS), Row Level Security policies on our database so users can only access their own data, rate limiting to prevent abuse, and access controls that limit which systems can write to our database.

No method of data transmission or storage is completely secure. If you believe your account has been compromised or you suspect unauthorized access to your data, contact us immediately at feedback@wilderadventure.com.

Your privacy rights

Regardless of where you are located, you can make the following requests about your data at any time:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — ask us to delete your personal data. You can delete individual saved trips directly in the app. For full account deletion, contact us at the address below.
• Opt out of analytics — ask us to exclude you from Google Analytics and Hotjar tracking.

To make any of these requests, contact us at feedback@wilderadventure.com. We will respond within 30 days.

California privacy rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• The right to know what personal information we collect about you and how it is used.
• The right to request correction of inaccurate personal information.
• The right to request deletion of your personal information, subject to certain exceptions.
• The right to opt out of the sale or sharing of your personal information.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use sensitive personal information for purposes beyond providing the service.

To exercise your California rights, contact us at feedback@wilderadventure.com. We will not discriminate against you for exercising these rights. You may also contact the California Privacy Protection Agency at cppa.ca.gov.

What we don't do

• We do not sell your personal data to third parties
• We do not share your data for cross-context behavioral advertising
• We do not run advertising of any kind
• We do not collect precise GPS coordinates
• We do not send marketing emails without your explicit consent
• We do not share your trip plans with other users without your explicit action (sharing a plan)

Age requirements

Wilder is not directed to children under 13. Users who are minors should obtain parental or guardian consent before using the service.

If we become aware that a child under 13 has created an account without verifiable parental consent, we will delete their account and associated data promptly. Parents or guardians who believe their child has provided personal information to Wilder should contact us at feedback@wilderadventure.com.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the date at the top of this page. We encourage you to review this policy periodically. Continued use of Wilder after changes are posted constitutes your acceptance of the updated policy.

Contact

All privacy requests — including access, correction, deletion, and analytics opt-out — should be sent to feedback@wilderadventure.com. We will respond within 30 days.

California residents may also contact the California Privacy Protection Agency at cppa.ca.gov.