Privacy policy

Last updated: 14 November 2026

This policy explains what data WildWay ("we") processes when you use the website and app, why, and what your rights are. Contact: atrousselima10@gmail.com.

1. Using WildWay without an account

You can browse ideas, plan trips and use the map without an account. Your planned trips and preferences are then stored only in your own browser (local storage) and are not sent to our servers.

2. Data we process when you create an account

• Account: email address, name, and your password (stored only in hashed form by our authentication provider).
• Content you create: profile (photo, bio), planned trips, trip stories you publish, photos, comments, likes, follows and saved places.
• Emergency contacts: name, relationship and phone number of up to two people you choose. They are private: only you can see them.
• Location: your position is read by your device only when you use the safety features (for example "Send my position now"); it is put into a message that you send to your contact. Photo GPS data is removed before upload.

We use this data only to provide the service: your account, your trips, the community feed and the safety features. We do not sell your data and we do not use it for advertising profiles.

3. Who processes data for us

• Netlify — website hosting (technical logs such as IP address).
• Supabase — accounts, database and photo storage.
• OpenFreeMap (map tiles), FOSSGIS Valhalla / OSRM (route calculation: the coordinates of your stops are sent to compute the road route), Wikimedia and Unsplash (photos: place or activity names are sent as search terms), jsDelivr and Google Fonts (code libraries and fonts). These services receive your IP address when your browser loads their content.
• Travelpayouts — affiliate network. A Travelpayouts script on the site turns links to partners (Booking.com, Expedia, GetYourGuide…) into affiliate links. When you click such a link, the partner site may set its own cookies to attribute your booking; its own privacy policy then applies.

4. How long we keep data

Account data is kept while your account exists. When you ask us to delete your account, your profile, trips, photos and contacts are deleted within 30 days, except where the law requires us to keep something.

5. Your rights

Under the GDPR and applicable law, you can access, correct, export or delete your data, object to or restrict its processing, and withdraw your consent at any time. Write to atrousselima10@gmail.com. You can also complain to your data-protection authority (for example the CNIL in France, or the INPDP in Tunisia).

6. Children

WildWay is not intended for children under 16.

7. Changes

We will update this page when our practices change, and show the date of the last update at the top.