Wayward Route

Last updated 2026-09-26

Privacy policy

Wayward Route uses your information to create, save, and deliver your trip plans, manage your account and purchases, and respond to support requests. This policy describes the information handled by the website and the services it uses.

Information we handle

  • Account: your sign-in identifier, email address, and account ID. Firebase Authentication handles passwords and Google sign-in; we do not store your password in our trip database.
  • Trips: the places you enter, travel dates, trip length, rig type and dimensions, number of adults, children’s ages if supplied, driving pace, interests, the previews, itineraries, and PDFs generated from them, and booking confirmations and notes you choose to save. Do not enter a home address or other sensitive detail unless needed for your plan.
  • Purchases: Stripe customer, checkout, and subscription identifiers, purchase and access status. Stripe handles payment details; Wayward Route does not receive or store your full card number.
  • Technical data: security and service logs, such as request times, IP addresses, errors, and browser information, may be processed by our hosting and authentication providers. Counters limit preview and revision requests; guest protection uses a daily hash of the network IP address. We record planning, checkout, purchase, refund, and delivery events and campaign parameters to measure service reliability and acquisition.

How we use and share it

We use trip inputs to calculate routes, find places, prepare plans, and generate PDF copies. We send the location information needed for geocoding and routing to Geoapify, location and date information to the National Weather Service or Open-Meteo for weather, and a limited itinerary brief to Cloudflare’s AI service for trip prose. OpenStreetMap supplies visible map tiles, which expose the viewed map area and your browser network request to that service. Cloudflare Email Service sends trip-ready messages to verified account email addresses when sending is enabled. Cloudflare hosts the site and stores account-linked trip records and PDFs. Firebase provides sign-in, and Stripe processes payments and billing. These providers process data to deliver their services. We may disclose information when required by law or to protect the service. We do not sell your trip plans or personal information to advertisers.

Storage and choices

Authentication uses browser storage to keep you signed in. A secure guest cookie keeps previews available in the same browser for up to 30 days; signing in claims those trips. Session storage preserves form drafts and acquisition parameters. Guest trips may be retained until routine cleanup or a deletion request. Your account-linked plans and PDFs stay available while your account remains open. Payment records and service logs may be kept longer when needed for accounting, security, disputes, or legal obligations. To request a copy of your information, correct account information, or request account and trip deletion, email support@waywardroute.com. We will verify the request and explain any records we must retain. Canceling a subscription does not delete your account or trips; see refunds and cancellation.

Security and children

We limit trip access to the signed-in account or the guest browser cookie. If you create a companion link, anyone holding it can read the current itinerary until you revoke it or it expires after 30 days. Companion views exclude private booking confirmations and notes. We use service providers to protect and operate the app. No online service can promise absolute security. Wayward Route is for adults planning travel; it is not designed for children to create accounts. Children’s ages are optional trip-planning inputs, not child profiles.

Changes

We may update this policy as the service changes. The date above shows the latest version. Material changes will be communicated through the website or by email when appropriate.

Questions? Email support@waywardroute.com.