Privacy Policy

Last updated: May 15, 2026

1. Introduction

This Privacy Policy explains how the Custom Wallpaper application ("we", "our", or "us") collects, uses, stores, and protects your personal data when you use our Service. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area, the California Consumer Privacy Act (CCPA) for users in California, the Act on the Protection of Personal Information (APPI) for users in Japan, and the Personal Information Protection Act (PIPA) for users in South Korea.

2. Data We Collect

Information you provide:

Uploaded images: Digital wallpaper images you choose to upload, crop, and submit through the Service.
Device token: A token used to authenticate your session and associate uploaded content with your device.

Information collected automatically:

Usage data: File metadata (file name, type, size, upload timestamp), connection status, and feature interactions.
Device information: Browser type and version, operating system, and IP address (in server logs).
Local storage data: We use browser local storage to remember your connection token and upload history. This data stays on your device and can be cleared at any time.

3. How We Use Your Data

We use your data for the following purposes:

To process and deliver your uploaded wallpaper images to your device
To resize, crop, and convert images (including GIF-to-AVI conversion)
To perform automated content moderation to detect prohibited content
To maintain your upload history for re-upload convenience
To authenticate your device connection
To improve and troubleshoot the Service
To comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, our legal basis for processing your personal data is:

Performance of a contract (Article 6(1)(b)): Processing is necessary to provide the Service to you.
Legitimate interests (Article 6(1)(f)): Processing for service improvement, security, and fraud prevention.
Consent (Article 6(1)(a)): Where required by law, we will obtain your consent before processing your data.

5. Third-Party Services

We use the following third-party service providers:

Amazon Web Services (AWS)

We use AWS S3 for image storage and AWS Rekognition for automated content moderation. Images are processed and stored on AWS servers. AWS is Privacy Shield certified and complies with GDPR, APPI, PIPA, and other international data protection standards. Data may be transferred to and processed in AWS regions outside your country of residence.

We do not sell your personal data to third parties. We do not share your uploaded images with any third party except as necessary to provide the Service.

6. Data Retention

We retain your uploaded images and associated metadata for as long as necessary to provide the Service to you. Upload history is retained locally in your browser and can be cleared at any time. Images stored on our servers may be retained for a reasonable period to allow for re-upload functionality. You may request deletion of your data at any time by contacting us.

Server logs containing IP addresses are retained for a maximum of 30 days for security and troubleshooting purposes.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including Japan (where the service operator is based) and the United States (where AWS servers are located). When transferring data from the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission. For transfers involving Japan, we comply with APPI requirements. For transfers involving South Korea, we comply with PIPA requirements.

8. Content Moderation

All uploaded images are automatically scanned using AWS Rekognition to detect prohibited content as outlined in our Terms of Service. This moderation is performed in real-time at the time of upload. Images flagged as containing prohibited content are rejected and not stored. We do not use your images to train or improve content moderation models beyond the immediate purpose of screening your upload.

9. Your Rights

Under the GDPR (EEA users):

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time
Right to lodge a complaint with your local data protection authority

Under the CCPA (California users):

Right to know what personal information is collected, used, and shared
Right to delete personal information
Right to opt out of the sale of personal information (we do not sell data)
Right to non-discrimination for exercising your CCPA rights

Under the APPI (Japan users):

Right to be notified of the purpose of data usage
Right to request disclosure of retained personal data
Right to request correction or deletion of data
Right to request cessation of use of personal data

Under the PIPA (South Korea users):

Right to consent to collection and use of personal information
Right to access personal information
Right to request correction or deletion
Right to request suspension of processing
Right to appoint an agent for privacy rights

To exercise any of these rights, please contact us using the information below. We will respond to your request within the timeframe required by applicable law (generally 30 days).

10. Cookies and Local Storage

The Service does not use cookies for tracking or analytics. We use a preference cookie to remember your selected language so pages open in that language. We also use browser local storage to persist your device connection token and upload history locally on your device. This data is stored entirely on your device and is not transmitted to us except as part of normal Service operation. You can clear this data at any time through your browser settings or by using the "Clear All" function within the Service.

11. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS) and at rest (AWS S3 server-side encryption). However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

12. Children's Privacy

The Service is not directed at children under the age of 16 (or the age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly. If you believe a child has provided us with personal data, please contact us.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may provide additional notice through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us by submitting an issue through our repository or by reaching out through the contact information provided in the application.

For GDPR-related inquiries, you may also contact your local data protection authority. For APPI-related inquiries, you may contact the Personal Information Protection Commission of Japan. For PIPA-related inquiries, you may contact the Personal Information Protection Commission of South Korea.