Privacy policy
Your data stays with you.
No accounts, no stored lists, no tracking without your consent. Here is exactly what happens with your data on Roamers List.
Who is responsible
The controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) is:
We have not appointed a data protection officer, because we are not legally required to.
The short version
- We do not have user accounts and we do not store your packing lists, luggage tag details or settings on our servers. They stay in your browser.
- Our fonts are hosted by us. Nothing is loaded from Google Fonts or other font services.
- Analytics (Google Analytics) runs only if you click "Accept all" in the cookie banner. You can change your choice at any time via "Cookie settings" in the footer.
- Like every website, our host processes technical access data (such as your IP address) to deliver the pages and keep them secure.
Hosting and server log files
This website runs on our own server, which we rent from Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The server is in Kuala Lumpur, Malaysia. Every request first passes through Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, which delivers the pages and protects the website against attacks. When you open a page, Cloudflare and our server automatically process information your browser sends: your IP address, date and time, the page requested, the referring page, the amount of data transferred, and your browser and operating system.
We need this data to deliver the website, to keep it stable and to detect and stop misuse. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). The log data is kept only as long as needed for these purposes and is not combined with other data. Hostinger and Cloudflare process this data on our behalf under data processing agreements (Art. 28 GDPR). Because the server is in Malaysia and Cloudflare is based in the USA, the data is processed outside the EU. Both agreements include the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR), and Cloudflare, Inc. is also certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). More information: Hostinger privacy policy and Cloudflare privacy policy.
Connections to this website are encrypted (TLS/HTTPS).
Cookies and storage in your browser
We do not set cookies for our own features. Instead, a few entries are saved in your browser's local storage, only so that the features you use work. They never leave your device unless you share a link yourself.
| Name | Purpose | How long |
|---|---|---|
rl_consent, rl_consent_date | Remembers your cookie choice and when you made it | Until you delete your browser data |
rl-theme | Remembers if you switched to dark mode | Until you switch back or delete your browser data |
rl-region | Remembers your shop region (EU, US, UK, other) for shop links | Until you change it or delete your browser data |
rl-checklist-v1 | Your packing checklist: answers, ticks, removed and own items | Until you delete your browser data |
rl-tag-v1 | Your luggage tag details, only if you tick "Remember my details" | Until you untick it, clear it or delete your browser data |
These entries are strictly necessary to provide the features you have asked for. The legal basis is § 25(2) no. 2 TDDDG and, for any personal data, Art. 6(1)(f) GDPR (our legitimate interest in working features). You can delete them at any time in your browser settings.
Google Analytics (only with your consent)
If you click "Accept all" in the cookie banner, we use Google Analytics 4, a web analytics service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). It helps us understand which pages are used, so we can improve the site. Google Analytics uses cookies and similar technologies to record, for example, pages viewed, time on page, device and browser type, approximate location (country/city) and how you arrived on the site. Google Analytics 4 does not log or store IP addresses. Advertising features and personalised ads are switched off.
Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without consent, Google Analytics is not loaded at all. You can withdraw your consent at any time with future effect via "Cookie settings" in the footer.
Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, on the basis of which the European Commission has found an adequate level of data protection (Art. 45 GDPR). Data is deleted automatically after the retention period set in our Google Analytics account (2 months). More information: Google privacy policy.
Our tools: checklist, luggage tag and share links
Packing checklist. Your answers, ticks and own items are processed only in your browser and saved in local storage (see above). If you create a share link, the whole list is packed into the part of the link after the "#" sign. Browsers do not send this part to our server, so the list goes directly from you to whoever you share the link with. Exports (Markdown, text, CSV) and printing also happen entirely on your device.
Luggage tag maker. The details you type are used only in your browser to draw the tag and the QR code. They are not sent to us. They are saved on your device only if you tick "Remember my details". The QR code contains your contact details as a contact card, so anyone who scans your printed tag can read them: only enter what you are happy for a finder to see.
Wandr city guides. The guides are ordinary web pages. No personal data is processed beyond the server log files described above.
Newsletter
Our newsletter has not started yet. The sign-up fields on the site do not store or send anything. Before it starts, we will add the details of the newsletter service and the double opt-in process here.
Shop links, booking links and maps
Our pages link to shops (such as Amazon), booking sites (such as Booking.com) and Google Maps. No data is transferred to these sites when you view our pages. Only when you click a link do you leave our site, and the provider's own privacy policy applies from then on.
Maps in Wandr guides. The interactive map in a guide is not loaded automatically. Only when you click "Show map" does your browser load map images (tiles) from the servers of the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The OpenStreetMap Foundation then receives your IP address and the usual technical data of a web request. The map software itself is hosted by us. Legal basis: your consent by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG). The United Kingdom has an adequacy decision of the European Commission (Art. 45 GDPR). More information: OpenStreetMap privacy policy.
Our shop links currently contain no affiliate or tracking codes. When partner programmes are approved, some links will become affiliate links; we will update this section before that happens.
Contacting us by email or phone
If you contact us, we process your details and your message to answer you. Legal basis: Art. 6(1)(b) GDPR where your message relates to a contract or a request, otherwise our legitimate interest in answering (Art. 6(1)(f) GDPR). We delete the data once your request is dealt with, unless legal retention periods apply. Our email is hosted by Google (Gmail).
Your rights
You have the right to access your personal data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing is based on your consent, you can withdraw it at any time with future effect (Art. 7(3)). To exercise these rights, contact us using the details above.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, ldi.nrw.de.
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
Changes to this policy
We update this policy when we add or change features. Last updated: November 2026.
Now pack the right things for your trip.
Answer four questions and get a packing list built for your trip in under a minute.