Privacy Policy

This Privacy Policy explains how WallpaperFeed ("we", "us") collects, uses and protects information when you visit wallpaperfeed.com. By using the Website you agree to the practices described here.

1. Information we collect

Account data (Personal Data)

When you register we collect your username, email address and a securely hashed (bcrypt) version of your password. We never store plain-text passwords.

Automatically collected data

When you visit the Website we automatically record:

Your IP address
Browser type, version and language, and your operating system and device type
Pages visited and time spent on the Website
Referring website

If you are signed in, some of this is linked to your account. We keep the following records against your user ID:

Sign-in history — date, IP address and browser for each successful sign-in
Failed sign-in attempts — the name or email tried, IP address and browser, used to detect password-guessing
Downloads — which wallpaper, at which size, from which IP address and browser
Searches — the terms you searched for and the IP address you searched from
RSS feed access — if you use a personal feed token
Account changes — an audit record when your email, password or content settings change, or when a moderator acts on your account
Changes to a wallpaper — when you edit or delete one of your uploads we record what changed, when, and from which IP address. This is what lets us settle a later dispute over authorship or a takedown request.

We keep these to operate the service, to enforce our rate limits, and to investigate abuse such as scraping, bulk downloading and account takeover. Under the GDPR an IP address is Personal Data, and we treat it as such.

Page-view logs are recorded against an IP address without a user ID and are not linked back to your account.

Upload and interaction data

Wallpapers you upload, likes you give, collections you create and reports you submit are stored linked to your account.

Automated processing of uploads

When a wallpaper is uploaded, the image is sent to Anthropic (Claude) to suggest a title, description and tags, and to help flag content that needs review. We also run a local image-tagging model on our own servers. No account details are sent with the image — only the image itself. Anthropic does not use data submitted through its API to train its models.

We also generate a perceptual fingerprint of every upload so we can detect duplicates, and a quality score based on resolution, image detail, aspect ratio, metadata and engagement.

Publicly shared information

When you register, other users can see your username and any content you post publicly (uploads, collection names, profile information you choose to share). We have no ability to control how publicly shared information is used once it is visible to others. We recommend not using your real name as a username if you wish to remain anonymous.

2. Cookies

We use the following cookies and similar technologies:

Session cookie (first-party, strictly necessary) — keeps you logged in during your visit. Deleted when you close your browser.
Theme preference (localStorage) — remembers your light/dark mode choice. Not transmitted to any server.
Cookie consent (localStorage) — remembers whether you accepted or declined analytics cookies.
Google Analytics cookies (_ga, _gid — persistent, third-party) — only set after you click "Accept" in our cookie banner. Used to collect anonymised usage statistics.

Most browsers allow you to control or block cookies via settings. Note that disabling strictly necessary cookies may affect site functionality.

You can change your cookie preference at any time:

3. Google Analytics

With your consent we use Google Analytics 4, operated by Google LLC. Google Analytics collects anonymised data about how visitors use the Website (pages visited, session duration, approximate location, browser and device type). We use this data solely to understand and improve the Website. Google Analytics uses first-party cookies linked to this domain only.

Google's ability to use data collected by Google Analytics is governed by the Google Analytics Terms of Use and Google Privacy Policy. To opt out across all websites, install the Google Analytics Opt-out Browser Add-on.

4. Why we collect information

We use the information we collect to:

Operate and deliver the WallpaperFeed service
Allow you to log in, upload wallpapers and manage your account
Send password-reset emails when requested
Detect and prevent abuse, spam and copyright violations
Understand how the Website is used and improve it (analytics, with consent only)
Enforce these Terms and comply with legal obligations

5. How long we retain your data

We keep your account data for as long as your account exists. Beyond that:

Sign-in history, failed sign-ins, downloads, searches and feed access — 12 months, then deleted
Page-view logs — 6 months, then deleted
Account change and wallpaper change audit records — 24 months, because they are what lets us investigate a disputed account takeover or a contested upload
Wallpapers you delete — removed from the site immediately; the image files are erased 30 days later, so an accidental deletion can still be undone in that window
Unverified accounts — if you never confirm your email address, the account is anonymised automatically after 7 days
Google Analytics — 14 months

What happens when you delete your account

You can delete your account yourself from your account settings. We want to be precise about what that does, because "delete" is often used loosely:

Erased immediately: your username, email address, password, avatar, cover image, biography and feed token, plus your sign-in history, failed sign-in records, download history, search history and notifications.

Kept: wallpapers you uploaded, and the likes and collections other people made from them. These are detached from you and shown under a deleted account that no longer names you. We do this so that other Users' pages do not break. If you want a wallpaper gone entirely, delete it yourself first from its page — you cannot reach your uploads once the account is gone.

We may retain records where the law requires it, or where we need them to handle an ongoing abuse or copyright matter.

6. Children's privacy

WallpaperFeed is not directed to children under 13. We do not knowingly collect Personal Data from anyone under 13. If we become aware that we have collected data from a child under 13 without parental consent, we will delete it promptly.

7. Who we share data with

We do not sell your Personal Data. The parties below process data on our behalf or as part of delivering the Website:

Cloudflare, Inc. — sits in front of the Website as a proxy and security layer, so it processes every request, including your IP address, browser and the pages you request. Used to serve the site quickly and to block attacks.
Cloudflare Turnstile — a bot check shown when you register or upload. It processes your IP address and browser signals to tell humans from automated scripts. It is not an advertising tracker.
Anthropic PBC — receives uploaded images to generate titles, descriptions and tags and to help flag content for review. It receives the image only, not your account details.
Google LLC — analytics data, only after you consent in the cookie banner.
Our hosting provider — stores the database, uploaded images and email. Email for verification and password resets is sent from our own mail server, not a third-party mailing service.
Law enforcement or authorities — when required by law, regulation or valid legal process.
In a business transfer — if WallpaperFeed or substantially all of its assets are transferred or merged, user data may be among the transferred assets.

8. Security

We implement commercially reasonable measures to protect your Personal Data:

Administrative — access to Personal Data is limited to authorised personnel with a legitimate need
Technical — passwords are hashed (bcrypt); data is transmitted over HTTPS/TLS
Physical — data is stored on servers at reputable hosting providers with controlled access

We cannot guarantee absolute security and are not liable for unauthorised access resulting from circumstances beyond our reasonable control.

9. International data transfers

Our servers may be located outside your country of residence. By using the Website you consent to the transfer and storage of your data in those locations. Where Personal Data is transferred outside the EEA, we ensure appropriate safeguards are in place.

10. Your rights (GDPR)

If you are in the European Economic Area, you have the following rights regarding your Personal Data:

Access — request a copy of your data
Rectification — request correction of inaccurate data
Erasure — request deletion of your data ("right to be forgotten")
Restriction — request that we limit processing of your data
Portability — receive your data in a structured, machine-readable format
Objection — object to processing based on legitimate interests
Withdraw consent — withdraw analytics consent at any time via

You can exercise the most common ones yourself: change your email address or password in settings, and delete your account from account settings. For anything else, contact us at [email protected]. We will respond within 30 days, and we do not charge for this.

If you think we have handled your data improperly, you are entitled to complain to a data protection authority. WallpaperFeed is operated from the Netherlands, so that is the Autoriteit Persoonsgegevens; if you live elsewhere in the EEA you may also complain to your own national authority.

Why we are allowed to process your data

Under Article 6 of the GDPR we rely on:

Performance of a contract — your account, uploads, likes and collections. Without this data there is no account.
Legitimate interests — sign-in history, download and search records, rate limiting and bot checks, all of which exist to keep the service available and to stop abuse. You may object to this processing.
Consent — analytics cookies only, and you can withdraw it at any time.
Legal obligation — where we must retain or disclose data by law.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date. Continued use of the Website after changes constitutes acceptance of the revised Policy.

12. Contact

Questions or concerns about this Privacy Policy? Contact us at [email protected].