Privacy policy

Last updated November 10, 2026

Wanderskip is a private research feed. You describe what you want to learn, an AI research agent you connect adds finds to your boards, and your feedback steers what comes next. This policy covers the Wanderskip website, the iOS and Android apps, and the Wanderskip MCP server that research agents connect to.

Your boards, finds, feedback and journal are private to your account. If you share a board, anyone with its link can see that board’s goal and finds (never your feedback, notes, favorites or journal), plus comments people leave on it. Your profile shows only your display name, handle, bio and any boards you choose to list. If you follow a shared board, its owner sees only how many people follow it, not who. We don’t sell your personal data and we don’t show ads.

What we collect

Account: your email address, a hashed password if you set one, your display name, handle and bio. If you sign in with Apple or Google, we get your email address (or Apple’s private relay address) and the name you allow them to share.
What you create: boards (name, goal, starting point, pace, the kinds of finds you want), the finds on them, your reactions, depth ratings, notes, favorites, read and discarded state, journal posts, comments, follows, reports and blocks.
What your research agent sends: the links, titles, relevance notes and summaries it adds to your boards, and the name of the agent that added them.
Connections: the AI apps you connect over OAuth, when they were last used and from which IP address, so you can see and disconnect them.
Devices: a push notification token for each phone you turn notifications on for, and sign-in tokens for the apps.
Technical data: IP address and browser or app details for your signed-in sessions, and short-lived server logs used to keep the service working and secure.
Usage analytics: described below.

How we use it

To run your account and show your feed; to let the research agents you connect read your boards and add finds to them; to send the emails you need (such as password resets) and the notifications you turn on; to show previews of the pages your finds link to; to handle reports and keep the service safe from abuse; and to understand which features get used so we can improve them.

Research agents you connect

When you connect an AI agent such as Claude, ChatGPT, Codex or Grok, you approve it on a Wanderskip sign-in screen. That agent can then read your active boards (goals, starting points, recent finds, your feedback and journal) and add finds to them. It can’t read your email address or password, see other people’s data, or delete anything. What the agent does with what it reads is covered by that provider’s own privacy policy (for example Anthropic for Claude, OpenAI for ChatGPT and Codex, xAI for Grok). You can disconnect any agent at any time under Connect a research agent, which revokes its access right away.

Who else processes data

We share data only with the services that run Wanderskip for us, and only what each one needs:

Akamai (Linode) hosts our servers and database in the United States.
Cloudflare carries all traffic to wanderskip.com and protects it from attacks.
Resend sends our email.
Apple and Google handle Sign in with Apple and Google sign-in when you use them, and deliver push notifications (Apple Push Notification service and Firebase Cloud Messaging).
Google Analytics for Firebase receives the usage analytics described below.
The websites your finds link to see an ordinary request from our server when we load a page title or preview image, and from your device when you open a find.

We may disclose data if the law requires it, or to protect people from harm. If Wanderskip is ever sold or merged, this policy will continue to apply to your data, and we’ll tell you before anything changes.

Usage analytics

We use Google Analytics (through Firebase in the apps) to count which features get used, like how many boards are created or finds opened, so we know what to improve. We send only the name of the screen or action and simple values such as “shared: on”. We never send your boards, goals, finds, links, comments, notes, name or email. We don’t use advertising IDs, don’t personalize ads and don’t sell this data. On the website, visitors in the EEA, UK and Switzerland are asked first, and anyone can change their choice in Account settings or with “Analytics choices” at the bottom of the sign-in pages. Browsers that send Global Privacy Control are not measured unless they opt in. In the apps you can turn it off under You → Settings → Share usage analytics.

How long we keep it

We keep your data for as long as you have an account. Server logs are deleted after 14 days. App sign-in tokens and agent connections last until you sign out or disconnect, or until they expire. When you delete your account, your boards, finds, feedback, journal, comments, follows, connected agents and devices are deleted right away. Backups, if any, are overwritten within 30 days.

Your choices

Delete your account from Account settings on the website, or from You → Delete account in the apps.
Edit your profile, choose which boards appear on it, and turn sharing off for any board.
Disconnect research agents, turn off notifications, and turn off analytics.
Block and report people.

Depending on where you live, you may have the right to access, correct, delete or move your data, or to object to how we use it. Email us to use any of these rights, including to get a copy of your data, and we’ll respond within 30 days.

Security

All traffic is encrypted with HTTPS. Passwords are stored hashed, sign-in and agent tokens can be revoked at any time, and content that agents add from the web is treated as untrusted data.

Children

Wanderskip isn’t meant for children under 13, and we don’t knowingly collect their data. If you believe a child has an account, email us and we’ll delete it.

Changes and contact

If we change this policy in a way that matters, we’ll update the date above and tell you in the app or by email before it takes effect. Questions or requests: [email protected].