Privacy Policy

Your email address when you join the waitlist or sign in. The entries you write — body text, tags, source URLs, and edit history. When you save a link, the page context Wandel builds for it: a short excerpt around your capture, a summary of the page, and details such as its title, author and publish date. If you add your own AI key, the key itself. For Wandel AI, a count of the AI actions your account has used each day, by feature, with an estimate of what they cost us — never the text they were about. Basic usage events (pages visited, features used) via PostHog analytics.

Entry bodies and all associated data, including page context, are stored as plaintext in Supabase. There is no application-level encryption — only Supabase's standard disk-level encryption protects data at rest. This means Wandel operators and Supabase administrators could technically access your entries. We don't, but you should know it's possible. If you write highly sensitive material, consider that before using the app.

The one exception is an AI key you add. It is encrypted before it is stored, it is never shown again after you save it, and it is never sent back to your browser.

To operate your account, send sign-in emails, and improve the product. We do not sell your data. Wandel does not use your entries, saved pages or summaries to train AI models.

When AI is on, Wandel sends text to an AI provider for three jobs. To decide whether an entry is a TIL or a TID, it sends up to 800 characters of the entry. To suggest tags, it sends up to 400 characters of the entry and the names of tags you already use. To summarise a saved page, it sends the entry and up to about 24,000 characters of the page's text.

By default these requests go to Anthropic, using Wandel's own account. If you add your own key in Settings, they go to the provider you chose — Anthropic, OpenAI or Google — using your key instead, and Wandel's account is not used. Each provider handles what it receives under its own terms. Your key is decrypted on our servers only for the moment of a request. You can remove it in Settings at any time, and removing it deletes it.

Accounts without a beta invite or their own key get 20 Wandel AI actions a day, which reset at midnight UTC. When they run out, AI steps aside until the reset and your entries still save as usual. Your own key has no limit from us.

If you have neither your own key nor Wandel AI, no AI features run and nothing is sent to any AI provider. Your entries still save.

When you save a link, Wandel can read that page to build context for it. This happens in one of three ways.

From our servers. Wandel fetches the public page anonymously, with no cookies and no login. It will not fetch addresses on private networks.

From the page you're on. With the Chrome extension, the page text is read in your own browser when you capture something. The main text of the page is included only if you turn on full-page text in the extension.

With your browser session. For a saved link behind a login, you can ask the extension to read it in your browser. Chrome asks you to allow that one site, and the page is read and parsed on your device.

In the last two cases Wandel receives only extracted text and descriptive details — title, author, date, site name, and up to 60,000 characters of text. Cookies, passwords, form entries, raw page code and other tabs are never sent. Pages on mail, banking, health, messaging, document and similar sites are excluded, you can add your own exclusions, and you can turn page context off in Settings or for a single capture. Full-page text and reading links with your login are switched on only from the extension popup, never from the web app. Links saved without a browser, such as from the iOS Shortcut, have no login to use, so a page behind a login keeps only its title and description. Page context is stored with the entry and deleted with it.

The extension reads the page you are on only when you capture something. It asks for access to other sites one at a time, only when you ask it to read a saved link, and you can withdraw that access in Chrome's extension settings. Usage events from the extension are sent to Wandel's server, which relays them to PostHog.

Supabase stores your data. Vercel hosts the app. Anthropic receives the text described under AI features — governed by their privacy policy. If you add your own key, OpenAI (privacy policy) or Google (privacy policy) may receive it instead, and only for the key you added. Resend delivers transactional emails. PostHog collects anonymised usage data.

Wandel+ payments are handled by Stripe. Stripe collects your payment details and billing address on its own checkout page. Wandel never sees or stores your card number.

Wandel keeps only what it needs to run your subscription: your Stripe customer and subscription ids, your plan, the renewal date and the subscription status. Nothing else from Stripe is stored.

Stripe keeps invoices and tax records for as long as tax law requires, even after you cancel or delete your account. Data that Stripe controls is covered by Stripe's privacy policy.

If you delete your account while you have an active subscription, Wandel cancels the subscription first, so you are not billed again.

Searching your log runs against your own entries only: first on the entries already loaded in your browser, then on Wandel's database. Your search text is not sent to an AI provider. A few preferences, such as your theme and whether the header shows your streak or your total, are kept in your browser's local storage and never sent to us.

Deleted entries stay in your Deleted list for 30 days so you can restore them, then are removed permanently. You can remove one sooner from there. Page context and summaries are removed with their entry. Deleting your account removes all your data immediately. You can export everything from Settings at any time.

Questions? hello@wndl.app