Cookie Policy

Wander Studio operates hellowanderstudio.com, a digital travel publisher offering personalized travel itineraries. The service is operated by Ana Laura Aguilar Castillo, an individual sole proprietor based in Costa Rica. If the business is later organized as a company, this policy will be updated to reflect the operating entity. Paid subscriptions are sold through Creem (operated by Armitage Labs OÜ) as Merchant of Record. Questions about this policy: hello@hellowanderstudio.com.

Cookies are small text files placed on your device by a website. Related technologies (localStorage, sessionStorage, pixels) are treated the same way in this policy. Cookies can be “first-party” (set by us) or “third-party” (set by another service we use), and “session” (deleted when you close your browser) or “persistent” (retained until they expire or you delete them).

3.1 Strictly necessary — authentication and security. When you create an account or sign in, our authentication provider (Supabase) sets first-party cookies/tokens that keep you signed in, protect your account, and route you correctly between pages. Without these, login and subscriber features cannot function. These include persistent tokens so you remain signed in between visits.

• ✦sb-<project>-auth-token (Supabase authentication session) — first-party, persistent, long-lived session cookie. It stores your signed-in session so you remain logged in between visits.

3.2 Strictly necessary — hosting and delivery. Our hosting provider (Vercel) may set technical cookies required to serve the site securely and reliably (e.g., load balancing, bot protection). These do not track you across other sites.

3.3 Third-party services you choose to use.

• ✦Google Sign-In:if you sign in with Google, Google sets cookies as part of the OAuth flow, governed by Google’s own privacy and cookie policies.
• ✦Creem checkout:payment is completed on Creem’s hosted checkout on their domain; cookies set there are governed by Creem’s policies. We never receive or store your card details.

3.4 What we do not use. We do not set advertising cookies, cross-site tracking cookies, or social-media pixels, and we do not sell personal data. We do not currently use analytics cookies.

If we later add analytics — for example, Vercel Analytics or a privacy-focused tool such as Plausible — this Section 3 will be updated to describe those cookies, and we will re-assess whether any additional consent mechanism is required before they are enabled.

You can delete or block cookies at any time through your browser settings; browser vendors publish instructions for doing so. Because every cookie we set is required for the service to function, blocking them will prevent sign-in and subscriber features from working, though you can still browse public pages. Signing out removes your authentication session.

Where EU/EEA or UK law applies, we rely on the strictly-necessary exemption for the cookies described above; processing of personal data associated with your account is described in our Privacy Policy. For visitors from Costa Rica and elsewhere, the Privacy Policy describes your rights and how to exercise them.

We may update this policy as the service evolves — for example, if we add analytics. The date above reflects the latest version; material changes will be flagged on this page.

Questions about cookies or privacy: hello@hellowanderstudio.com.