Plain English, no boilerplate. Here's exactly what Wander collects, what it never touches, and how to get your data deleted.
Effective date: 16 July 2026
Wander is a GPS location changer for iPhone, Android, Mac, and Windows, plus a website account system. It's built and run as an independent indie project. This policy explains what happens to your data in plain terms. It isn't legal advice, but it's honest and it describes what the software and website actually do.
The short version: Wander changes the location your device reports — on the device itself. Nothing about your real location is ever uploaded to us. The only account data we hold is what's needed to run your account and your Pro license.
Account data (Firebase Authentication). When you create an account, we use Firebase Authentication (Google's identity service) to handle sign-in via email/password or Google. Sign in with Apple is coming. We store your email address and a unique account ID. Your password, if you use one, is handled and hashed by Firebase — we never see it in plain text.
Plan / license flag (Firestore). We keep a small record in Firestore noting whether your account is Free or Pro, and which kind of Pro (one-time "lifetime" or subscription). This is what lets the apps unlock Pro features for you.
Optional saved-places sync (Firestore). If you switch on Places sync, the places you save in the app are stored in Firestore under your account so they appear across your devices. This is opt-in. If you never turn it on, your saved places stay only on your device. You can turn it off and delete synced places at any time.
Payment data (Lemon Squeezy). When you buy Pro, checkout is handled by Lemon Squeezy, which acts as the merchant of record. They process your payment and send us a confirmation so we can flip your account to Pro. Wander never sees or stores your full card number. Lemon Squeezy's own privacy practices govern the payment data they collect. See our Refund Policy for how refunds work.
Aggregate analytics (Cloudflare Web Analytics). Our website uses Cloudflare Web Analytics, which gives us privacy-friendly, aggregate numbers — things like how many people visited a page. It does not use cross-site tracking cookies and does not build an advertising profile of you.
Support messages. If you email us or reach out on Discord, we obviously see what you send, so we can help you. We keep those messages as long as needed to support you and keep records straight.
Account data and any synced saved places live in Firebase / Firestore (Google Cloud infrastructure). Website analytics run through Cloudflare. Payments and payment records live with Lemon Squeezy. These providers host the data on our behalf and are bound by their own security and privacy commitments.
Sensitive API keys — for example the Google Maps key used for Street View and the Anthropic key used for the AI routine feature — live only on our server-side Cloudflare Worker. They are never shipped inside the apps. When an app needs one of those features, it asks our Worker, which checks your plan and talks to the third-party service. This keeps the keys out of reach and lets us enforce Pro limits without exposing anything in the app binaries.
You're in control. To delete your account and the data tied to it:
When you delete your account, we remove your Firebase Authentication record, your Firestore plan flag, and any synced saved places. Some records may persist briefly in encrypted backups before they age out, and Lemon Squeezy may retain payment records it's legally required to keep. If you just want to stop syncing places, you can turn Places sync off in the app and clear the synced copy without deleting your whole account.
Wander is intended for people 16 and older. It isn't designed for or directed at children, and we don't knowingly collect data from anyone under 16. If you believe a child has created an account, email us and we'll remove it.
Let's be straight: location changing lives in a grey area. Some apps and services don't want you altering the location your device reports. Wander is a tool; how you use it is up to you, and you're responsible for following the terms of any third-party app or service you use it alongside. Our Terms of Service go into this. What matters for privacy is that Wander does its work on your device and doesn't phone your real whereabouts home to us.
If we change how we handle data, we'll update this page and move the effective date at the top. For anything significant, we'll try to give a heads-up on the site or Discord.
Questions about privacy, or want your data deleted? Reach out:
See also: Terms of Service and Refund Policy.
Wander