Privacy

Last updated 5 November 2026 (analytics added)

Short version: Wanderin keeps your Google name, email and your searches to run your account. If you say yes to analytics in the banner, we also record how you use the site (pages, clicks, scrolling, time) and Google Analytics measures it too. If you say no, none of that is recorded. We never sell your data. Details below.

Who runs this

Wanderin is operated by UAM LLC (Unfair Advantage Marketing LLC), Shams Free Zone, Sharjah, United Arab Emirates ("UAM LLC", "we"). UAM LLC decides why and how your data is used (the "controller"). Contact for everything privacy related: [email protected].

What we store

• Your Google account details. When you sign in with Google we receive and store your Google account id, your name and your email address. We ask Google for the scopes openid, email and profile only. We get no contacts, no mail, no Drive, no calendar.
• Your searches (your History). The place and the thing you typed, the places found, the prices and ratings shown, and the time.
• Daily usage counters. A small file per day and account with the cost of your searches, used to keep the free service affordable. If you hit the daily allowance we also note that.
• Reminder state. Whether you opted out of the reminder email and whether one was already sent.
• Usage events, only if you accept analytics. Page views, clicks (which button or link, its label, never what you type into a form field), scroll depth, time on a page and length of a visit, searches started, finished or left unfinished (including the place and what you typed into the two search boxes), results and awards opened, clicks on map and website links, History opened, sign-in started and finished, and the daily-limit message. Each event carries a random id for the browser visit, your account id if you are signed in, the page path, your device type, screen size, language, time zone, the website you came from, campaign tags (utm) on the link you used, and your country as Cloudflare reports it. We do not store your IP address in this log, and not the raw browser string. Email addresses that appear in such text are masked. We never log passwords, sign-in codes or cookies. See Analytics and consent below.
• Your analytics choice. A small anonymous counter of how many visitors accepted or rejected the banner, with no id and no IP address, so we know how much of our audience we can measure.
• Technical logs. Our web server and Cloudflare log the IP address, time and address requested. Our server logs are rotated automatically and kept about 14 days. The app also counts requests per IP address in memory to block abuse.

Cookies and tracking

Strictly necessary, set by Wanderin only: ng_session keeps you signed in (30 days, then you sign in again), ng_oauth exists for a few minutes while you sign in, and wi_consent remembers your analytics choice for 180 days. Only if you accept analytics, Google Tag Manager and Google Analytics may set their own analytics cookies (for example _ga). There is no advertising, no ad pixel and no Meta/Facebook tracking. Pages load fonts from Google Fonts, so Google sees your IP address when a page loads.

Analytics and consent

When you first visit, a banner asks whether we may measure how Wanderin is used. Nothing is measured before you answer, and nothing is measured if you reject. Rejecting is as easy as accepting, and you can change your mind at any time with "Cookie settings" in the footer of every page.

• If you accept: (1) our own event log described above, kept on our server; and (2) Google Tag Manager and Google Analytics 4, which receive the same kind of events with Google's cookies and your device and approximate location details. Google is our processor for this. We send Google no name, no email address and no text you typed; a signed-in visit carries only a scrambled identifier (a keyed hash) that cannot be turned back into your account by Google. Google signals and ad personalisation are off. Google Analytics data is kept for 14 months.
• If you reject: no event log, no Google Tag Manager, no Google Analytics. We still keep what the service needs to work: your sign-in, your searches and History, the daily spend counters, and the server logs used against abuse.
• Legal basis: your consent. You can withdraw it at any time; this does not affect what we did before.
• Retention: our event log is deleted after 14 months, and immediately when you use "Delete my account".

Analytics data is separate from the data we receive from Google when you sign in: the Google name and email from sign-in never go into analytics.

Why we use it, and on what legal basis

• Sign you in, show you your own History, run the searches you ask for: needed to provide the service you requested (contract).
• Usage events and Google Tag Manager / Google Analytics: your consent, only after you accept the banner.
• Daily allowance, abuse protection, security, fixing problems: our legitimate interest in running a service that stays affordable and safe.
• The one reminder email: your consent, given when you sign up (see below). You can withdraw it at any time.

The reminder email

If you use up your daily allowance, we send you at most one email after the allowance resets, saying Wanderin is open again. It comes from a UAM LLC mailbox on unfair.at via our own automation, and not if you opted out or already came back. Every mail has a one-click opt-out link that works at once. Nothing else is mailed to you.

Who receives your data

• Google: sign-in. Google's own privacy policy applies to your Google account.
• Serper and Apify: place and review lookups. They receive your search text (the place and what you are looking for) and the place being looked up. They do not receive your name or email.
• An AI price reader: review and website snippets are sent through our LLM gateway and OpenRouter to AI model vendors so a model can read prices out of them. It receives text about places, and the words you searched for. It does not receive your name or email.
• Google (Tag Manager and Analytics): only if you accepted analytics; processor for usage statistics, see "Analytics and consent".
• Cloudflare: sits in front of the site as a proxy and sees traffic in transit.
• Hetzner: hosts the server, in Germany.

Anything you type into a search is sent onward to these providers, so do not type personal data into it. We do not sell or rent your data and do not use it for advertising. Nobody at UAM LLC reads individual accounts or searches unless needed for security, abuse handling, support or to meet a legal duty.

Transfers outside your country

UAM LLC is established in the United Arab Emirates, the server is in Germany, and several providers above operate worldwide, including in the United States. Where your country's law requires a safeguard for such transfers, we rely on standard contractual clauses or comparable terms of those providers.

How long we keep it

• Searches: until you delete them or your account. We keep your newest 500 searches and drop older ones.
• Profile (Google id, name, email): while your account exists.
• Session cookie: 30 days. Login cookie: a few minutes. Consent cookie: 180 days.
• Usage events (only if you accepted analytics): 14 months, or until you delete your account. Anonymous accept/reject counters: 14 months. Google Analytics data: 14 months.
• Daily usage counters: 7 days. If you delete your account, your email is removed from them at once; the cost figures stay until the 7 days are over, so that deleting and re-registering cannot reset the daily allowance.
• Reminder state: while the account exists; removed when you delete it.
• Server logs: about 14 days.

Deleting your data

• Single searches: delete them in History.
• Everything: "Delete my account" in the menu at the top removes your profile, all your searches and your usage events immediately. (Data already inside Google Analytics is not tied to your account and expires after 14 months.)
• Or write to [email protected] and we do it for you.

Your rights

Depending on where you live (for example under the EU or UK GDPR) you can ask us for access to your data, correction, deletion, a copy in a portable format, restriction of use, or object to use based on our legitimate interest, and you can withdraw consent at any time without giving a reason. Write to [email protected]; we answer within one month. You also have the right to complain to your local data protection authority. Where your country's law gives you other or stronger rights, those apply too.

Google user data

Wanderin's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In plain words: we request only openid, email and profile. We use that data only to sign you in and to run your own Wanderin account. We never sell it, never use it for advertising, and never use it to train AI models. No human reads it except where needed for security, to handle abuse, to give you support or to follow the law. The Google name and email we receive at sign-in are never sent to Google Analytics or Tag Manager and are never used for analytics.

Children

Wanderin is not for anyone under 16. We do not knowingly keep data of children. If you think a child signed up, write to [email protected] and we delete the account.

AI-generated prices

Prices are partly read by an AI model and can be wrong. No decision with legal effect on you is taken automatically.

Security

Traffic is encrypted (HTTPS), the sign-in cookie is signed and unreadable by scripts, secrets stay outside the code, other users cannot open your History. This is a small service, not a bank: no system is perfectly secure.

If something goes wrong

If a breach puts your data at risk, we fix the cause, tell the affected users by email without undue delay and notify the authorities where the law requires it.

Changes and pauses

If we change this page, the date at the top changes; for changes that matter to you we give notice on the site first. Every search costs money, so there is a daily allowance per person and a daily limit for the whole site; when the site limit is used up, searches pause for everyone until the next day (UTC).