Privacy Policy

WanderRank (wander-rank.com) is made and run by David Cartier (David Cartier Media) in Atlanta, Georgia, USA. I'm the person responsible for your information (under European and UK law, the “controller”). For anything on this page, email help@davidcartiermedia.com.

WanderRank has no accounts, so there's no name, password or profile of you on a server. Here is everything the site handles.

Your quiz answers, profile and travel log

When you take the quiz or edit your profile, the site saves your answers in your browser's local storage: home airport, budget, trip length, dates or travel window, travel style, interests, things to avoid, how intense you like your trips and your hostel preferences. Places you log in My travels (ratings, activities, highlights, notes, dates and spending) are saved there too. Nothing is saved until you answer or change something.

To rank destinations, your browser sends your answers, plus the places you've logged and your ratings (not your notes, highlights or spending), to WanderRank's server. The server works out your ranking and sends it back. It doesn't store your answers in a database or connect them to you. To answer repeat requests faster, it can keep the finished ranking in memory for up to 10 minutes, and then it's gone.

The map page also sends your home airport to the server to work out drive times to the US road trips. That isn't kept either.

Saved trips and share links

Trips you save in the trip builder stay in your browser. If you make a share link, the plan (destination, nights, start date, hostel, lodging style, the side quests you picked, the plan's title and each day's title and free-time note) is written into the link itself, so anyone you send it to can read it. WanderRank doesn't save share links. Like any page address, a share link shows up briefly in the host's request logs when someone opens it.

Your location, only when you ask

On the On the road page, the site asks for your location only when you tap “Use my location”, and your browser asks your permission first. Your exact position stays in your browser and is never put in the page address. To get the weather, your browser sends WanderRank's server a position rounded to about 1 km and your time zone (so “today” ends at the right hour), and the server asks MET Norway (the Norwegian Meteorological Institute) for the forecast at that rounded position. MET Norway only sees WanderRank's server, not you. Forecasts are cached by that rounded position, not by person, so repeat requests are faster. A forecast is reused until MET Norway's forecast expires, usually after about 30 minutes, and old copies can stay in the server's and the host's caches for a while after that.

To stop abuse, the server also counts how many new forecast lookups (positions it doesn't already have a fresh forecast for) come from each IP address, and pauses an address that makes too many in 10 minutes. For an IPv6 address it uses only the first half, the part that identifies your network. The count records only when each lookup happened, not the position, and lives only in the server's memory: it's never written to a database or log, each lookup stops counting after 10 minutes, and the count is cleared out after that, at the latest when the server restarts.

The search box

The search box on the home page reads what you type in your browser, and the text itself isn't sent anywhere. If you tap “Use this”, what it found (a budget, trip length, when you want to go, home airport, interests or travel style) changes your profile like any other edit: it's saved in your browser and goes into your ranking as described above.

Visits and device details

Like every website, WanderRank's host, Vercel, receives your IP address, browser details and the addresses of the pages you request whenever your browser loads something. These server logs keep the site running and secure, and I can look at them to fix problems.

Analytics

I count visits with Vercel Web Analytics so I know which pages are useful. It doesn't use cookies or store anything in your browser. For each page view it receives the page address, the site that sent you, and your browser's request, from which Vercel works out your country, region and city, browser, operating system and device type. The page address is cut before the question mark (keeping only the “at” and “destination” values that say which place a page is about) and before any #. Vercel tells visits apart with a hash of the request that it discards after 24 hours. It also counts a few clicks, such as whether the tip or picks pop-up was shown, closed or used, and which of my channels someone tapped. I only ever see totals.

Analytics are off if you turn them off under Your choices, or if your browser sends Global Privacy Control or Do Not Track.

The newsletter, once it's switched on

The newsletter sign-up isn't live yet. When it is, the form will ask for your email address and an unticked box you tick to say you want the emails. Your address will go to the email service that sends the newsletter, which this page will name as soon as the form goes live. I'll only use it to send the newsletter, every email will have an unsubscribe link, and I'll never sell your address.

Emails you send me

If you email me, I get your address and whatever you write. I use it to reply, and keep it as long as I need to help you and keep a record of what we discussed.

Tips

Tips go through Venmo (and Stripe, if card tip links are switched on), under their own privacy policies. Venmo shows me your Venmo name, the amount and any note you add. Stripe shows me details such as your email address and the amount. I never see your full card number or bank details. More on the refunds and tips page.

These companies help run WanderRank. Each gets only what it needs for its part.

• Vercel (hosting and analytics, USA) serves every page, runs the ranking and weather code, keeps server logs and runs the cookieless analytics described above. See Vercel's privacy notice.
• Mapbox (maps, USA) is contacted only after you tap “Load map”. The site remembers that choice in this browser, and you can change it any time under Your choices. Once the map loads, your browser connects to Mapbox, which receives your IP address, browser and device details, the map areas you view, and a random ID that Mapbox's code stores in your browser and sends with each map load to count map use. I've switched off Mapbox's optional performance reports. Data collected by Mapbox is collected and used in accordance with the Mapbox Product Terms, the Mapbox Data Processing Addendum and the Mapbox Privacy Policy.
• MET Norway (weather, Norway) receives a position rounded to about 1 km from WanderRank's server when you ask for the weather on the On the road page. It never receives your IP address or anything else about you.
• CARTO (backup map) is used only if the backup map is switched on and Mapbox can't load. Your browser then loads map tiles from CARTO, which receives your IP address, browser details and the map areas you view. The backup map's code comes from the jsDelivr network, which also receives your IP address and browser details.
• Venmo and Stripe (tips) handle any tip you send, as described above.
• The newsletter service will receive your email address if you sign up, once the newsletter is live.

Destination and road trip photos are served from WanderRank's own server, so viewing them doesn't connect your browser to Wikimedia Commons or Unsplash. Who took each photo is on the photo credits page.

Many pages link to other sites: flight searches, hostels, gear on Amazon, Capital One card pages, eSIMs and travel insurance. Nothing goes to them until you click. When you do:

• Some links open a search with your details already filled in, such as your home airport and travel dates on a Google flight search or Skyscanner, or the city and your dates on Hostelworld.
• Affiliate and referral links tell the partner you came from WanderRank, and the partner reports a sale or sign-up to me so I get paid. I never get your card or payment details from them. The full list is on the affiliate disclosure page. Hostelworld links are plain links for now, so they earn me nothing and carry no affiliate ID.

• I don't sell your personal information, and I don't share it for targeted (cross-context behavioral) advertising.
• There are no ad networks, social media pixels or embedded trackers on WanderRank.
• I don't give personal information to anyone for their own marketing.
• Your precise location never leaves your browser.
• There are no accounts, so there are no passwords to leak.

WanderRank sets no cookies. It saves a few things in your browser's local storage so the site works the way you set it up: your profile and travel log, your saved trips, your units, your privacy choices, and whether you closed the tip or picks pop-up. The pop-ups count pages and clicks in memory only, and forget them when you leave or reload. If you load the map, Mapbox stores a random ID and a cache of map tiles.

The full list, with what each item is for and how long it lasts, is on the cookies and storage page.

• Your profile, travel log, saved trips and settings stay in your browser until you delete them or clear site data. I never have a copy.
• A finished ranking can stay in server memory for up to 10 minutes.
• Forecast lookup counts by IP address stay in server memory only, count for 10 minutes and are then cleared out, at the latest when the server restarts.
• Weather forecasts are cached by rounded position, not by person: usually for about 30 minutes, and old copies can stay in the server's and host's caches for a while after that.
• Vercel discards the analytics visit hash after 24 hours. The totals I see stay in Vercel's analytics dashboard.
• Server logs are kept by Vercel for the limited period its service keeps them.
• Emails you send me: as long as I need them to help you.
• Newsletter addresses, once the newsletter is live: until you unsubscribe.
• Tip records: Venmo and Stripe keep their own under their rules, and I keep mine as long as tax rules require.
• Data Mapbox collects when you load the map is kept under Mapbox's privacy policy.

The whole site runs over HTTPS. WanderRank has no accounts or passwords, never handles payment details, and keeps as little as it can: the server doesn't store your answers, and your profile lives on your device. No system is perfectly secure, so if you spot a problem, please email help@davidcartiermedia.com.

If other people use your device, they can see what's saved in this browser. Clearing site data removes it.

WanderRank is for people planning their own trips and isn't directed to children under 13. I don't knowingly collect personal information from children under 13. If you think a child has sent me information (by email, for example), write to help@davidcartiermedia.com and I'll delete it.

If your browser sends a Global Privacy Control (GPC) or Do Not Track (DNT) signal, WanderRank honors both by turning analytics off for your visit. Nothing else needs to change, because WanderRank doesn't track you across other websites, sell data or show targeted ads.

Wherever you live, you can:

• See your information. Almost all of it is in your browser: open your Profile and My travels, where you can also download your travel log as a file.
• Correct it. Edit your profile or travel log any time.
• Delete it. Reset your profile on the Profile page, delete places in My travels or trips in the trip builder, or use “Clear everything” under Your choices to remove it all at once. Download your travel log first if you want to keep it.
• Opt out. Turn analytics off and choose whether the map loads, under Your choices.
• Ask me. For anything that isn't in your browser (an email you sent, a newsletter address or a tip record), email help@davidcartiermedia.com and I'll show it to you, correct it or delete it.

I'll reply within one month. I may ask a question to make sure a request really comes from you, and I won't treat you differently for making one.

WanderRank is built for US travelers, but some laws give visitors from particular places specific rights. Here is what they ask me to tell you.

Europe and the UK (GDPR and UK GDPR)

• Controller: David Cartier (David Cartier Media), Atlanta, Georgia, USA, help@davidcartiermedia.com.
• Consent is the legal basis for loading the map (Mapbox) and, once it's live, the newsletter. You can withdraw it any time under Your choices or with the unsubscribe link. That doesn't affect anything that happened before.
• Legitimate interests are the basis for cookieless analytics (to learn which pages help people), counting forecast lookups by IP address (to stop abuse) and server logs (to keep the site running and secure). You can object by turning analytics off or emailing me.
• Providing what you ask for (performing a contract) is the basis for working out your ranking, getting the weather when you ask, saving trips and answering your emails.
• Your rights: access, correction, deletion, restriction, objection, data portability (download your travel log) and withdrawing consent. Email me to use any of them.
• Automatic decisions: rankings are worked out automatically, but they only sort destinations for your own planning and have no legal or similarly significant effect on you.
• Complaints: you can complain to the data protection authority where you live or work (in the UK, the Information Commissioner's Office). I'd be grateful for the chance to fix things first.

California

I don't sell or share personal information, including for cross-context behavioral advertising, and I don't disclose it to third parties for their direct marketing. You can ask what I have and ask me to correct or delete it, as described under Your rights, and I won't discriminate against you for asking. This policy also explains how the site responds to Do Not Track signals and how changes to it are announced, as California's online privacy law (CalOPPA) requires.

Delaware and Nevada

Delaware residents: this page is the privacy notice Delaware's Online Privacy and Protection Act asks for, and the rights above are open to you. Nevada residents: Nevada law lets you ask a website operator not to sell your covered information. WanderRank doesn't sell it, but you can still send that request to help@davidcartiermedia.com and I'll record it.

Canada

You can ask to see and correct your information as described above. Your information is handled in the United States by the services on this page. If you're not satisfied with my answer, you can complain to the Office of the Privacy Commissioner of Canada.

Everywhere else

If the law where you live gives you other privacy rights, email me and I'll honor them.

WanderRank is run from the United States, and Vercel and Mapbox are US companies. If you visit from another country, your data is handled in the United States, where privacy law may differ from yours. MET Norway is in Norway. Each provider explains in its own privacy terms how it protects data that crosses borders.

If I change this policy, I'll update the date at the top. If a change affects what's collected or who receives it, I'll also put a note at the top of this page for at least 30 days, and ask for your consent again where the law requires it.

These choices are saved in this browser only, and they apply everywhere on the site. Turning analytics off also stops the click counts described above.

“Clear everything” removes all of it at once. You can also clear site data for wander-rank.com in your browser settings, and the cookies and storage page explains how.

Email help@davidcartiermedia.com with any question or request about your privacy. WanderRank is run by David Cartier (David Cartier Media), Atlanta, Georgia, USA.