Privacy Policy
Effective October 20, 2026.
Who we are
Wanderlore (https://wanderlore.quest) is operated by Wanderlore LLC. This policy explains what information we collect through this website and the apps we publish, how we use it, who we share it with, and the choices you have.
What we collect, and why
| What | Why | Kept |
|---|---|---|
| Email address and display name | To create and sign you into your account | Until you delete your account |
| Password | To sign you in. Stored only as a salted hash; we cannot read it | Until you delete your account |
| Approximate location during a scan | So Alim can tell which place you are looking at, and to place quests near you | Stored with the reading it produced |
| Photographs you scan | To generate a reading of the place | Not saved in our application database. The app may keep a copy in memory during the conversation so you can retry or ask about it |
| Your written observations and Alim's readings | They are your Library, the point of the product | Until you delete your account |
| Quest progress, Pages, streaks, achievements | To run the game | Until you delete your account |
| Friends, friend codes, blocks | To connect accounts and to keep blocks working | Until you delete your account |
| Reports you file about content | So a person can review them | Kept as a moderation record |
| Business details, if you are a partner | To verify a business claim and pay out referrals | Until the claim is withdrawn or the account deleted |
| Anonymous usage events from the apps (screens opened, a scan finishing) | To tell whether people come back. They run on our own servers and carry no photograph, no reading text and no precise coordinates | As long as we need them for statistics |
Information you give us
- When you send us a message: your name, email address, any company or website you add, and what you write.
- When you create an account: your name and email address, and your sign-in credentials. Passwords are stored only as a one-way hash.
- When you pay: payment is handled by Stripe. We receive confirmation of the purchase, not your full card details.
Information collected automatically
- Our servers keep standard logs of requests — your IP address, the page requested and the time — to keep the site running and secure.
- We measure how the site is used with our own first-party analytics. It records the pages you view, the page that referred you, your browser and device type, and your IP address.
- A first-party cookie named
pc_visitor_id, kept for up to one year, lets us recognise a returning browser. Your browser's session storage remembers the current visit and how it began, and is cleared when you close the tab. - We do not use third-party advertising cookies. You can block or delete cookies in your browser; the site works without them.
- With a message you send, we record the IP address it came from, to help us recognise automated spam.
Your location
We ask for your location only when you ask for something that needs it: a scan, or the map of what is nearby. We do not track your location in the background, and our apps hold no background location permission. If you decline, you can name your region by hand instead and keep playing.
How we use information
- To run, secure and improve this website.
- To reply to your enquiry. To tell genuine enquiries from spam, we may look up publicly available information about the organisation behind your email address's domain, such as its website.
- To provide your account and the features you use.
- When you report content, a person reviews the report, and we keep it as a moderation record.
- To complete purchases and keep the records the law requires.
- We do not sell your personal information or use it for third-party advertising.
Our apps
We also publish apps, including Wanderlore, Wanderlore Partner. Each app's store listing describes the data it collects. Where an app sends information to us, this policy applies to it.
AI providers
- Anthropic receives the photograph you scan and the text of the exchange; we do not send your account name or email address as account fields, but anything visible in the photograph or written in a message can reach it, to screen it for safety and write the reading. It is the only third party that ever receives a photograph. Anthropic's standard API policy deletes inputs and outputs within 30 days. Exceptions include different contractual arrangements, safety enforcement and legal requirements; for flagged usage-policy violations it may keep inputs and outputs for up to two years and safety classification scores for up to seven years. Anthropic's data retention policy.
No other third party receives what is listed here for an AI provider, and we do not promise that a provider deletes it sooner than its own policy says.
Who we share it with
Other people see only your display name, and anything you publish, such as an authored quest.
We share personal information only with service providers that run this website for us and the AI providers named above, under their obligation to protect it, or when the law requires it.
- Vultr — the servers that run Wanderlore
- Cloudflare — delivering and protecting our websites
- Resend — account and recovery email, which necessarily sees your email address
- Carto — map tiles: your device asks it for the map of the area on screen
- OpenStreetMap and Wikimedia (Wikipedia, Wikivoyage, Wikidata) — named places near a scan or a nearby search. They never receive your name, your account or a photograph, and Wikimedia receives only a point rounded to about a hundred metres
How long we keep it
- Messages you send us: as long as we need them to respond and keep a record of our correspondence.
- Analytics records: as long as we need them for statistics and security.
- Anything else: only as long as the purpose above requires, or the law requires. You can ask us to delete it sooner.
Your choices and rights
You can ask us what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Email [email protected] and we will respond within 30 days. How to ask for deletion is set out on our Data deletion page.
You can delete your account from inside the Wanderlore player or partner app, in your account settings. It cannot be undone.
Depending on where you live, including the EEA, the UK, California, you may have further rights over your information. We honour them on request, without asking you to prove which applies to you.
Children
This website is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has sent us information, contact us and we will delete it.
Security
The site is served only over HTTPS, and access to the information we hold is limited to the people and services that need it to do the work described here.
Changes to this policy
When we change what we collect or how we use it, we update this page and the effective date above.
Contact
Wanderlore LLC
[email protected]