Privacy policy

Wandertails is operated by Wandertails Pte Ltd, a company registered in Singapore (UEN 202621642D). We are the data controller for the personal data described here. For anything in this policy, write to support@wandertails.app.

1. What we collect

Because you gave it to us

• Your email address, when you create an account. It is how you sign in and how we contact you.
• Your name and country, if you fill them in during onboarding or on your profile. Both are optional.
• Your trip. Origin, destination, trip type and travel dates. This is what the checklist is built from.
• Your pet. Name, species, breed, date of birth and weight, and a photo if you add one.
• Your progress. Which tasks you have ticked off, and when.
• Documents you upload, once document storage is available on a paid plan.

Because using the service creates it

• Login codes. We store a one-way hash of each 6-character code, never the code itself, together with the IP address the request came from and a count of failed attempts. Codes expire after an hour.
• Whether you accepted the terms, and when.
• Four counts about the signup funnel: that a document list was viewed, that a code was requested, that a code was verified, and that a checklist was opened, each with the account or trip it relates to. We use these to see whether a change to the signup flow lost people. There is no third-party analytics on this site.
• Technical data: IP address, browser and device type, and error reports when something breaks. We use these to keep the service running and secure.

2. Why we hold it, and on what basis

The legal bases above are the GDPR framing, and apply if you are in the UK, EEA or Switzerland. In Singapore we rely on your consent and on the PDPA’s legitimate interests and business improvement exceptions for the same purposes.

3. What we do not do

• We do not sell your personal data, and we do not share it for anyone else’s advertising.
• We do not send anything you enter to an AI provider. We do use AI internally to read published government regulations while building route data, never your trip, your pet or your documents.
• We do not use tracking cookies. The only cookie we set is the one that keeps you signed in.

4. Who else processes it

This list is complete as at the date above.

• Supabase. The database and file storage where all of the above is held.
• Vercel. Hosting. It serves the site and processes requests.
• Resend. Sends your login codes and account emails.
• Sentry. Receives error reports when something breaks, which can include the page you were on and your account identifier.

These providers operate outside Singapore, including in the United States, so your data is transferred and stored there. Where the law requires it we rely on appropriate safeguards, including the European Commission’s standard contractual clauses.

5. Sharing, and what a shared link exposes

If you share a checklist, the person holding the link can see the trip it describes: countries, dates, and your pet’s name and details. Consider that before posting a link publicly. You can lock a shared checklist at any time, which makes it private again and stops the link working for everyone holding it. Unlocking restores the same link.

Your email address is shown to people you share with. If someone opens your link while signed in, the checklist is saved to their dashboard under “Shared with you”, and that card names you as the person who shared it. It uses your name if you have set one in your profile, and your email address if you have not. Only people you gave the link to ever see this, and locking the checklist removes the card.

A pet photo you upload is stored at an address that is hard to guess but not access-controlled: anyone given the exact URL can open it. Treat a pet photo as public.

6. Cookies and browser storage

We set one cookie, and only once you are signed in: the one that keeps you signed in. It is removed when you sign out. We do not use analytics cookies, advertising cookies, or any third-party tag that follows you between sites.

7. How long we keep it

• Login codes. One hour, after which they stop working. We are working towards deleting the rows on a schedule.
• Your account, trips, pets and progress. Until you delete them, or you ask us to close your account.
• Funnel counts. Kept as counts. They are not tied to anything that identifies you once an account is gone.

8. Your rights

Whoever and wherever you are, you can ask us to show you the personal data we hold about you, correct it, or delete it. Under the GDPR you can also ask us to restrict or stop certain processing, object to processing based on legitimate interests, and receive your data in a portable format. Under the PDPA you have equivalent access and correction rights.

You can edit your profile, your pets and your trips in the app at any time. For anything else, including deletion of your whole account, email support@wandertails.app and we will respond within 30 days.

If you are in the UK or EEA you may also complain to your local data protection authority. In Singapore, that is the Personal Data Protection Commission.

9. Email we send you

We send two kinds of email to the address on your account.

• Service email. Login codes, and messages about your account, your trips or a change that affects them. These are part of the service and cannot be turned off while you have an account.
• Product email. Occasional updates about Wandertails, such as new routes, new features or changes to how it works. Every one carries an unsubscribe link, and unsubscribing stops them without affecting your service email or your account.

We do not send email on behalf of anyone else, and we never pass your address to another company for their own marketing.

10. Children

Wandertails is not intended for anyone under 18, and we do not knowingly collect data about children. If you think we have, tell us and we will delete it.

11. Security

Data is encrypted in transit and at rest, access to the production database is limited to the people who need it, login codes are stored only as hashes, and repeated failed attempts are capped. No service can promise perfect security, and we will tell you and the relevant authority if a breach affects your data.

12. About the travel information itself

This policy covers your personal data. It is not about the accuracy of the pet travel requirements we publish, which is dealt with in our terms and conditions. Rules change, we cite the official source for every requirement, and you should check that source before acting on it.

13. Changes

If we change this policy we will change the date at the foot of this page, and we will tell account holders by email where the change is material. See also our terms and conditions.