Privacy Policy
Last updated: September 29, 2026
1. Who we are
Wallpaperz (wallpaperz.in) is run by Prasenjit, an individual developer in India, who is the data controller (“data fiduciary” under Indian law) for the personal data described here. You can reach us at contact@wallpaperz.in.
2. The short version
- You can browse and download wallpapers without an account.
- If you sign in, we get your email and basic profile from our sign-in provider, Clerk.
- AI prompts are sent to Stability AI to create your image. We don't store your prompts or images on our servers; we only log that a generation happened, so we can enforce limits.
- Payments are handled by Dodo Payments. We never see or store your card number.
- Free visitors see Google ads, and we use analytics to understand how the site is used. In the EU, EEA, UK and Switzerland we ask for your consent first.
- We don't sell your personal data for money.
3. Data we collect
Account data (if you sign in)
Your email address, name and profile picture (if provided by the sign-in method you choose, such as Google), a unique user ID, and sign-in and session information. This is collected and stored by Clerk on our behalf.
AI generator data
Your prompt and optional negative prompt are sent from our server to Stability AI, which generates the image and returns it to your browser. We don't save prompts or generated images; they disappear when you close or refresh the page, unless you download them. Stability AI processes prompts under its own terms and privacy policy.
Usage and plan records
In our database (Cloudflare D1) we store, for each generation, your user ID, the time and which allowance it used (free, Pro or credit). We also store your credit balance, plan and subscription status, renewal date, and payment references from Dodo Payments (customer ID, payment ID, product, amount and any refunds).
Payment data
When you buy, Dodo Payments (our Merchant of Record) collects your name, email, billing address and payment details. We receive order information but never your full card number.
Device, log and security data
Our host, Cloudflare, processes your IP address, browser and device type, pages requested and timestamps to deliver the site and protect it against attacks and abuse. Our image CDN, ImageKit, processes similar request data when it serves wallpapers.
Analytics
We use Google Analytics 4, Microsoft Clarity and Cloudflare Web Analytics to understand which pages are popular and where the site breaks. This includes pages viewed, approximate location (country/city), device and browser, referrer and interactions. Microsoft Clarity also records how you use the page (clicks, scrolling and mouse movement) as session replays and heatmaps; it masks text you type. Cloudflare Web Analytics doesn't use cookies.
In the EU, EEA, UK and Switzerland, Microsoft Clarity only loads after you consent. Google Analytics and AdSense use Google Consent Mode: until you consent they set no analytics or advertising cookies and send only limited, cookieless signals.
Advertising
Free visitors see ads from Google AdSense. Google and its partners may use cookies and similar identifiers to show ads, limit how often you see them, measure performance and, where allowed, personalise ads based on your visits to this and other sites. See the Cookie Policy. Pro and Lifetime members don't load the ad script.
Free visitors may also see a sponsor slot provided by SponsorAnySite, which loads a small script from sponsoranysite.com. It sets no cookies, and Pro and Lifetime members don't load it.
Things stored in your browser
Your light/dark theme choice, whether you dismissed the “install app” prompt, and a small cache are saved in your browser's local storage. They stay on your device.
When you contact us
If you email us, we get your email address and whatever you include in your message.
We don't ask for sensitive data (such as health, religion or government IDs), and we ask you not to include it in prompts or emails.
4. Why we use it (legal bases)
For visitors in the EU, EEA and UK, we rely on the following legal bases under the GDPR and UK GDPR.
| Purpose | Data | Legal basis |
|---|---|---|
| Accounts and sign-in | Account data | Contract |
| Generating AI images, enforcing limits, credits and plans | Prompts, usage and plan records | Contract |
| Taking payments, invoices, taxes and refunds | Payment data, plan records | Contract; legal obligation |
| Keeping the site secure and preventing abuse or fraud | Log and usage data | Legitimate interests |
| Answering your emails | Contact data | Legitimate interests; contract |
| Analytics (GA4, Clarity) | Analytics data, cookies | Consent (EU/EEA/UK/CH); legitimate interests elsewhere |
| Cookieless analytics (Cloudflare) | Aggregated usage data | Legitimate interests |
| Showing ads, including personalised ads | Advertising cookies and identifiers | Consent (EU/EEA/UK/CH) |
Where we rely on legitimate interests, it is to run a reliable, safe and affordable free service, and you can object (see Your rights). Where we rely on consent, you can withdraw it at any time.
5. Service providers
We share personal data only with providers that help us run Wallpaperz, only for the purposes above, or when the law requires it. Each has its own privacy policy:
| Provider | What it does | Privacy policy |
|---|---|---|
| Clerk | Sign-in and account management | clerk.com |
| Dodo Payments | Merchant of Record: checkout, billing, taxes, invoices, refunds | dodopayments.com |
| Stability AI | Generates AI images from your prompts | stability.ai |
| Cloudflare | Hosting (Workers), storage (R2), database (D1), security, cookieless analytics | cloudflare.com |
| ImageKit | Image storage and delivery (CDN) | imagekit.io |
| Google (AdSense, Analytics) | Advertising and analytics | policies.google.com |
| Microsoft Clarity | Analytics, heatmaps and session replay | privacy.microsoft.com |
| SponsorAnySite | Sponsor slot shown to free visitors | sponsoranysite.com |
| Gumroad | Sells our separate premium wallpaper packs | gumroad.com |
We may also disclose data if required by law, to protect our rights or users' safety, or as part of a transfer of the site to a new owner (who would have to respect this policy).
6. International transfers
Wallpaperz is run from India, and our providers process data in several countries, including the United States. When personal data from the EU, EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or the EU-U.S. Data Privacy Framework, as offered by each provider.
7. How long we keep data
- Account data: until you delete your account. Clerk removes it when the account is deleted.
- Prompts and generated images: not stored by us. Stability AI may keep them for a limited time under its own policy.
- Generation logs (user ID, time, allowance type): 90 days, then deleted automatically.
- Credit balances and plan status: while your account exists, or until you ask us to erase them. Deleting your account erases them automatically.
- Payment and invoice records: as long as tax and accounting laws require (typically up to 8 years), held by us and by Dodo Payments.
- Emails: as long as needed to handle your request, then up to 2 years for reference.
- Analytics and advertising data: as set by Google, Microsoft and Cloudflare (for Google Analytics, we use a retention period of 14 months or less).
- Security logs: short periods set by Cloudflare, usually days to weeks.
8. Your rights
Depending on where you live, you can ask us to:
- Access the personal data we hold about you and get a copy.
- Correct inaccurate data.
- Delete your data (“right to be forgotten”).
- Port your data to another service in a common format.
- Object to processing based on legitimate interests.
- Restrict processing while a concern is being resolved.
- Withdraw consent for analytics or ads at any time, without affecting earlier processing.
To use these rights, email contact@wallpaperz.in from your account email. We may need to confirm your identity. We'll respond within one month (30 days), or tell you if we need more time as allowed by law. It's free.
You also have the right to complain to your local data protection authority, for example your EU country's supervisory authority or, in the UK, the Information Commissioner's Office. We'd appreciate the chance to help first.
9. US state privacy rights (CCPA/CPRA)
If you live in California or another US state with a privacy law, you have the right to know what personal information we collect, to access, correct and delete it, and to not be discriminated against for using these rights.
- Categories we collect: identifiers (email, user ID, IP address), commercial information (purchases and plan), internet activity (pages viewed, interactions), approximate geolocation, and inferences used for advertising. We don't collect sensitive personal information for inferring characteristics about you.
- Sources: you, your browser, and the providers listed above.
- Selling and sharing: we don't sell personal information for money. However, letting Google show personalised ads using cookies may count as “sharing” for cross-context behavioural advertising (or a “sale” under some state laws). We don't knowingly sell or share data of anyone under 16.
How to opt out of sale/sharing
- Use the “Do not sell or share my personal information” option in the privacy message shown by Google on our site, where available in your state.
- Turn off personalised ads in Google Ad Settings and via the DAA opt-out tool.
- Use a browser that sends a Global Privacy Control (GPC) signal. We treat it as an opt-out and tell Google not to personalise ads or use your data for ad personalisation. Blocking third-party cookies also helps.
- Upgrade to Pro or Lifetime, which doesn't load ads at all.
- Or email contact@wallpaperz.in with “Do not sell or share” and we'll help. You can use an authorised agent to make a request on your behalf.
10. India (DPDP Act 2023)
If you are in India, you have the right under the Digital Personal Data Protection Act, 2023 to get a summary of the personal data we process and who we share it with, to correct, complete, update or erase it, to withdraw consent, to nominate someone to exercise your rights in case of death or incapacity, and to have your grievances addressed.
Our grievance contact is Prasenjit, at contact@wallpaperz.in. We aim to respond to grievances within 30 days. If you're not satisfied, you may approach the Data Protection Board of India.
11. Children
Wallpaperz is not directed to children under 13, and we don't knowingly collect personal information from them. Users aged 13 to 17 may only browse and download wallpapers with a parent's or guardian's permission; accounts, the AI generator and purchases are for adults (see the Terms). If you believe a child has given us personal data, email contact@wallpaperz.in and we'll delete it.
12. Security
We use HTTPS everywhere, rely on established providers for sign-in and payments so we never handle passwords or card numbers, keep the data we store to a minimum, and restrict access to our systems. No service is perfectly secure, but if a breach affects your data, we'll notify you and the authorities as the law requires.
13. Deleting your account
Sign in, open your profile menu, choose Manage account and delete your account from the security settings. Or email contact@wallpaperz.in from your account email and we'll delete it for you.
Deleting your account removes your Clerk profile (email, name and sign-in data) and ends any remaining credits or plan access. Records in our database are keyed to your user ID rather than your email; when the account is deleted we automatically erase your generation logs, credit balance and plan records and cancel any active subscription. We keep payment records, with your user ID removed, only as long as tax law requires.
14. Changes to this policy
We'll update this page when our practices change and revise the “Last updated” date. If a change is significant, we'll give notice on the site or by email.
15. Contact & grievances
For any privacy question or request, email contact@wallpaperz.in. We usually reply within 2–3 business days.