Privacy Policy

This policy explains what data is processed when you use Wallpaper Foundry. In short: there are no accounts, no cookies, no analytics, no advertising and no tracking. Data is processed where it is technically needed to deliver the website (by our hosting provider Cloudflare) and when you email us.

1. Who is responsible

The controller responsible for data processing on this website is Christian Schindler. The postal address is listed in the Imprint. You can reach us by email at info@wallpaperfoundry.com.

2. Hosting and delivery

Wallpaper Foundry consists of pre-built pages. Pages, images and search files are delivered by Cloudflare (Cloudflare Workers with Workers Static Assets). A small program running on Cloudflare also answers a few dynamic addresses: the wallpaper download (/api/download/…) and lists of random, curated and popular wallpapers. Cloudflare also provides the DNS for our domain.

What Cloudflare processes. Every request from your browser passes through Cloudflare's network. To deliver the website and protect it, Cloudflare can process technical data about each request, in particular:

• your IP address
• the date and time of the request
• the requested address (URL)
• the user agent sent by your browser (browser and operating system)
• other technical request and security data needed to route and protect traffic

How long Cloudflare keeps this data is governed by Cloudflare's privacy policy. Cloudflare states that it keeps personal information as long as needed for the purposes described there or to meet legal obligations.

What we store ourselves. We do not keep request logs. Cloudflare's optional Workers Logs feature, which would save request details in our Cloudflare account, is switched off for our website. Apart from emails you send us (section 6), the only data we store is the download counter described in section 3.

Wallpaper files. The original wallpaper files are kept in private Cloudflare R2 storage that has no public address. When you download a wallpaper, the file is delivered through our own download address.

The legal basis for processing necessary to operate, secure and reliably deliver the website is our legitimate interest in providing a secure and functional service (Art. 6(1)(f) GDPR).

3. Download counter

When you download a wallpaper, a counter for that wallpaper is increased by one. The counter is stored in a Cloudflare D1 database and contains exactly two values per wallpaper: the wallpaper's ID and the total number of downloads. No IP address, cookie, session, user ID or time of download is stored with it, so the counter cannot be linked to you. We use the totals to show popular wallpapers on the home page. They are kept for as long as the website is operated.

The download request itself is handled by Cloudflare like any other request (see section 2). Apart from increasing the total, nothing from the request is saved.

4. Search

Search runs in your browser. The search index is loaded as a file from our website, and your search terms are matched on your device. They are not sent anywhere.

One exception: if you use a search box that takes you to the Discover page, your search term becomes part of the page address (for example /discover/?q=sunset). That address is sent to Cloudflare like any other page request (see section 2). We do not store it.

5. Sharing

The share button offers several ways to share a wallpaper:

• Your device's share menu. The link is handed to your device's built-in share dialog. We do not send it to anyone; what happens next depends on the app you choose.
• Copy link. The link is copied to your clipboard. It stays on your device.
• WhatsApp, Telegram, X and email. These are ordinary links. The service is only contacted when you click one of them, and its own privacy policy then applies. The email link opens your own email app.

6. Contacting us by email

Our address info@wallpaperfoundry.com uses Cloudflare Email Routing, which forwards incoming messages to a Gmail mailbox provided by Google. If you email us, we process your email address, the content of your message, any details you choose to include and technical email data (such as sender, recipient and delivery information). We use this only to answer your request.

For general enquiries, the legal basis is our legitimate interest in responding to messages and operating our service (Art. 6(1)(f) GDPR). Where your message relates to a contract or steps requested before entering into a contract, Art. 6(1)(b) GDPR may apply.

Cloudflare keeps an activity log for forwarded mail, showing delivery events (for example whether a message was forwarded or rejected) and the results of standard sender checks (SPF, DKIM, DMARC). Google processes the messages as part of its Gmail service; see Google's privacy policy.

We delete your messages once they are no longer needed, unless legal retention obligations require us to keep them.

7. Cookies and browser storage

This website does not set cookies and does not use local storage, session storage or any other browser storage.

8. No analytics or advertising

We currently use no analytics tools, tracking pixels, advertising or newsletter services. The website loads no content from third parties: text is shown in your device's system fonts, all images come from our own website, and there are no embedded videos, maps or social media widgets. If we ever want to add analytics, advertising or similar features, we will update this policy before introducing them.

9. Service providers and international transfers

Cloudflare (hosting, file storage, download counter, DNS, email forwarding). Where Cloudflare processes personal data on our behalf, it does so under its Customer Data Processing Addendum. Cloudflare's privacy policy explains for which data Cloudflare is itself responsible. For transfers from the EEA, Switzerland and the UK to the United States, Cloudflare relies on its certifications under the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. Data Privacy Framework. Should these lapse, Cloudflare relies on the EU standard contractual clauses, with supplementary measures where necessary.

Google (Gmail mailbox for emails you send us). Google states that it may process data on servers outside your country and applies the same protections wherever data is processed. For international transfers, Google states that it complies with the EU-U.S. and Swiss-U.S. Data Privacy Frameworks and the UK Extension, and also relies on adequacy decisions (see Google's data transfer frameworks).

10. Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data deleted (Art. 17)
• restrict processing (Art. 18)
• receive your data in a portable format, where applicable (Art. 20)
• object to processing based on legitimate interests (Art. 21)

To exercise these rights, email info@wallpaperfoundry.com. Please note that we keep no request logs and the download counter contains no personal data, so apart from emails you have sent us we usually hold no data that can be linked to you. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

11. Changes to this policy

We will update this policy when the website changes, in particular before adding any new service that processes personal data. The date at the top shows when it was last changed.