Privacy Policy

Overview

Wilder Today is an AI-powered day trip planning app built and operated as a solo founder project, primarily serving users in the United States. This policy explains what data we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it. We collect only what we need to provide and improve the service.

Wilder Today shares its authentication system and database infrastructure with Wilder (wilderadventure.com). If you already have a Wilder account, you can sign in to Wilder Today with the same credentials.

Because of this shared infrastructure, if you're signed in, we may determine whether your account has activity in Wilder, Wilder Today, both, or neither — for example, to understand how people use the two products together. This classification is not currently used to restrict any feature or personalize what you see.

What data we collect

Account information

Creating an account is optional. You can generate day trips without signing in. If you sign up, we collect your email address and first name, and store them securely via Supabase. Your email is used to authenticate your account; your first name may be used to personalize your experience. We do not send marketing emails without your explicit consent.

Day trip data

When you generate a day trip, your inputs — including location, available time, experience level, selected activities, and any free-text notes — are used to produce your itinerary. For signed-in users, saved trips are linked to your account. For users without an account, no account identifier is attached, but your IP address is temporarily retained for rate limiting (see below).

We also log generation metadata (location, duration, activities selected, number of stops) to help us understand how the service is used and improve trip quality. For anonymous users, this data is not linked to an account. For signed-in users, generation events are linked to your account.

If you're signed in, we may also use your prior saved day trips to personalize new suggestions — for example, avoiding repeat stops when you enable that option, or softly favoring activity types and effort levels you've chosen before. Your explicit selections for a given request always take priority over this history-based personalization, and you can opt out of the repeat-avoidance feature at any time.

Location data

If you use the "Use my location" feature and grant browser permission, we use your approximate location (city or county level) to pre-fill your starting point. We do not store precise GPS coordinates. Location permission is entirely optional — you can always type a location manually.

IP addresses

We temporarily store IP addresses in a rate-limiting cache (Upstash Redis) to prevent abuse and enforce fair usage limits. IP address records used for rate limiting automatically expire within a few hours, and no later than 24 hours.

AI day trip generation

When you generate a day trip, your location, preferences, selected activities, experience level, and available time are sent to Anthropic's API to produce your itinerary. If you're signed in, a summary of your prior day trips — such as previously visited stop names and general activity or effort-level preferences — may also be sent to Anthropic to personalize suggestions. We do not intentionally transmit your account identifier or email address to Anthropic. However, if you include personal information in free-text fields, that information will be sent to Anthropic as part of the generation request. This data is processed by Anthropic and subject to their Privacy Policy.

Day trips generated by Wilder Today are AI-produced suggestions only. Always verify location details, conditions, and access independently before heading out.

Cookies and similar technologies

Wilder Today uses the following cookies and browser storage technologies:

• Authentication cookies — set by Supabase to keep you signed in. These are necessary for the service to function and cannot be disabled if you use an account.
• Google Analytics 4 — sets cookies to track page views, feature usage, and user behavior, including the location text you enter when generating a day trip. Data is retained for 14 months per our GA4 configuration.
• Vercel Analytics — collects anonymized performance and visit data. No personally identifiable information is collected.
• Offline caching (service worker) — stores static assets and pages in your browser to support offline access and faster load times. This does not collect or transmit personal data.

If you prefer not to be tracked by analytics tools, you can use a browser extension to block analytics scripts, or contact us at feedback@wilderadventure.com to opt out.

Third-party processors

We use the following third-party services to operate Wilder Today. Each processes data on our behalf under their own privacy policies:

• Supabase — database and authentication. Stores your account data and saved day trips. Privacy Policy
• Anthropic — AI trip generation. Receives your location, preferences, and activity selections to generate day trip itineraries. No account identifiers are intentionally sent. Privacy Policy
• Pexels — destination photography. Your location is sent to Pexels to retrieve a relevant photo for your itinerary. No account data is shared. Privacy Policy
• Open-Meteo — weather data. Your location is sent to Open-Meteo to retrieve current weather conditions. No account data is shared. Terms
• Google Analytics 4 — usage analytics. Collects page views, behavioral data, and the location text you enter when generating a day trip. Data retained for 14 months. Privacy Policy
• Vercel — hosting and performance analytics. Hosts the Wilder Today web application and collects anonymous performance data. Privacy Policy
• Upstash Redis — rate limiting. Temporarily stores IP addresses to prevent abuse. Data is automatically deleted within 24 hours. Privacy Policy

Data retention

• Account data and saved trips — retained until you request account deletion.
• Generation metadata — retained to improve trip quality. Linked to your account if you're signed in when you generate; not linked to an account otherwise.
• Personalization preferences (e.g. the "avoid places I've been" toggle) — retained until you change them or delete your account.
• IP addresses (rate limiting) — automatically expire within a few hours, and no later than 24 hours.
• After account deletion — we will delete all account-linked data within 30 days of a verified deletion request. Some data may be retained longer if required by law.
• Google Analytics data — retained for 14 months per our GA4 configuration.

Security

We use reasonable administrative, technical, and organizational safeguards to protect your personal data — including encrypted data transmission (HTTPS), Row Level Security policies on our database so users can only access their own data, rate limiting to prevent abuse, and access controls that limit which systems can write to our database.

No method of data transmission or storage is completely secure. If you believe your account has been compromised, contact us immediately at feedback@wilderadventure.com.

Your privacy rights

Regardless of where you are located, you can make the following requests about your data at any time:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — ask us to delete your personal data. For full account deletion, contact us at the address below.
• Opt out of analytics — ask us to exclude you from Google Analytics tracking.

To make any of these requests, contact us at feedback@wilderadventure.com. We will respond within 30 days.

California privacy rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• The right to know what personal information we collect about you and how it is used.
• The right to request correction of inaccurate personal information.
• The right to request deletion of your personal information, subject to certain exceptions.
• The right to opt out of the sale or sharing of your personal information.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

To exercise your California rights, contact us at feedback@wilderadventure.com. You may also contact the California Privacy Protection Agency at cppa.ca.gov.

What we don't do

• We do not sell your personal data to third parties
• We do not share your data for cross-context behavioral advertising
• We do not run advertising of any kind
• We do not store precise GPS coordinates
• We do not send marketing emails without your explicit consent

Age requirements

Wilder Today is not directed to children under 13. If we become aware that a child under 13 has created an account without verifiable parental consent, we will delete their account and associated data promptly. Parents or guardians should contact us at feedback@wilderadventure.com.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the date at the top of this page. Continued use of Wilder Today after changes are posted constitutes your acceptance of the updated policy.

Contact

All privacy requests — including access, correction, deletion, and analytics opt-out — should be sent to feedback@wilderadventure.com. We will respond within 30 days.

California residents may also contact the California Privacy Protection Agency at cppa.ca.gov.