Wanderbase
Privacy policy
This policy explains how Wanderbase processes personal data through its public website and waitlist.
Last updated: July 14, 2026
Who controls your data
The data controller is Nistor A. Rares Constantin P.F.A., registered in Sector 1, Bucharest, Romania, under Trade Register number F40/2804/2021 and tax identification number 45146350. You can contact the controller at hello@wanderbase.io.
Who this policy covers
This policy covers visitors to the public website and people who join the waitlist.
Data we collect
When you join the waitlist, we collect your email address, language, form location, consent version and time, and available UTM campaign parameters. We also process limited request data to prevent abuse. For rate limiting, we use your IP address only to generate a one-way identifier; we do not store the original IP address. When you visit the public website, our analytics system records usage information such as page views, referring pages, browser and device categories, and approximate location. We do not use analytics data to identify you.
Why we process your data
We use your consent to manage your waitlist registration and send launch news and occasional product or travel updates. You can withdraw consent at any time. We rely on our legitimate interests to secure the form, prevent abuse, understand campaign attribution, and measure and improve the public website. Withdrawing consent does not affect processing completed before withdrawal.
Bot protection
We use Cloudflare Turnstile to protect the waitlist form from automated abuse. Cloudflare processes limited device and request information to determine whether a submission is legitimate.
Cookies and analytics
We use an internal analytics system to measure website traffic and understand how visitors use the public website. The system operates without cookies and is not used by Wanderbase to identify visitors. The analytics records may include visited pages, referring pages, browser and device categories, approximate location, and request time.
Service providers
We use Microsoft Azure for data storage, application services, and email delivery, Cloudflare for website delivery and security, Zoho for email services, and OVHcloud for analytics infrastructure. These providers process data only to supply their contracted services and may use approved subprocessors.
Where we process data
We and our service providers primarily process data within the European Economic Area. Some providers or their subprocessors may process limited data outside the European Economic Area. Where required, these transfers rely on an adequacy decision, Standard Contractual Clauses or another safeguard recognized by applicable law.
How long we keep data
We keep your active waitlist record until you unsubscribe or ask us to delete it. We use a two-day retention window for rate-limiting hashes and remove stale records during subsequent rate-limit processing. Legal obligations or the establishment, exercise or defense of claims may require limited records to be kept longer.
Your rights
Subject to applicable law, you can request access, correction, deletion, restriction or portability of your data. You can also object to processing based on legitimate interests and withdraw consent at any time. You have the right to lodge a complaint with the Romanian data protection authority or another competent supervisory authority.
Unsubscribing and contacting us
Each marketing email will include an unsubscribe option. If the option does not work, email hello@wanderbase.io to unsubscribe or exercise your privacy rights.
Policy changes
We may update this policy when our services or legal obligations change. We will revise the date above and provide additional notice when a material change requires it.