What we collect, why, and how we use it.

Who we are

WondrOut is operated by WondrOut Pty Ltd (ABN 83 701 734 723), based in Perth, Western Australia. You can reach us at hello@wondrout.com for any privacy question, data access request, or complaint. If you need a postal address for a formal notice, email us and we will provide one.

If you're not happy with how we've handled a privacy matter, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. If you're in the EU or UK, you can complain to your local data protection authority.

What we collect

In your browser (localStorage)

• Saved spots and saved trips — the spots and curated trips you've bookmarked.
• "Been there" spots and "Done" trips — places you've ticked off, tracked for the "Your map" progress bar.
• Day plans — trips you build in "My Trip".
• Quiz answers — your last quiz result, so the Vibe tab can re-open it.
• Watch-feed preferences — mute/unmute state, hidden videos you don't want to see again, current scroll position.
• Anonymous device ID — a random string (not linked to your name or email) used to prevent duplicate tip submissions for the same spot.

If you're browsing without an account, this data stays in your browser unless you explicitly submit something (a tip, a shared trip, or a subscription).

If you create an account

You can browse WondrOut without an account. You need one to sync across devices, buy a paid list or guide, or publish as a creator. When you have an account, we store:

• Your email address, and your sign-in records (when and from roughly where you signed in).
• Your saved spots, "been there" ticks, saved trips and day plans — copied from your browser to our database so they follow you between devices.
• Anything you've bought, and which creators you follow.
• For creators: your profile, handle, bio, avatar, the content you publish, and your payout account details held by Stripe.

Accounts and this data are stored in Supabase (see "Third parties we use"). Sign-in emails are sent by Resend. Once you sign in, your saved data is no longer browser-only — it lives on our servers until you delete your account.

When you buy something

Paid trips, lists and guides are sold by independent creators and paid for through Stripe. Stripe processes the payment and, for creators, the payout.

• We never see or store your full card number. Card details go straight to Stripe.
• We store what you bought, when, how much you paid, the currency, and the email address tied to the purchase — because we have to, for access, refunds, and tax records.
• Stripe collects its own data to run the payment and meet its anti-fraud and identity obligations. Stripe's handling of that is covered by Stripe's privacy policy.
• You can buy as a guest without an account. We still keep the purchase record so you can get back in.

When you submit a tip or review

• The tip text (up to 500 characters)
• Optional first name (as it appears beside the tip)
• Anonymous device ID (so we can prevent spam from the same device)
• Submission timestamp

Tips are stored in our database and moderated before being shown publicly.

When you use the help chat

• What you type into the chat, and the assistant's replies
• The page you were on, and the time
• If you are signed in: your account ID and, for creators, your handle, so the assistant can check your own purchases and the right person gets your question
• An email address, only if you give one so we can reply

Your messages are sent to Anthropic's Claude to write each reply. Under Anthropic's API terms they are not used to train its models. We keep chat transcripts for 90 days so we can see which questions the assistant could not answer and improve it, then delete them. Please don't put card numbers or passwords in the chat; the assistant never needs them and will never ask.

When you share a trip

• The list of spots in the trip
• Optional submitter name
• Any notes or reflections you add

When you subscribe to our newsletter

• Your email address
• The source page (e.g. homepage footer)

When you join a creator's email list

• Your email address
• The creator profile you joined from
• Basic anti-spam details like IP address and browser type

We use this so that creator can contact you about their new lists, trips, codes or recommendations. We don't sell these emails.

When you upload a photo or video

Photos you upload are stored on Cloudflare Images and served from there. We strip nothing from the file automatically, so if your photo carries EXIF location data it may be uploaded with it — don't upload photos of places you don't want located. Videos you link stay on Instagram, TikTok or YouTube; we only store the link.

Location

If you grant location permission, we use your coordinates only to:

• Show distances to spots
• Centre the map where you are when you open it
• Sort results by nearest-first if you choose that sort

Your location is used on your device and isn't stored in your profile or sold. If you deny permission, the app still works — we just fall back to the city you're browsing.

How we use AI

Some content on WondrOut is drafted using AI. We use AI tools (currently Anthropic's Claude and Google's Gemini) to draft spot descriptions, summaries, category tags and travel notes, which our team reviews before publishing. Content written by a named creator is theirs, not AI-drafted, unless it says otherwise.

AI-drafted text can be wrong. Treat descriptions, travel times and access notes as indicative and confirm with the venue — see section 7 of our Terms.

We don't feed your personal data to AI models. The inputs are public place information — name, address, coordinates, category. Your saved spots, tips, location and purchase history are not used to train anyone's model, and we don't sell data to AI companies. The one place your own words reach an AI model is the help chat, where what you type is sent to Claude to write the reply (see "When you use the help chat" above).

Analytics

We use Google Analytics 4 (GA4) to understand which pages people visit and which features they use, in aggregate. GA4 receives standard page-view data (URL, referrer, screen size, anonymised IP) and sets a first-party analytics cookie (_ga) to tell repeat visits apart. We don't use Facebook Pixel, ad-network trackers, or anything that follows you across other websites.

If you accept the cookie banner we also use Microsoft Clarity to see how people use the site — for example where they click, how far they scroll and where they get stuck — so we can fix confusing pages. Clarity records clicks, scrolling and mouse movement on our pages and masks text you type into forms. It sets first-party cookies (_clck, _clsk). If you decline, Clarity never loads. Microsoft's privacy statement: privacy.microsoft.com.

Watch feed (Instagram & TikTok embeds)

The Watch tab plays short videos by embedding them directly from Instagram and TikTok. When a video loads, your browser connects directly to those platforms — they can see your IP address, browser type, and (if you're logged into them) your account. WondrOut doesn't see or store any of that.

We don't host the videos. We don't claim ownership of them. The "Follow" button links to the original creator's profile.

If you're a creator and want a video featuring your content removed from the Watch feed, email hello@wondrout.com with the video URL or your handle. We'll remove it within 7 days. (See also our copyright / takedown section below.)

Connecting your Instagram account (creators)

Creators can choose to connect a professional Instagram account so their new Reels turn into places on their WondrOut map. This is optional and only happens when you tap Connect and approve it on Instagram's own screen.

What we read: your Instagram username and account ID, and for each post its caption, link, cover image, media type and the time it was posted. If you also allow insights, we read view, reach and engagement numbers for your posts and account so we can show them in your creator analytics. We do not read your messages, followers' details or anything you have not posted.

What we do with it: we send a Reel's caption and cover image to our AI provider to work out which place it shows, and the place name to Google Places to find its location. If we are confident, the Reel is added to that place on your map; if not, it waits for you to confirm. The cover image is copied to our own image storage to use as the place's photo. We never post to your Instagram, and we never sell or share this data.

Comment replies (optional): if a creator switches on "Comment for the link", we receive the comments posted on their Instagram posts so we can spot their chosen keyword. When a comment has it, we send that person one private message on Instagram with a link to the place on the creator's WondrOut map, and, if the creator chooses, a short public reply under the comment. We keep the comment's ID, the commenter's Instagram username and ID, and whether the message was sent, so nobody gets the same link twice. We don't store the text of comments, and we never message anyone who didn't comment the keyword.

What we keep: your Instagram access token, encrypted, so we can check for new posts; and an import history of the posts we looked at and what we decided. Places you approve stay on your map until you remove them.

Disconnecting and deletion: you can disconnect from your creator settings at any time, or remove WondrOut in Instagram under Settings, Apps and websites. Either one deletes your token straight away. To delete everything we hold from your Instagram account, including the import history, your Instagram stats and the comment-reply record, use Meta's data deletion request or email hello@wondrout.com. You can check a deletion request's status at the link Meta gives you.

Third parties we use

• Supabase — stores our spot database, user accounts, creator and partner accounts, saved data, tips, and shared trips.
• Stripe — processes payments for paid trips, lists and guides, and creator payouts via Stripe Connect.
• Cloudflare Images & Stream — hosts and delivers spot photos and our own video highlights.
• Instagram & TikTok — power the Watch feed via their official embed APIs (see "Watch feed" above).
• Meta (Instagram API): lets creators who choose to connect their account import their Reels and see their post insights (see "Connecting your Instagram account" above).
• MailerLite — sends the weekly newsletter to subscribers.
• Resend — sends transactional emails: sign-in links, purchase receipts, access links.
• Anthropic (Claude) & Google (Gemini) — draft place descriptions from public place data, and Claude writes the help chat's replies (see "How we use AI").
• Open-Meteo — fetches local weather for the context strip (no personal data sent).
• Sunrise-Sunset.org — fetches local sunrise / sunset times.
• Google Analytics 4 — anonymised page-view stats.
• Microsoft Clarity — how people use pages (clicks, scrolling), only after you accept.
• Netlify — hosts the site and runs the backend functions.

Some of these are outside Australia — mainly the United States and the EU. By using WondrOut you accept that your data may be handled overseas by the providers above.

Cookies

We don't use advertising or cross-site tracking cookies. What's set:

• Essential — a session cookie that keeps you signed in, and Stripe's cookies during checkout. These can't be turned off without breaking sign-in and payment.
• Analytics — Google Analytics sets a first-party _ga cookie to count repeat visits; Microsoft Clarity sets _clck and _clsk (only after you accept).
• Not cookies at all — your saved spots, trips and preferences live in your browser's localStorage. Clearing your browser data for wondrout.com removes them.

How long we keep things

• Account data — until you delete your account, then within 30 days.
• Purchase and payout records — 7 years, because Australian tax law requires it. These survive account deletion.
• Published tips and shared trips — until you ask us to remove them.
• Newsletter subscription — until you unsubscribe.
• Analytics — GA4's standard retention window.
• Help chat transcripts — 90 days.

Your rights

You can:

• Delete everything on your device — clear your browser's site data for wondrout.com.
• Delete your account and the data attached to it — email hello@wondrout.com from the address you signed up with. We'll action it within 30 days. Purchase records are kept as described above.
• Request deletion of submitted content (tips, reviews, shared trips) — email us with your device ID or the tip text, and we'll remove it.
• Ask for a copy of what we hold on you — email us and we'll send what's linked to your account, email, or device ID.
• Correct anything that's wrong — tell us and we'll fix it.
• Unsubscribe from the newsletter — any email from us will have an unsubscribe link, or email us directly.
• Object, or withdraw consent — if you're in the EU or UK, you can object to our analytics processing or ask us to restrict it, and you have the right to receive your data in a portable format.

We don't sell your personal information, and we don't share it for cross-context behavioural advertising, as those terms are used in California law.

Copyright / takedown

If you believe content shown on WondrOut (an embedded video, a photo, a description, etc.) infringes your copyright or trademark — or if a video features you and you want it removed from the Watch feed — email copyright@wondrout.com with:

• The URL or location of the content on WondrOut
• A short description of why you're requesting removal (e.g. "I'm the creator and don't want my video embedded here")
• Your name and contact email

We aim to action takedown requests within 7 days. Full notice requirements, our United States designated agent, and our repeat-infringer policy are set out in section 12 of our Terms. Embedded social videos can also be removed instantly by deleting or privatising the original post on Instagram / TikTok — our embeds disappear automatically when the source is gone.

Security

Data is held with the providers listed above, in transit over HTTPS. Card details never touch our servers. No system is perfectly secure, but if a breach affects your personal information we'll notify you and the OAIC as required under the Notifiable Data Breaches scheme.

Kids

WondrOut isn't directed at children under 16. You must be at least 16 to create an account. If you're under 16, please don't submit tips or sign up for the newsletter without a parent's consent. If we learn we're holding data from someone under 16, we'll delete it.

Changes to this policy

If we change this policy materially, we'll update the "Last updated" date above and tell account holders and newsletter subscribers by email.

Contact

Questions, concerns, or complaints: hello@wondrout.com