Privacy notice

How Wildpal handles your information.

Current v1.12 · Effective 25 October 2026.

Who is responsible

Dmytro Borysenko, trading as Wildpal, is the controller responsible for Wildpal. You can contact Wildpal about privacy at [email protected] or by post at Dmytro Borysenko trading as Wildpal, Unit 173640, PO Box 7169, Poole, BH15 9EL, United Kingdom.

Who may use Wildpal

Wildpal is intended for people aged 18 or over who are resident in the United Kingdom. Wildpal currently supports UK experiences only. Before creating an active account, users must confirm their age, UK residency and acceptance of the then-current Terms and Privacy Notice. We also limit access based on the country of a visitor’s internet connection; this does not establish residency and can prevent UK residents from using Wildpal while abroad.

Information we use

Depending on how you use Wildpal, this can include your Google account identifier, email address, display name, profile photo, biography, approximate location, interests, notification preferences and browser time zone. If you host or join an experience, it can also include experience details, participation requests and their status, and group-chat messages. Reviews, reports and moderation notes may contain information you choose to provide. Exact meeting locations are restricted to the host and approved participants.

Why we use it

We use information for the following purposes and legal bases:

• To provide the service you request — creating and administering accounts, profiles, experiences, participation, group chat and requested service emails. We use your saved browser time zone to show experience times and format relevant service emails in your local time. Our legal basis is performance of our contract with you, or taking steps at your request before entering into it.
• To operate and protect Wildpal — keeping the service reliable and secure, responding to support requests, investigating reports, moderating content and accounts, and preserving proportionate evidence where needed. Our legal basis is our legitimate interests in operating a safe, reliable community service and protecting people and Wildpal from misuse.
• To comply with a legal obligation — where a law requires us to use or retain information.
• For optional analytics and browser diagnostics — Cloudflare Web Analytics, Google Analytics and Sentry browser reporting. Our legal basis is your consent, which you can withdraw at any time in Cookie Settings.

Who can see it

Your public profile may show the identity and information you choose to share. Experience listings show broad rather than precise locations. Hosts and approved participants can see the information needed to coordinate their experience. If you withdraw a pending request or leave an approved place before it starts, your access to the exact meeting details and group chat ends immediately; the host can see that status to manage the experience. A review's rating contributes to the host's public aggregate when submitted; its public comment appears where the host's profile visibility permits it, without identifying the reviewer. The host receives an email containing the rating and public comment. Administrators can access restricted review and moderation information to handle reports and protect users.

Service providers and transfers

Wildpal uses the following providers:

• Google provides Google Identity Services for sign-in and Google Maps Platform for interactive maps and place search. Google receives the information needed to provide those features, including Google account information when you sign in and technical information when you use maps. Read Google’s Privacy Policy and its information on international transfers.
• Google Analytics measures page visits, completed sign-ups, hosting starts, successful publications and place requests, alongside public, non-personal campaign labels, after you enable analytics in Cookie Settings. It receives cookie-based browser/session identifiers, general page categories, external referring sites (without paths or queries) and device/connection information; Google uses your IP address to derive approximate geography. We do not send account identifiers, raw page titles, query strings, full referring URLs, private content or precise locations, and do not enable advertising features or Google Signals. This data is pseudonymous, not anonymous. Google may process it outside the UK under its data-processing terms and applicable UK-transfer safeguards.
• Hetzner provides the cloud virtual machine in Falkenstein, Germany that hosts Wildpal’s web application, API and database. Hetzner therefore processes the information stored and transmitted through those systems on our instructions. Read Hetzner’s data-protection information.
• Resend provides transactional email delivery. It receives recipient email addresses, message content and delivery/log data to send service emails. Resend states that it stores this data in the United States. Its current standard plans retain email and log data for 30 days; its Data Processing Addendum incorporates safeguards for UK transfers. Read Resend’s GDPR information and Data Processing Addendum.
• Cloudflare provides delivery, security and network services. It receives connection and technical request information and may derive an approximate country code from your connection. Wildpal uses that code to limit production access to connections from the United Kingdom and does not store the code. Cloudflare Web Analytics is provided only when you enable analytics in Cookie Settings. Read Cloudflare’s Privacy Policy and Data Processing Addendum.
• Sentry provides server diagnostics and, only when you enable browser diagnostics in Cookie Settings, browser error reporting. We configure it to remove personal and request content before reports are sent. Read Sentry’s Privacy Policy and Data Processing Addendum.

Some providers may process information outside the UK. Resend processes stored customer data in the United States; its Data Processing Addendum uses the UK Addendum to the Standard Contractual Clauses for UK transfers. You can ask us for information about those safeguards at [email protected]. We keep this notice aligned with the live provider configuration, including any relevant subprocessors, regions, retention settings and transfer safeguards.

How long we plan to keep information

We keep account, profile and service information while your account is active. You can permanently delete your account from Preferences. We remove your account credentials, profile, photo, preferences, legal acceptance and participation records immediately, and email a confirmation. Future experiences you host are cancelled. Service-email queue entries are deleted after delivery or abandoned retries, within seven days; on account deletion, we remove queued messages before queuing the confirmation. Where necessary to preserve listings, published public reviews, safety or moderation evidence, we retain pseudonymised records that no longer display your identity or contact details unless a legal obligation or active claim requires longer retention. Group chat messages and read state are deleted 90 days after an experience ends. Experience membership and participation requests are kept while the relevant account remains active. Safety-report emails and restricted moderation evidence are deleted or pseudonymised 12 months after the relevant decision, unless a legal obligation or active claim requires longer retention.

Google Analytics cookies last up to 30 days without automatic renewal. Our retention policy for Google Analytics user/event data is two months without resetting on new activity; aggregate reports may remain longer. Withdrawing analytics consent stops further collection and clears accessible analytics cookies, but does not automatically erase earlier data. Account deletion does not identify or delete this separate browser-based data; contact us for access or deletion requests. We may need the analytics browser identifier to locate it.

Your choices and rights

You can ask to access, correct, erase or restrict use of your personal information, or request portability where applicable. You can withdraw optional consent at any time in Cookie Settings. Email [email protected]; please include enough information for us to verify and handle your request.

Your right to object: you may object at any time to our use of your personal information where we rely on legitimate interests. We will stop unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or we need the information for legal claims.

Wildpal does not make decisions about you solely by automated means that have legal or similarly significant effects.

Data protection complaints

If you believe that Wildpal has handled your personal information incorrectly, email [email protected] with the subject “Wildpal data protection complaint”. We will acknowledge receipt within 30 days, make appropriate enquiries, keep you informed, and tell you the outcome without undue delay. If you remain unhappy, you can complain to the UK Information Commissioner’s Office.

Cookies and similar technologies

Wildpal uses an essential authentication cookie when you sign in and local browser storage to remember your cookie choices. Google Identity Services and Maps load when you use their related features. Cloudflare Web Analytics, Google Analytics and Sentry browser diagnostics load only when you choose their optional purposes in Cookie Settings. Read the Cookie Notice or change your choice on that page.

Changes to this notice

We will publish a dated version of this notice before requiring acceptance. Material changes will be communicated where appropriate.