Apr 28, 2026

GDPR Notice

How Wallper processes personal data of users in the EEA, the UK, and Switzerland under the GDPR.

Overview

This GDPR Notice explains how Wallper handles personal data in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679) and the UK GDPR. It is intended for users in the European Economic Area (EEA), the United Kingdom, and Switzerland, and supplements our Privacy Policy.

Wallper acts as a data controller for the limited personal data we collect to license, deliver, and support the Wallper macOS application and its public wallpaper gallery.

What Personal Data We Process

Hardware identifier (HWID) bound to your license key.
IP address and approximate (country-level) geolocation derived from it.
Device and OS information (e.g., macOS version, app version, device name).
Purchase metadata from Stripe (transaction ID, country, last 4 digits) — not full card data.
Optional contact information you provide when emailing support.
Wallpapers and metadata you voluntarily submit to the public gallery.

Legal Bases

Contract — to deliver the Service, validate licenses, and process payments (Art. 6(1)(b)).
Legitimate interests — to keep the Service secure, prevent fraud, and improve performance (Art. 6(1)(f)).
Consent — for optional analytics, marketing emails, and public gallery submissions (Art. 6(1)(a)).
Legal obligation — to comply with tax, accounting, and law enforcement requirements (Art. 6(1)(c)).

Your Rights

If you are located in the EEA, the UK, or Switzerland, you have the rights set out in Articles 15–22 of the GDPR. We aim to respond to verified requests within one calendar month.

Right of access — confirm whether we process your data and obtain a copy.
Right to rectification — correct inaccurate or incomplete data.
Right to erasure — request deletion (subject to legal retention requirements).
Right to restrict processing — temporarily limit how we use your data.
Right to data portability — receive structured, machine-readable data.
Right to object — to processing based on legitimate interests or direct marketing.
Right not to be subject to solely automated decision-making with legal effects.
Right to withdraw consent at any time, without affecting prior lawful processing.

International Transfers

Some of our subprocessors are located outside the EEA/UK. Where data is transferred internationally, we rely on safeguards such as the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, and, where applicable, the EU–U.S. Data Privacy Framework.

Retention

License and purchase records — kept for the duration of the license plus the period required by tax and accounting law (typically up to 10 years).
Support correspondence — retained for as long as necessary to handle your request and a reasonable period afterwards.
Public gallery submissions — retained while the wallpaper remains published; metadata may be retained for moderation and abuse prevention.
Server logs and security telemetry — retained for a limited period (typically up to 90 days) unless required for investigations.

How to Exercise Your Rights

To exercise any of the rights described above, email support@wallper.app from the address used for your purchase or include enough information for us to verify your identity. If you have a complaint, you may also contact your local supervisory authority — for EU residents, the list is available on the European Data Protection Board website.